PALANTIR: an NFV-based security-as-a-service approach for automating threat mitigation

Small and medium enterprises are significantly hampered by cyber-threats as they have inherently limited skills and financial capacities to anticipate, prevent, and handle security incidents. The EU-funded PALANTIR project aims at facilitating the outsourcing of the security supervision to external...

Descripción completa

Detalles Bibliográficos
Autores: Compastié, Maxime, López Martínez, Antonio, Fernández, Carolina, Gil Pérez, Manuel, Tsarsitalidis, Stylianos, Xylouris, George, Mlakar, Izidor, Kourtis, Michail Alexandros, Šafran, Valentino
Tipo de recurso: artículo
Estado:Versión publicada
Fecha de publicación:2023
País:España
Institución:Universitat Pompeu Fabra
Repositorio:Repositorio Digital de la UPF
OAI Identifier:oai:repositori.upf.edu:10230/56514
Acceso en línea:http://hdl.handle.net/10230/56514
http://dx.doi.org/10.3390/s23031658
Access Level:acceso abierto
Palabra clave:Security-as-a-Service
security orchestration
policy-driven management
virtual network functions
finite state machines
constraints programming
id ES_b3d28295a243bce8e9cb3304e2e2256c
oai_identifier_str oai:repositori.upf.edu:10230/56514
network_acronym_str ES
network_name_str España
repository_id_str
spelling PALANTIR: an NFV-based security-as-a-service approach for automating threat mitigationCompastié, MaximeLópez Martínez, AntonioFernández, CarolinaGil Pérez, ManuelTsarsitalidis, StylianosXylouris, GeorgeMlakar, IzidorKourtis, Michail AlexandrosŠafran, ValentinoSecurity-as-a-Servicesecurity orchestrationpolicy-driven managementvirtual network functionsfinite state machinesconstraints programmingSmall and medium enterprises are significantly hampered by cyber-threats as they have inherently limited skills and financial capacities to anticipate, prevent, and handle security incidents. The EU-funded PALANTIR project aims at facilitating the outsourcing of the security supervision to external providers to relieve SMEs/MEs from this burden. However, good practices for the operation of SME/ME assets involve avoiding their exposure to external parties, which requires a tightly defined and timely enforced security policy when resources span across the cloud continuum and need interactions. This paper proposes an innovative architecture extending Network Function Virtualisation to externalise and automate threat mitigation and remediation in cloud, edge, and on-premises environments. Our contributions include an ontology for the decision-making process, a Fault-and-Breach-Management-based remediation policy model, a framework conducting remediation actions, and a set of deployment models adapted to the constraints of cloud, edge, and on-premises environment(s). Finally, we also detail an implementation prototype of the framework serving as evaluation material.The work described in this article has received funding by the European Union Horizon 2020 research and innovation programme, supported under Grant Agreement no. 883335—PALANTIR (Practical Autonomous Cyberhealth for resilient SMEs and Microenterprises).MDPI202320232023info:eu-repo/semantics/articleinfo:eu-repo/semantics/publishedVersionapplication/pdfapplication/pdfhttp://hdl.handle.net/10230/56514http://dx.doi.org/10.3390/s23031658reponame:Repositorio Digital de la UPFinstname:Universitat Pompeu FabraInglésSensors. 2023;23(3):1658.https://github.com/palantir-h2020/paper-nfv-aas-threat-mitigationinfo:eu-repo/grantAgreement/EC/H2020/883335© 2023 by the authors. Licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license (https:// creativecommons.org/licenses/by/ 4.0/).http://creativecommons.org/licenses/by/4.0/info:eu-repo/semantics/openAccessoai:repositori.upf.edu:10230/565142026-06-12T07:21:37Z
dc.title.none.fl_str_mv PALANTIR: an NFV-based security-as-a-service approach for automating threat mitigation
title PALANTIR: an NFV-based security-as-a-service approach for automating threat mitigation
spellingShingle PALANTIR: an NFV-based security-as-a-service approach for automating threat mitigation
Compastié, Maxime
