Intent-Based Attack Mitigation through Opportunistic Synchronization of Microservices
Résumé
Malware threats to digital infrastructure demand prompt and accurate countermeasures due to their rapid propagation across entire networks. Addressing this challenge requires security automation, and Intent-Based Networking (IBN) provides a promising solution by expressing intents, standing for dynamic countermeasure, without specifying operations. However, a challenge lies in the delayed reaction of IBN systems due to intrinsic costly operations (e.g., translation, deployment, and assurance) compared to the fast propagation mechanisms of malware. As a candidate solution, we consider two mechanisms to accelerate reaction time. First, we explore to what extent security functions, functioning as Policy Enforcement Points (PEPs), can be implemented through microservices, which bring flexibility and scalability to support dynamic features. Second, we consider opportunistic synchronization between PEPs to react, at least partially but autonomously to promptly halt ongoing malware propagation. This paper discusses related works, outlines our approach, and presents the current status of this research.
Domaines
Cryptographie et sécurité [cs.CR]Origine | Fichiers produits par l'(les) auteur(s) |
---|---|
Licence |
Copyright (Tous droits réservés)
|