CORDIS - Resultados de investigaciones de la UE
CORDIS

AddreSsing ThReats for virtualIseD services

Resultado final

Programmable Components and Context Models

Report detailing the programming models and the technologies chosen to embed programmable resources in the service graph that will be at the foundation of the project. This report is delivered rather early with respect to the ASTRID timeline in order to document the conceptual outcome of the project with respect to the above topics. The documentation about the implementation of the components (e.g., monitoring probes, packet filters, etc.) that will be used in the project will be part of deliverable D2.7.

Final ASTRID architecture

Final specification of the ASTRID architecture, including the possible refinements incurred within the lifetime of the project.

Validation and demonstration scenarios

Report presenting a) the KPI chosen to measure the project results and their correspondence with project objectives and requirements, and b) the procedures used to perform the project assessment defined in T4.1.

Access and Privacy Control Architecture and Models

Report presenting the models and the resulting architecture for access and privacy control within the ASTRID architecture. This report is delivered rather early with respect to the ASTRID timeline in order to document the conceptual view of the project with respect to the above topics. The documentation about the implementation will be part of deliverable D2.7.

Final assessment of the ASTRID project

Report presenting the results of the final project assessment enlightening the correspondence between project objectives user requirements and the outcome of the project This document presents also the outcome of the tests and issues raised by the users with the technical support usage data and feedback collected from users and administrators involved in the validation tests Possible remaining issues will be documented in order to indicate directions for future work

ASTRID architecture

Specification of the ASTRID architecture, to be used as a blueprint by the other WPs to define and develop the components under their responsibility. This will be a live specification, initially defined at M10 and then continuously updated according to the progress of the technical activities, using a spiral-like approach where the initial specification is coarse and at high-level and, as the time passes, gets refined with more details. The final architecture will be captured by D1.3.

State of the art, project concept and requirements

This report includes the additional information that are needed to design the ASTRID architecture and that have been collected at the beginning of the project, namely the work produced by tasks T1.1-T1.4 (state of the art, project concepts and application scenarios, requirements). Requirements of the different stakeholders, which is one of the inputs to the design of the architecture, and the assessment procedures and metrics will be obtained through standard techniques (e.g. interviews with key stakeholders, focus groups, public consultations).

Secure orchestration infrastructure

Report presenting algorithms, interfaces between components, and the detailed architecture of the secure orchestration platform. This complements the release of the source code with a more detailed explanation of the internals, interfaces, and overall architecture. Finally, it documents also the implementation of the components presented in deliverables D2.1, D2.2 and D2.3 that were released early in time and that did not include any implementation detail.

Forensic Architecture

Report presenting the components and their interactions with respect to the forensic architecture foreseen in ASTRID. This report is delivered rather early with respect to the ASTRID timeline in order to document the conceptual view of the project with respect to the above topic. The documentation about the implementation will be part of deliverable D2.7.

Initial assessment of the ASTRID project

Report presenting the results of the initial project assessment, enlightening the correspondence between project objectives, user requirements and the outcome of the project. This document presents also the outcome of the tests, feedback to the technical WPs, issues raised by the users with the technical support, usage data and feedback collected from users and administrators involved in the validation tests.

First report on security algorithms and tools

This report collects and presents all the algorithms and tools dedicated to the detection and management of vulnerabilities, threats, and anomalies, which are fed by events generated by the infrastructure and possibly by policies coming from ASTRID stakeholders. This report freezes the current status in the mid-lifespan of the project.

Data handling: Collection, Fusion, Harmonization

Report detailing all the data-related algorithms and techniques that have been studied and prototyped in task T2.2.

Final report on security algorithms and tools

This report collects and presents all the algorithms and tools dedicated to the detection and management of vulnerabilities, threats, and anomalies, which are feed by events generated by the infrastructure and possibly by policies coming from ASTRID stakeholders. This document reports the status of the project at the end of its lifespan (the following months are dedicated mainly to validation).

