Automated Security Management for Virtual Services. Repetto, M., Carrega, A., Yusupov, J., Valenza, F., Risso, F., & Lamanna, G. In Proceedings of the IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN 2019), pages 1–2, 2019. IEEE. ![Automated Security Management for Virtual Services [pdf]](https://bibbase.org/img/filetypes/pdf.svg "pdf")
Paper doi abstract bibtex 4 downloads The virtualization of applications and network functions facilitates the dynamic creation of compound services, automating both the provisioning of computing/networking/storage resources and their life-cycle management. Virtualization of security appliances is a common approach to protect such services, but can neither offer broad visibility across the whole deployed service nor implement coordinated and fine-grained enforcement actions. This paper proposes a novel security framework based on the integration of lightweight and programmable monitoring and enforcement hooks in each virtual function, which are collectively controlled by a common logic for prevention, detection, reaction, and mitigation of security threats. Our framework keeps direct control over the functionalities of the security hooks, and leverages standard orchestration tools for management actions on the service graph. It can be automatically instantiated by common orchestration operations, hence seamlessly integrating with the deployment process of service graphs. © 2019 IEEE.
@InProceedings{2019NFVSDN,
author = {Matteo Repetto and Alessandro Carrega and Jalolliddin Yusupov and Fulvio Valenza and Fulvio Risso and G. Lamanna},
booktitle = {Proceedings of the {IEEE} Conference on Network Function Virtualization and Software Defined Networks ({NFV-SDN} 2019)},
doi = {10.1109/NFV-SDN47374.2019.9040069},
pages = {1--2},
publisher = {{IEEE}},
title = {Automated Security Management for Virtual Services},
year = {2019},
abstract={The virtualization of applications and network functions facilitates the dynamic creation of compound services, automating both the provisioning of computing/networking/storage resources and their life-cycle management. Virtualization of security appliances is a common approach to protect such services, but can neither offer broad visibility across the whole deployed service nor implement coordinated and fine-grained enforcement actions. This paper proposes a novel security framework based on the integration of lightweight and programmable monitoring and enforcement hooks in each virtual function, which are collectively controlled by a common logic for prevention, detection, reaction, and mitigation of security threats. Our framework keeps direct control over the functionalities of the security hooks, and leverages standard orchestration tools for management actions on the service graph. It can be automatically instantiated by common orchestration operations, hence seamlessly integrating with the deployment process of service graphs. © 2019 IEEE.},
keywords={Security Orchestration},
url={https://iris.polito.it/retrieve/handle/11583/2753693/302241/nfv%20sdn.pdf}
}
Downloads: 4
{"_id":"bbxfhg2HZ8oxGriwX","bibbaseid":"repetto-carrega-yusupov-valenza-risso-lamanna-automatedsecuritymanagementforvirtualservices-2019","authorIDs":["anJrBcCdr4LzzWetx","x5vNTEJ4s3raTsibp"],"author_short":["Repetto, M.","Carrega, A.","Yusupov, J.","Valenza, F.","Risso, F.","Lamanna, G."],"bibdata":{"bibtype":"inproceedings","type":"inproceedings","author":[{"firstnames":["Matteo"],"propositions":[],"lastnames":["Repetto"],"suffixes":[]},{"firstnames":["Alessandro"],"propositions":[],"lastnames":["Carrega"],"suffixes":[]},{"firstnames":["Jalolliddin"],"propositions":[],"lastnames":["Yusupov"],"suffixes":[]},{"firstnames":["Fulvio"],"propositions":[],"lastnames":["Valenza"],"suffixes":[]},{"firstnames":["Fulvio"],"propositions":[],"lastnames":["Risso"],"suffixes":[]},{"firstnames":["G."],"propositions":[],"lastnames":["Lamanna"],"suffixes":[]}],"booktitle":"Proceedings of the IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN 2019)","doi":"10.1109/NFV-SDN47374.2019.9040069","pages":"1–2","publisher":"IEEE","title":"Automated