.png){kind=icon}
返回
Dynamic Multi-Method Allocation for Intent-based Security Orchestration
.png){kind=icon}
OA
AI
DOI：10.1007/s10922-024-09896-8.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
In today's dynamic cybersecurity landscape, static and deterministic services orchestration which does not consider security as part of the orchestration process are proving insufficient against the evolving threat landscape. Security must be an intrinsic part of the orchestration processes. In this regard, this paper introduces an innovative paradigm shift: Intent & AI-based Optimized Security Orchestration. On the one hand, leveraging the capabilities of an Intent-based solution, this approach enables proactive and reactive threat mitigation in next generation heterogenous environments of the computing continuum, abstracting and homogenizing the complexity of underlying technologies. On the other hand, leveraging the capabilities of a dynamic allocation approach that applies different techniques for selecting the most suitable enforcement point (hardware/software) as well as the most suitable allocation for deploying/configuring them, always considering security properties during decision stages. Thus, the solution allows organizations adaptively optimizing resource allocation considering intent-based security requirements. The implementation considers different algorithms to perform the allocation decision depending on a variety of parameters. The performance has been also provided for validating the proposed solution. The results show that combining the security orchestrator with a Dynamic Allocation Engine improves the efficiency of decision making due to the ability to dynamically choose which algorithm is the most appropriate to solve the assignment problem in the best possible way and in the shortest possible time.
Keyword:
Orchestration
AI
Intent-based
Security
Optimal allocation
期刊
IF:
3.9
论文数:
1.0K
被引数:
1.3K
机构
引用论文
.png){kind=icon}
Efficient Provisioning of Security Service Function Chaining Using Network Security Defense Patterns
PREAI
分享收藏分享收藏Orchestra: A Customizable Split-Aware NFV Orchestrator for Dynamic Cloud Radio Access NetworksOrchestra: 用于动态云无线电接入网络的可定制的分割感知NFV编排器
PREAI
分享收藏
查看更多内容