First public demonstrator of ASTRID framework (software prototype plus running demos)

This deliverable documents the initial deployment of the ASTRID framework in the planned demonstrators and it is composed of a set of videos showing the behaviour of the system under different operating conditions and when fed with different external inputs. Videos will be accompanied by a short report giving more details about the demonstrating conditions. Videos will be released without restrictions, in order to demonstrate the potential of the ASTRID platform even if some of the (software) components have not been released in the open source domain.

Final public demonstrator of ASTRID framework (software prototype plus running demos)

This deliverable documents the final deployment of the ASTRID platform in the planned demonstrators and it is composed by a set of videos showing the behaviour of the system under different operating conditions and when fed with different external inputs. Videos will be accompanied by a short report giving more details about the demonstrating conditions. Videos will be released without restrictions, in order to demonstrate the potential of the ASTRID platform even if some of the (software) components have not been released in the open source domain.

First public release of the secure orchestration components

First public release of the software components of the secure orchestration platform. This prototype will be accompanied by a short report explaining how to install and use the software.

Final public release of the secure orchestration components

Second (and final) public release of the software components of the secure orchestration platform, which includes all the work done in the project. Minor updates may be released as amendment in case the final validation brings the necessity of small changes (e.g., bug fixing) in the above components. This prototype will be accompanied by a short report explaining how install and use the software.

Public release of the user-oriented GUI (security awareness)

First release of the graphical user interface that allow to (1) build and show the (security-oriented) situational awareness for the different ASTRID stakeholders, and (2) possibly specify additional policies/actions in order to influence the future behaviour of the secure orchestration platform/algorithms.

Publicaciones

Feature Selection Evaluation towards a Lightweight Deep Learning DDoS Detector

Autores: Odnan Ref Sanchez, Matteo Repetto, Alessandro Carrega, Raffaele Bolla, Jane Frances Pajo
Publicado en: ICC 2021 - IEEE International Conference on Communications, 2021, Página(s) 1-6, ISBN 978-1-7281-7122-7
Editor: IEEE
DOI: 10.1109/icc42927.2021.9500458

Feature Selection Evaluation towards a Lightweight Deep Learning DDoS Detector

Autores: O. R. Sanchez, M. Repetto, A. Carrega, R. Bolla, and J. F. Pajo
Publicado en: 2021
Editor: IEEE

Evaluating ML-based DDoS Detection with Grid Search Hyperparameter Optimization

Autores: Odnan Ref Sanchez, Matteo Repetto, Alessandro Carrega, Raffaele Bolla
Publicado en: 2021 IEEE 7th International Conference on Network Softwarization (NetSoft), 2021, Página(s) 402-408, ISBN 978-1-6654-0522-5
Editor: IEEE
DOI: 10.1109/netsoft51509.2021.9492633

Programmable Data Gathering for Detecting Stegomalware

Autores: Alessandro Carrega, Luca Caviglione, Matteo Repetto, Marco Zuppelli
Publicado en: 2020 6th IEEE Conference on Network Softwarization (NetSoft), 2020, Página(s) 422-429, ISBN 978-1-7281-5684-2
Editor: IEEE
DOI: 10.1109/netsoft48620.2020.9165537

Towards a fully automated and optimized network security functions orchestration

Autores: Daniele Bringhenti, Guido Marchetto, Riccardo Sisto, Fulvio Valenza, Jalolliddin Yusupov
Publicado en: 2019 4th International Conference on Computing, Communications and Security (ICCCS), 2019, Página(s) 1-7, ISBN 978-1-7281-0875-9
Editor: IEEE
DOI: 10.1109/cccs.2019.8888130

An architecture to manage security services for cloud applications

Autores: M. Repetto, A. Carrega, G. Lamanna
Publicado en: 2019 4th International Conference on Computing, Communications and Security (ICCCS), 2019, Página(s) 1-8, ISBN 978-1-7281-0875-9
Editor: IEEE
DOI: 10.1109/cccs.2019.8888061

Data Log Management for Cyber-Security Programmability of Cloud Services and Applications