Security-as-a-Service
security orchestration
policy-driven management
virtual network functions
finite state machines
constraints programming
title_short PALANTIR: an NFV-based security-as-a-service approach for automating threat mitigation
title_full PALANTIR: an NFV-based security-as-a-service approach for automating threat mitigation
title_fullStr PALANTIR: an NFV-based security-as-a-service approach for automating threat mitigation
title_full_unstemmed PALANTIR: an NFV-based security-as-a-service approach for automating threat mitigation
title_sort PALANTIR: an NFV-based security-as-a-service approach for automating threat mitigation
dc.creator.none.fl_str_mv Compastié, Maxime
López Martínez, Antonio
Fernández, Carolina
Gil Pérez, Manuel
Tsarsitalidis, Stylianos
Xylouris, George
Mlakar, Izidor
Kourtis, Michail Alexandros
Šafran, Valentino
author Compastié, Maxime
author_facet Compastié, Maxime
López Martínez, Antonio
Fernández, Carolina
Gil Pérez, Manuel
Tsarsitalidis, Stylianos
Xylouris, George
Mlakar, Izidor
Kourtis, Michail Alexandros
Šafran, Valentino
author_role author
author2 López Martínez, Antonio
Fernández, Carolina
Gil Pérez, Manuel
Tsarsitalidis, Stylianos
Xylouris, George
Mlakar, Izidor
Kourtis, Michail Alexandros
Šafran, Valentino
author2_role author
author
author
author
author
author
author
author
dc.subject.none.fl_str_mv Security-as-a-Service
security orchestration
policy-driven management
virtual network functions
finite state machines
constraints programming
topic Security-as-a-Service
security orchestration
policy-driven management
virtual network functions
finite state machines
constraints programming
description Small and medium enterprises are significantly hampered by cyber-threats as they have inherently limited skills and financial capacities to anticipate, prevent, and handle security incidents. The EU-funded PALANTIR project aims at facilitating the outsourcing of the security supervision to external providers to relieve SMEs/MEs from this burden. However, good practices for the operation of SME/ME assets involve avoiding their exposure to external parties, which requires a tightly defined and timely enforced security policy when resources span across the cloud continuum and need interactions. This paper proposes an innovative architecture extending Network Function Virtualisation to externalise and automate threat mitigation and remediation in cloud, edge, and on-premises environments. Our contributions include an ontology for the decision-making process, a Fault-and-Breach-Management-based remediation policy model, a framework conducting remediation actions, and a set of deployment models adapted to the constraints of cloud, edge, and on-premises environment(s). Finally, we also detail an implementation prototype of the framework serving as evaluation material.
publishDate 2023
dc.date.none.fl_str_mv 2023
2023
2023
dc.type.none.fl_str_mv info:eu-repo/semantics/article
info:eu-repo/semantics/publishedVersion
format article
status_str publishedVersion
dc.identifier.none.fl_str_mv http://hdl.handle.net/10230/56514
http://dx.doi.org/10.3390/s23031658
url http://hdl.handle.net/10230/56514
http://dx.doi.org/10.3390/s23031658
dc.language.none.fl_str_mv Inglés
language_invalid_str_mv Inglés
dc.relation.none.fl_str_mv Sensors. 2023;23(3):1658.
https://github.com/palantir-h2020/paper-nfv-aas-threat-mitigation
info:eu-repo/grantAgreement/EC/H2020/883335
dc.rights.none.fl_str_mv http://creativecommons.org/licenses/by/4.0/
info:eu-repo/semantics/openAccess
rights_invalid_str_mv http://creativecommons.org/licenses/by/4.0/
eu_rights_str_mv openAccess
dc.format.none.fl_str_mv application/pdf
application/pdf
dc.publisher.none.fl_str_mv MDPI
publisher.none.fl_str_mv MDPI
dc.source.none.fl_str_mv reponame:Repositorio Digital de la UPF
instname:Universitat Pompeu Fabra
instname_str Universitat Pompeu Fabra
reponame_str Repositorio Digital de la UPF
collection Repositorio Digital de la UPF
repository.name.fl_str_mv
repository.mail.fl_str_mv
_version_ 1869417209038635008
score 15,198674

Similares en LA Referencia