@inproceedings{220803,

title = {Optimal Access Control Deployment in Network Function Virtualization},

author = {Manel Smine and David Espes and Marc-Oliver Pahl},

url = {http://XXXXX/220803.pdf},

year  = {2022},

date = {2022-04-01},

booktitle = {NOMS 2022 - Full and short papers ()},

abstract = {Network function virtualization (NFV) yields numerous advantages, specifically the ability to provide a cost-efficient alternative to hardware-based functionalities on software platforms to break the vendor lock-in problem. However, these advantages come at the cost of several security issues. These threats can be leveraged by controlling the information that flows between the different components that compose NFV services. We propose an approach allowing an optimal deployment of access control policies on NFV services. The proposed approach allows to find the best possible trade-offs between the impact in terms of latency resulting from the deployment of the access control policy and the used resources. In contrast to existing approaches, our solution prevents an insider adversary who compromises one or more unknown VNF(s) to go around the access control policy. We experimentally evaluate the return solutions according to the size of the NFV service, the size of the policy to be deployed and the number of physical servers that host the VNF service.},

keywords = {Accounting, Configuration, Network virtualization; FCAPS: Fault, Performance and Security Management; Cybersystems, Security and Reliability in Network Softwarization and Management; Network security; Policybased management},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{smine2022optimal,

title = {Optimal Access Control Deployment in Network Function Virtualization},

author = {Manel Smine and David Espes and Marc-Oliver Pahl},

year  = {2022},

date = {2022-01-01},

booktitle = {NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium},

pages = {1\textendash9},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pahl2021priority,

title = {A Priority-Based Domain Type Enforcement for Exception Management},

author = {Manel Smine and David Espes and Nora Cuppens-Boulahia and Fr\'{e}d\'{e}ric Cuppens and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {Foundations and Practice of Security: 13th International Symposium, FPS 2020, Montreal, QC, Canada, December 1--3, 2020, Revised Selected Papers},

volume = {12637},

pages = {65},

organization = {Springer Nature},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{smine2021priority,

title = {A priority-based domain type enforcement for exception management},

author = {Manel Smine and David Espes and Nora Cuppens-Boulahia and Fr\'{e}d\'{e}ric Cuppens and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {Foundations and Practice of Security: 13th International Symposium, FPS 2020, Montreal, QC, Canada, December 1\textendash3, 2020, Revised Selected Papers 13},

pages = {65\textendash81},

organization = {Springer International Publishing},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{smine2018effectiveness,

title = {Effectiveness and Impact Measurements of a Diversification Based Moving Target Defense},

author = {Manel Smine and Nora Cuppens and Fr\'{e}d\'{e}ric Cuppens},

year  = {2018},

date = {2018-01-01},

booktitle = {International Conference on Risks and Security of Internet and Systems},

pages = {158--171},

organization = {Springer},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}