Autores: Alessandro Carrega, Matteo Repetto
Publicado en: Proceedings of the 1st ACM Workshop on Workshop on Cyber-Security Arms Race - CYSARM'19, 2019, Página(s) 47-52, ISBN 9781450368407
Editor: ACM Press
DOI: 10.1145/3338511.3357351

Introducing programmability and automation in the synthesis of virtual firewall rules

Autores: Daniele Bringhenti, Guido Marchetto, Riccardo Sisto, Fulvio Valenza, Jalolliddin Yusupov
Publicado en: 2020 6th IEEE Conference on Network Softwarization (NetSoft), 2020, Página(s) 473-478, ISBN 978-1-7281-5684-2
Editor: IEEE
DOI: 10.1109/netsoft48620.2020.9165434

Securing V2X Communications for the Future - Can PKI Systems offer the answer?

Autores: Thanassis Giannetsos, Ioannis Krontiris
Publicado en: Proceedings of the 14th International Conference on Availability, Reliability and Security, 2019, Página(s) 1-8, ISBN 9781450371643
Editor: ACM
DOI: 10.1145/3339252.3340523

Leveraging the 5G architecture to mitigate amplification attacks

Autores: Matteo Repetto, Alessandro Carrega, Guerino Lamanna, Jaloliddin Yusupov, Orazio Toscano, Gianmarco Bruno, Michele Nuovo, Marco Cappelli
Publicado en: 2021 IEEE 7th International Conference on Network Softwarization (NetSoft), 2021, Página(s) 443-449, ISBN 978-1-6654-0522-5
Editor: IEEE
DOI: 10.1109/netsoft51509.2021.9492545

Towards Novel Security Architectures for Network Functions Virtualization

Autores: M. Repetto, A. Carrega, G. Lamanna
Publicado en: 2019 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), 2019, Página(s) 1-5, ISBN 978-1-7281-4545-7
Editor: IEEE
DOI: 10.1109/nfv-sdn47374.2019.9040068

Direct anonymous attestation on the road - efficient and privacy-preserving revocation in C-ITS

Autores: Benjamin Larsen, Thanassis Giannetsos, Ioannis Krontiris, Kenneth Goldman
Publicado en: Proceedings of the 14th ACM Conference on Security and Privacy in Wireless and Mobile Networks, 2021, Página(s) 48-59, ISBN 9781450383493
Editor: ACM
DOI: 10.1145/3448300.3467832

Code Augmentation for Detecting Covert Channels Targeting the IPv6 Flow Label

Autores: Luca Caviglione, Marco Zuppelli, Wojciech Mazurczyk, Andreas Schaffhauser, Matteo Repetto
Publicado en: 2021 IEEE 7th International Conference on Network Softwarization (NetSoft), 2021, Página(s) 450-456, ISBN 978-1-6654-0522-5
Editor: IEEE
DOI: 10.1109/netsoft51509.2021.9492661

Automated optimal firewall orchestration and configuration in virtualized networks

Autores: Daniele Bringhenti, Guido Marchetto, Riccardo Sisto, Fulvio Valenza, Jalolliddin Yusupov
Publicado en: NOMS 2020 - 2020 IEEE/IFIP Network Operations and Management Symposium, 2020, Página(s) 1-7, ISBN 978-1-7281-4973-8
Editor: IEEE
DOI: 10.1109/noms47738.2020.9110402

Short Paper - Automatic Configuration for an Optimal Channel Protection in Virtualized Networks

Autores: Daniele Bringhenti, Guido Marchetto, Riccardo Sisto, Fulvio Valenza
Publicado en: Proceedings of the 2nd Workshop on Cyber-Security Arms Race, 2020, Página(s) 25-30, ISBN 9781450380911
Editor: ACM
DOI: 10.1145/3411505.3418439

A Service-Agnostic Software Framework for Fast and Efficient in-Kernel Network Services

