@InProceedings{2020NetSoft,
  author    = {Bringhenti, D. and Marchetto, G. and Sisto, R. and Valenza, F. and Yusupov, J.},
  booktitle = {Proceedings of the 6th {IEEE} Conference on Network Softwarization (NetSoft 2020)},
  title     = {Introducing programmability and automation in the synthesis of virtual firewall rules},
  year      = {2020},
  pages     = {473-478},
  abstract  = {The rise of new forms of cyber-threats is mostly due to the extensive use of virtualization paradigms and the increasing adoption of automation in the software life-cycle. To address these challenges we propose an innovative framework that leverages the intrinsic programmability of the cloud and software-defined infrastructures to improve the effectiveness and efficiency of reaction mechanisms. In this paper, we present our contributions with a demonstrative use case in the context of Kubernetes. By means of this framework, developers of cybersecurity appliances will not have any more to care about how to react to events or to struggle to define any possible security tasks at design time. In addition, automatic firewall ruleset generation provided by our framework will mostly avoid human intervention, hence decreasing the time to carry out them and the likelihood of errors. We focus our discussions on technical challenges: definition of common actions at the policy level and their translation into configurations for the heterogeneous set of security functions by means of a use case. © 2020 IEEE.},
  doi       = {10.1109/NetSoft48620.2020.9165434},
  keywords  = {Firewall, Security Orchestration},
  url       = {https://iris.polito.it/retrieve/handle/11583/2844332/391324/main.pdf},
}

{"_id":"skYh53QR3RcjGdSQg","bibbaseid":"bringhenti-marchetto-sisto-valenza-yusupov-introducingprogrammabilityandautomationinthesynthesisofvirtualfirewallrules-2020","authorIDs":["anJrBcCdr4LzzWetx","x5vNTEJ4s3raTsibp"],"author_short":["Bringhenti, D.","Marchetto, G.","Sisto, R.","Valenza, F.","Yusupov, J."],"bibdata":{"bibtype":"inproceedings","type":"inproceedings","author":[{"propositions":[],"lastnames":["Bringhenti"],"firstnames":["D."],"suffixes":[]},{"propositions":[],"lastnames":["Marchetto"],"firstnames":["G."],"suffixes":[]},{"propositions":[],"lastnames":["Sisto"],"firstnames":["R."],"suffixes":[]},{"propositions":[],"lastnames":["Valenza"],"firstnames":["F."],"suffixes":[]},{"propositions":[],"lastnames":["Yusupov"],"firstnames":["J."],"suffixes":[]}],"booktitle":"Proceedings of the 6th IEEE Conference on Network Softwarization (NetSoft 2020)","title":"Introducing programmability and automation in the synthesis of virtual firewall rules","year":"2020","pages":"473-478","abstract":"The rise of new forms of cyber-threats is mostly due to the extensive use of virtualization paradigms and the increasing adoption of automation in the software life-cycle. To address these challenges we propose an innovative framework that leverages the intrinsic programmability of the cloud and software-defined infrastructures to improve the effectiveness and efficiency of reaction mechanisms. In this paper, we present our contributions with a demonstrative use case in the context of Kubernetes. By means of this framework, developers of cybersecurity appliances will not have any more to care about how to react to events or to struggle to define any possible security tasks at design time. In addition, automatic firewall ruleset generation provided by our framework will mostly avoid human intervention, hence decreasing the time to carry out them and the likelihood of errors. We focus our discussions on technical challenges: definition of common actions at the policy level and their translation into configurations for the heterogeneous set of security functions by means of a use case. © 2020 IEEE.","doi":"10.1109/NetSoft48620.2020.9165434","keywords":"Firewall, Security Orchestration","url":"https://iris.polito.it/retrieve/handle/11583/2844332/391324/main.pdf","bibtex":"@InProceedings{2020NetSoft,\r\n author = {Bringhenti, D. and Marchetto, G. and Sisto, R. and Valenza, F. and Yusupov, J.},\r\n booktitle = {Proceedings of the 6th {IEEE} Conference on Network Softwarization (NetSoft 2020)},\r\n title = {Introducing programmability and automation in the synthesis of virtual firewall rules},\r\n year = {2020},\r\n pages = {473-478},\r\n abstract = {The rise of new forms of cyber-threats is mostly due to the extensive use of virtualization paradigms and the increasing adoption of automation in the software life-cycle. To address these challenges we propose an innovative framework that leverages the intrinsic programmability of the cloud and software-defined infrastructures to improve the effectiveness and efficiency of reaction mechanisms. In this paper, we present our contributions with a demonstrative use case in the context of Kubernetes. By means of this framework, developers of cybersecurity appliances will not have any more to care about how to react to events or to struggle to define any possible security tasks at design time. In addition, automatic firewall ruleset generation provided by our framework will mostly avoid human intervention, hence decreasing the time to carry out them and the likelihood of errors. We focus our discussions on technical challenges: definition of common actions at the policy level and their translation into configurations for the heterogeneous set of security functions by means of a use case. © 2020 IEEE.},\r\n doi = {10.1109/NetSoft48620.2020.9165434},\r\n keywords = {Firewall, Security Orchestration},\r\n url = {https://iris.polito.it/retrieve/handle/11583/2844332/391324/main.pdf},\r\n}\r\n\r\n","author_short":["Bringhenti, D.","Marchetto, G.","Sisto, R.","Valenza, F.","Yusupov, J."],"key":"2020NetSoft","id":"2020NetSoft","bibbaseid":"bringhenti-marchetto-sisto-valenza-yusupov-introducingprogrammabilityandautomationinthesynthesisofvirtualfirewallrules-2020","role":"author","urls":{"Paper":"https://iris.polito.it/retrieve/handle/11583/2844332/391324/main.pdf"},"keyword":["Firewall","Security Orchestration"],"metadata":{"authorlinks":{"valenza, f":"https://bibbase.org/show?bib=https%3A%2F%2Fraw.githubusercontent.com%2FFulvioValenza%2Fbibliography%2Fmain%2FValenza_bibliography.bib&commas=true","valenza, f":"https://bibbase.org/service/mendeley/47be63fe-fca0-3f0f-a864-642602926c3f"}},"downloads":5},"bibtype":"inproceedings","biburl":"https://raw.githubusercontent.com/FulvioValenza/bibliography/main/Valenza_bibliography.bib","creationDate":"2021-01-16T10:07:49.737Z","downloads":5,"keywords":["firewall","security orchestration"],"search_terms":["introducing","programmability","automation","synthesis","virtual","firewall","rules","bringhenti","marchetto","sisto","valenza","yusupov"],"title":"Introducing programmability and automation in the synthesis of virtual firewall rules","year":2020,"dataSources":["JbiX35GNqPCF3nids","JotHtgcQ35FTMtuP5","oHcDH9GXBbkp4t9gm","csYhy47rJJgSM7jjJ","hZL94qE5m3pMWuJwA","8EGSmY4udryikjQyX","nMy6C9RcR4TJMDbmB","Ka2S54TRk8na4h8uK","qgD6ZecrgthN9jyS8","yf5ybPwJxfS5zDTx9","8iJ7pScsBCJNMEwBL","XZnEt8kdXurbtCWoc","R3zwdw7JArkWqNexb"]}