Security Management for Virtual Services","year":"2019","abstract":"The virtualization of applications and network functions facilitates the dynamic creation of compound services, automating both the provisioning of computing/networking/storage resources and their life-cycle management. Virtualization of security appliances is a common approach to protect such services, but can neither offer broad visibility across the whole deployed service nor implement coordinated and fine-grained enforcement actions. This paper proposes a novel security framework based on the integration of lightweight and programmable monitoring and enforcement hooks in each virtual function, which are collectively controlled by a common logic for prevention, detection, reaction, and mitigation of security threats. Our framework keeps direct control over the functionalities of the security hooks, and leverages standard orchestration tools for management actions on the service graph. It can be automatically instantiated by common orchestration operations, hence seamlessly integrating with the deployment process of service graphs. © 2019 IEEE.","keywords":"Security Orchestration","url":"https://iris.polito.it/retrieve/handle/11583/2753693/302241/nfv%20sdn.pdf","bibtex":"@InProceedings{2019NFVSDN,\r\n author = {Matteo Repetto and Alessandro Carrega and Jalolliddin Yusupov and Fulvio Valenza and Fulvio Risso and G. Lamanna},\r\n booktitle = {Proceedings of the {IEEE} Conference on Network Function Virtualization and Software Defined Networks ({NFV-SDN} 2019)},\r\n doi = {10.1109/NFV-SDN47374.2019.9040069},\r\n pages = {1--2},\r\n publisher = {{IEEE}},\r\n title = {Automated Security Management for Virtual Services},\r\n year = {2019},\r\n abstract={The virtualization of applications and network functions facilitates the dynamic creation of compound services, automating both the provisioning of computing/networking/storage resources and their life-cycle management. Virtualization of security appliances is a common approach to protect such services, but can neither offer broad visibility across the whole deployed service nor implement coordinated and fine-grained enforcement actions. This paper proposes a novel security framework based on the integration of lightweight and programmable monitoring and enforcement hooks in each virtual function, which are collectively controlled by a common logic for prevention, detection, reaction, and mitigation of security threats. Our framework keeps direct control over the functionalities of the security hooks, and leverages standard orchestration tools for management actions on the service graph. It can be automatically instantiated by common orchestration operations, hence seamlessly integrating with the deployment process of service graphs. © 2019 IEEE.},\r\n keywords={Security Orchestration},\r\n url={https://iris.polito.it/retrieve/handle/11583/2753693/302241/nfv%20sdn.pdf}\r\n}\r\n\r\n","author_short":["Repetto, M.","Carrega, A.","Yusupov, J.","Valenza, F.","Risso, F.","Lamanna, G."],"key":"2019NFVSDN","id":"2019NFVSDN","bibbaseid":"repetto-carrega-yusupov-valenza-risso-lamanna-automatedsecuritymanagementforvirtualservices-2019","role":"author","urls":{"Paper":"https://iris.polito.it/retrieve/handle/11583/2753693/302241/nfv%20sdn.pdf"},"keyword":["Security Orchestration"],"metadata":{"authorlinks":{"valenza, f":"https://bibbase.org/show?bib=https%3A%2F%2Fraw.githubusercontent.com%2FFulvioValenza%2Fbibliography%2Fmain%2FValenza_bibliography.bib","valenza, f":"https://bibbase.org/service/mendeley/47be63fe-fca0-3f0f-a864-642602926c3f"}},"downloads":4},"bibtype":"inproceedings","biburl":"https://raw.githubusercontent.com/FulvioValenza/bibliography/main/Valenza_bibliography.bib","creationDate":"2021-01-16T10:07:49.757Z","downloads":4,"keywords":["security orchestration"],"search_terms":["automated","security","management","virtual","services","repetto","carrega","yusupov","valenza","risso","lamanna"],"title":"Automated Security Management for Virtual Services","year":2019,"dataSources":["JbiX35GNqPCF3nids","csYhy47rJJgSM7jjJ"]}