Autores: Sebastiano Miano, Matteo Bertrone, Fulvio Risso, Mauricio Vasquez Bernal, Yunsong Lu, Jianwen Pi, Aasif Shaikh
Publicado en: 2019 ACM/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS), 2019, Página(s) 1-9, ISBN 978-1-7281-4387-3
Editor: IEEE
DOI: 10.1109/ancs.2019.8901880

bccstego: A Framework for Investigating Network Covert Channels

Autores: Matteo Repetto, Luca Caviglione, Marco Zuppelli
Publicado en: The 16th International Conference on Availability, Reliability and Security, 2021, Página(s) 1-7, ISBN 9781450390514
Editor: ACM
DOI: 10.1145/3465481.3470028

Automated Security Management for Virtual Services

Autores: M. Repetto, A. Carrega, J. Yusupov, F. Valenza, F. Risso, G. Lamanna
Publicado en: 2019 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), 2019, Página(s) 1-2, ISBN 978-1-7281-4545-7
Editor: IEEE
DOI: 10.1109/nfv-sdn47374.2019.9040069

Towards Efficient Control-Flow Attestation with Software-Assisted Multi-level Execution Tracing

Autores: D. Papamartzivanos, S. Menesidou, P. Gouvas, T. Giannetsos
Publicado en: 2021
Editor: IEEE
DOI: 10.5281/zenodo.5336142

BLINDTRUST: Oblivious Remote Attestation for Secure Service Function Chains

Autores: Heini Bergsson Debes, Thanassis Giannetsos, Ioannis Krontiris
Publicado en: 2021
Editor: IEEE

Hybrid Deep Learning: An Efficient Reconnaissance and Surveillance Detection Mechanism in SDN

Autores: Jahanzaib Malik, Adnan Akhunzada, Iram Bibi, Muhammad Imran, Arslan Musaddiq, Sung Won Kim
Publicado en: IEEE Access, Edición 8, 2020, Página(s) 134695-134706, ISSN 2169-3536
Editor: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2020.3009849

Securing Cyberspace of Future Smart Cities with 5G Technologies

Autores: Adnan Akhunzada, Saif ul Islam, Sherali Zeadally
Publicado en: IEEE Network, Edición 34/4, 2020, Página(s) 336-342, ISSN 0890-8044
Editor: Institute of Electrical and Electronics Engineers
DOI: 10.1109/mnet.001.1900559

A Dynamic DL-Driven Architecture to Combat Sophisticated Android Malware

Autores: Iram Bibi, Adnan Akhunzada, Jahanzaib Malik, Javed Iqbal, Arslan Musaddiq, Sungwon Kim
Publicado en: IEEE Access, Edición 8, 2020, Página(s) 129600-129612, ISSN 2169-3536
Editor: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2020.3009819

SDN orchestration to combat evolving cyber threats in Internet of Medical Things (IoMT)

Autores: Shahzana Liaqat, Adnan Akhunzada, Fatema Sabeen Shaikh, Athanasios Giannetsos, Mian Ahmad Jan
Publicado en: Computer Communications, Edición 160, 2020, Página(s) 697-705, ISSN 0140-3664
Editor: Elsevier BV
DOI: 10.1016/j.comcom.2020.07.006

QoS-aware service provisioning in fog computing

Autores: Faizan Murtaza, Adnan Akhunzada, Saif ul Islam, Jalil Boudjadar, Rajkumar Buyya
Publicado en: Journal of Network and Computer Applications, Edición 165, 2020, Página(s) 102674, ISSN 1084-8045
Editor: Academic Press
DOI: 10.1016/j.jnca.2020.102674

A hybrid DL-driven intelligent SDN-enabled malware detection framework for Internet of Medical Things (IoMT)

Autores: Soneila Khan, Adnan Akhunzada
Publicado en: Computer Communications, Edición 170, 2021, Página(s) 209-216, ISSN 0140-3664
Editor: Elsevier BV
DOI: 10.1016/j.comcom.2021.01.013

Guest editorial: Special issue on novel cyber-security paradigms for software-defined and virtualized systems

Autores: Fulvio Valenza, Matteo Repetto, Stavros Shiaeles
Publicado en: Computer Networks, Edición 193, 2021, Página(s) 108126, ISSN 1389-1286
Editor: Elsevier BV
DOI: 10.1016/j.comnet.2021.108126

