Leveraging SDN and NFV to Achieve Autonomic Cyberdefense: Lessons Learned and Open Issues

講演者所属: IMT Lille Douai, Institut Mines-Telecom 講演場所: 情報科学棟大講義室L1While tremendous efforts have been paid to secure our systems and networks, it is still largely recognised that building an autonomic defense system is mission impossible in practice. For instance, the gaps between security monitoring, detection, and response have never been systematically closed to date. With the advent of Software Defined Networking (SDN) and Network Functions Virtualization (NFV), we are offered an unprecedented opportunity to achieve, to a significant extent, if not completely, such an objective. This talk is intended to showcase our three contributions in leveraging SDN and NFV to achieve software-defined security (or policy-driven autonomic defense), (1) taking advantage of programmability of SDN controllers to implement typical security functions; (2) leveraging the global visibility and centralized manageability of SDN to develop an autonomic DDoS mitigation framework; (3) extending the capability of NFV orchestrators to achieve dynamic and tenant-specific access control in the distributed clouds. Some challenges will be finally discussed, together with our ongoing efforts