The course will illustrate the peculiarities of next generation networks (i.e., SDN, NFV, Cloud-based) from the security point of view. It will present the specific vulnerabilities they expose. The course will show how their flexibility can be used to ease their management and increase their mitigation and reaction abilities, by following the policy-based security management paradigm. Moreover, the course will present the state of the art and the main research issues in the security of software and virtualized networks field.

Foundations of computer network architectures, TCP/IP stack, and HTTP protocol. Basic knowledge of Cybersecurity: - main categories of attack and risk against IT systems - main concepts of cryptography and its applications - knowledge of network security architectures and technologies (firewall, VPN, TLS)

- Introduction to next generation networks: the SDN protocols, the NFV architecture, Cloud-based networks - Network security fundamentals - Security objectives in software, virtualized and cloud based networks - Network Security Functions and security capabilities models - Security analysis of software networks, threats, vulnerabilities, and risks, - Flexible management and mitigation of security risks - Policy-Based Network Management and Policy-Based Security Management paradigms - Automatic enforcement of security policies in software networks - Optimization of the allocation of both network and security functions

In presenza

Presentazione orale - Presentazione report scritto

P.D.2-2 - Maggio