攻击感知安全功能链重排序
Attack-aware Security Function Chain Reordering
摘要：
攻击感知识别安全系统对正在发生的攻击的自我感知。对云和网络基础设施的更频繁和更强烈的攻击正在将安全系统推向极限。随着摩尔定律的终结，仅仅针对这些攻击进行扩展在经济上不再合理。先前的工作已经处理了在安全系统中采用软件定义网络和网络功能虚拟化，并使用这两种方法通过安全功能的智能放置来优化性能。然而，这些作品尚未考虑的顺序，交通通过这些功能。在这项工作中，我们通过展示其影响来说明需要考虑这种排序的情况。然后，我们提出了一个重新排序的框架，并分析了哪些方面是必要的建模安全服务功能链和决策的基础上，这些模型的顺序。我们展示了订单的影响，并在评估环境中验证了我们的框架。效果可以扩展到多个数量级，框架的评估证明了我们的概念的可行性。
英文摘要：
Attack-awareness recognizes self-awareness for security systems regarding the occurring attacks. More frequent and intense attacks on cloud and network infrastructures are pushing security systems to the limit. With the end of Moore's Law, merely scaling against these attacks is no longer economically justified. Previous works have already dealt with the adoption of Software-defined Networking and Network Function Virtualization in security systems and used both approaches to optimize performance by the intelligent placement of security functions. However, these works have not yet considered the sequence in which traffic passes through these functions. In this work, we make a case for the need to take this ordering into account by showing its impact. We then propose a reordering framework and analyze what aspects are necessary for modeling security service function chains and making decisions regarding the order based on those models. We show the impact of the order and validate our framework in an evaluation environment. The effect can extend to multiple orders of magnitude, and the framework's evaluation proves the feasibility of our concept.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
