| Naslov: | PALANTIR : An NFV-Based Security-as-a-Service Approach for Automating Threat Mitigation |
|---|
| Avtorji: | ID Compastié, Maxime (Avtor)
ID López Martínez, Antonio (Avtor)
ID Fernandez, Carolina (Avtor)
ID Gil Pérez, Manuel (Avtor)
ID Tsarsitalidis, Stylianos (Avtor)
ID Xylouris, George (Avtor)
ID Mlakar, Izidor (Avtor)
ID Kourtis, Michail Alexandros (Avtor)
ID Šafran, Valentino (Avtor) |
|---|
| Datoteke: |  Compastie-2023-PALANTIR__An_NFV-Based_Security.pdf (963,42 KB)
MD5: 73F98EB0F2B0FDCAAD840963632088E1
 https://www.mdpi.com/1424-8220/23/3/1658
|
|---|
| Jezik: | Angleški jezik |
|---|
| Vrsta gradiva: | Znanstveno delo |
|---|
| Tipologija: | 1.01 - Izvirni znanstveni članek |
|---|
| Organizacija: | FERI - Fakulteta za elektrotehniko, računalništvo in informatiko
|
|---|
| Opis: | Small and medium enterprises are significantly hampered by cyber-threats as they have inherently limited skills and financial capacities to anticipate, prevent, and handle security incidents. The EU-funded PALANTIR project aims at facilitating the outsourcing of the security supervision to external providers to relieve SMEs/MEs from this burden. However, good practices for the operation of SME/ME assets involve avoiding their exposure to external parties, which requires a tightly defined and timely enforced security policy when resources span across the cloud continuum and need interactions. This paper proposes an innovative architecture extending Network Function Virtualisation to externalise and automate threat mitigation and remediation in cloud, edge, and on-premises environments. Our contributions include an ontology for the decision-making process, a Fault-and-Breach-Management-based remediation policy model, a framework conducting remediation actions, and a set of deployment models adapted to the constraints of cloud, edge, and on-premises environment(s). Finally, we also detail an implementation prototype of the framework serving as evaluation material. |
|---|
| Ključne besede: | Security-as-a-Service, security orchestration, policy-driven management, virtual network functions, finite state machines, constraints programming |
|---|
| Status publikacije: | Objavljeno |
|---|
| Verzija publikacije: | Objavljena publikacija |
|---|
| Poslano v recenzijo: | 19.12.2022 |
|---|
| Datum sprejetja članka: | 31.01.2023 |
|---|
| Datum objave: | 02.02.2023 |
|---|
| Založnik: | MDPI |
|---|
| Leto izida: | 2023 |
|---|
| Št. strani: | Str. 1-37 |
|---|
| Številčenje: | Letn. 23, št. 3, št. članka 1658 |
|---|
| PID: | 20.500.12556/DKUM-87004-83146531-ad49-6429-29e8-8c5111480716  |
|---|
| UDK: | 004.5 |
|---|
| COBISS.SI-ID: | 140543235 |
|---|
| DOI: | 10.3390/s23031658 |
|---|
| ISSN pri članku: | 1424-8220 |
|---|
| Datum objave v DKUM: | 06.02.2024 |
|---|
| Število ogledov: | 503 |
|---|
| Število prenosov: | 34 |
|---|
| Metapodatki: |    |
|---|
| Področja: | Ostalo
|
|---|
|
:
|
Kopiraj citat |
|---|
| | | | Skupna ocena: | (0 glasov) |
|---|
| Vaša ocena: | Ocenjevanje je dovoljeno samo prijavljenim uporabnikom. |
|---|
| Objavi na: |  |
|---|
Postavite miškin kazalec na naslov za izpis povzetka. Klik na naslov izpiše
podrobnosti ali sproži prenos. |
