Intent-Based Attack Mitigation through Opportunistic Synchronization of Micro-Services - INSA Rennes - Institut National des Sciences Appliquées de Rennes
Communication Dans Un Congrès Année : 2024

Intent-Based Attack Mitigation through Opportunistic Synchronization of Micro-Services

Résumé

The escalating number of cyberattacks poses a significant threat to digital infrastructures. Defining and deploying accurate countermeasures is challenging because of (1) the variety of threats and their possible evolution over time and (2) the need to enforce them as fast as possible, especially for fastpropagating attacks. Intent-Based Networking (IBN) stands for a promising solution for security management, especially to mitigate attacks through the specification of reaction intents, saving time and avoiding error-prone tasks. Nevertheless, most current IBN solutions rely on centralized architectures performing timeconsuming operations, which makes them inappropriate to timely deploy countermeasures, especially in the case of fast-propagating attacks spreading large-scale systems. As a solution to shorten the reaction time while supporting scalability, we first consider fast micro-services technologies (e.g., Unikernels) as the substrate of security functions acting as Policy Enforcement Points (PEP). Second, we propose to enable an opportunistic synchronization of those PEPs to react, at least partially but autonomously, against the ongoing attacks in a decentralized fashion. Such a solution raises challenges related to the consistency and performance of the overall enforced reaction policies. This paper presents the early stage of the PhD, outlining the specific challenges, limitations, and research required to leverage decentralized reaction using opportunistic synchronization of micro-services in an IBN framework for security.
Fichier principal
Vignette du fichier
Intent-Based Attack Mitigation through%0DOpportunistic Synchronization of Micro-Services.pdf (591.36 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence
Copyright (Tous droits réservés)

Dates et versions

hal-04645889 , version 1 (12-07-2024)

Licence

Copyright (Tous droits réservés)

Identifiants

Citer

Do Duc Anh Nguyen, Pierre Alain, Fabien Autrel, Ahmed Bouabdallah, Jérôme Franc. Intent-Based Attack Mitigation through Opportunistic Synchronization of Micro-Services. 10th IEEE International Conference on Network Softwarization (NetSoft 2024), Jun 2024, Saint Louis, MO, United States. ⟨10.1109/NetSoft60951.2024.10588925⟩. ⟨hal-04645889⟩
28 Consultations
18 Téléchargements

Altmetric

Partager

More