An Autonomous Cybersecurity Framework for Next-generation Digital Service Chains

Autores: Matteo Repetto, Domenico Striccoli, Giuseppe Piro, Alessandro Carrega, Gennaro Boggia, Raffaele Bolla
Publicado en: Journal of Network and Systems Management, Edición 29/4, 2021, ISSN 1064-7570
Editor: Kluwer Academic Publishers
DOI: 10.1007/s10922-021-09607-7

Introducing SmartNICs in Server-Based Data Plane Processing: The DDoS Mitigation Use Case

Autores: Sebastiano Miano, Roberto Doriguzzi-Corin, Fulvio Risso, Domenico Siracusa, Raffaele Sommese
Publicado en: IEEE Access, Edición 7, 2019, Página(s) 107161-107170, ISSN 2169-3536
Editor: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2019.2933491

An architecture to manage security operations for digital service chains

Autores: Matteo Repetto; Alessandro Carrega; Riccardo Rapuzzi
Publicado en: Future Generation Computer Systems, Edición Volume 115, 2021, Página(s) 251-266, ISSN 0167-739X
Editor: Elsevier BV
DOI: 10.1016/j.future.2020.08.044

Securing Linux with a faster and scalable iptables

Autores: Sebastiano Miano, Matteo Bertrone, Fulvio Risso, Mauricio Vásquez Bernal, Yunsong Lu, Jianwen Pi
Publicado en: ACM SIGCOMM Computer Communication Review, Edición 49/3, 2019, Página(s) 2-17, ISSN 0146-4833
Editor: ACM
DOI: 10.1145/3371927.3371929

Kernel-level tracing for detecting stegomalware and covert channels in Linux environments

Autores: Luca Caviglione, Wojciech Mazurczyk, Matteo Repetto, Andreas Schaffhauser, Marco Zuppelli
Publicado en: Computer Networks, Edición 191, 2021, Página(s) 108010, ISSN 1389-1286
Editor: Elsevier BV
DOI: 10.1016/j.comnet.2021.108010

Formally specifying and checking policies and anomalies in service function chaining

Autores: Fulvio Valenza, Serena Spinoso, Riccardo Sisto
Publicado en: Journal of Network and Computer Applications, Edición 146, 2019, Página(s) 102419, ISSN 1084-8045
Editor: Academic Press
DOI: 10.1016/j.jnca.2019.102419

A Framework for Verification-Oriented User-Friendly Network Function Modeling

Autores: Guido Marchetto, Riccardo Sisto, Fulvio Valenza, Jalolliddin Yusupov
Publicado en: IEEE Access, Edición 7, 2019, Página(s) 99349-99359, ISSN 2169-3536
Editor: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2019.2929325

CrowdLED: Towards Crowd-Empowered and Privacy-Preserving Data Sharing Using Smart Contracts

Autores: Constantinos Pouyioukka, Thanassis Giannetsos, Weizhi Meng
Publicado en: Trust Management XIII - 13th IFIP WG 11.11 International Conference, IFIPTM 2019, Copenhagen, Denmark, July 17-19, 2019, Proceedings, Edición 563, 2019, Página(s) 147-161, ISBN 978-3-030-33715-5
Editor: Springer International Publishing
DOI: 10.1007/978-3-030-33716-2_12

Derechos de propiedad intelectual

METHODS AND APPARATUS FOR OPERATING A CONSTRAINED DEVICE

Número de solicitud/publicación: 20 19055755
Fecha: 2019-03-07
Solicitante(s): ERICSSON TELECOMUNICAZIONI SPA

METHODS AND APPARATUSES FOR NETWORK MANAGEMENT

Número de solicitud/publicación: 20 20052761
Fecha: 2020-02-04
Solicitante(s): ERICSSON TELECOMUNICAZIONI SPA

Buscando datos de OpenAIRE...

Se ha producido un error en la búsqueda de datos de OpenAIRE

No hay resultados disponibles