arrow
Return

ICSC: Intent-Based Closed-Loop Security Control System for Cloud-Based Security Services

delete2024-01-01
delete0
PRE
AI
P
Patrick Lingga *
J
Jaehoon Jeong *
DOI:10.1109/MCOM.001.2400022delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
This article proposes an intent-based closedloop security control (ICSC) system for intelligent and effective security service management. Recent advancements in computer network technologies have led to the emergence of intent-based networking (IBN), significantly improving network security management. This article presents novel contributions to IBN, emphasizing intent fulfillment and intent assurance within network security. The proposed approach in this article utilizes a standardized framework called interface to network security functions (I2NSF) with standardized communication protocols and data models, allowing the deployment of security policies across multi-vendor environments. Furthermore, the existing security policy translator for an intent is extended to support dynamic translation, enabling the immediate integration of new security solutions into the network. An analytics component with machine learning is also introduced for continuous network monitoring, proactively identifying anomalies, and triggering automated threat mitigation. Additionally, the ICSC system's performance is assessed in various scenarios and configurations, providing a thorough understanding of its strengths and limitations. Thus, it is shown that the ICSC system can establish robust and adaptive network security management.
Keywords:
Security
Translation
Data models
Network security
Monitoring
Real-time systems
Adaptive systems
Protocols
Data mining
Complexity theory

Journal

IEEE Communications Magazine cover
IEEE Communications Magazine
IF:
8.2
Papers:
6.9K
Citations:
2.2W

Organization

S
sungkyunkwan university (skku)
Scholars:
3.7W
Papers: 3.6W
Citations: 49
H
huawei technologies
Scholars:
3.3K
Papers: 2.9K
Citations: 1