| KEYWORD |
A framework for automatic Network Security Functions configuration in NFV/Cloud context
Parole chiave NETWORK FUNCTION VIRTUALIZATION, SOFTWARE DEFINED NETWORKING
Riferimenti GUIDO MARCHETTO, RICCARDO SISTO
Riferimenti esterni VALENZA FULVIO
Gruppi di ricerca COMPUTER NETWORKS GROUP - NETGROUP
Tipo tesi SOFTWARE DEVELOPMENT
Descrizione Network function virtualization (NFV) is a new networking paradigm that can be used to virtualize single network functions.
NFV introduces several advantages compared to classical approaches, such as the dynamic provisioning of functionality or the implementation of scalable and reliable services (e.g., adding a new instance to support demands). NFV also allows the deployment of security controls, like firewalls or VPN gateways, as virtualized network functions. However, currently there is not an automatic way to select the security functions to enable and to configure the selected ones according to a set of user’s security requirements.
The objective of the thesis is to define a framework that addresses the following challenges:
(1) automatically identify the security functions necessary to enforce a given set of security policies, (2) automatically decide where the selected security functions will be deployed, and (3) automatically generate the necessary configurations of the selected security functions.
The set of developed tools and libraries will be integrated into an existing software, which is already able to perform a basic refinement process.
Conoscenze richieste Good java programming skills.
Scadenza validita proposta 30/10/2019
PROPONI LA TUA CANDIDATURA