Intent-Based Attack Mitigation through Opportunistic Synchronization of Microservices - Université de Rennes
Communication Dans Un Congrès Année : 2024

Intent-Based Attack Mitigation through Opportunistic Synchronization of Microservices

Résumé

Malware threats to digital infrastructure demand prompt and accurate countermeasures due to their rapid propagation across entire networks. Addressing this challenge requires security automation, and Intent-Based Networking (IBN) provides a promising solution by expressing intents, standing for dynamic countermeasure, without specifying operations. However, a challenge lies in the delayed reaction of IBN systems due to intrinsic costly operations (e.g., translation, deployment, and assurance) compared to the fast propagation mechanisms of malware. As a candidate solution, we consider two mechanisms to accelerate reaction time. First, we explore to what extent security functions, functioning as Policy Enforcement Points (PEPs), can be implemented through microservices, which bring flexibility and scalability to support dynamic features. Second, we consider opportunistic synchronization between PEPs to react, at least partially but autonomously to promptly halt ongoing malware propagation. This paper discusses related works, outlines our approach, and presents the current status of this research.
Fichier principal
Vignette du fichier
PhD_RESSI_paper.pdf (82.27 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence
Copyright (Tous droits réservés)

Dates et versions

hal-04645953 , version 1 (12-07-2024)

Licence

Copyright (Tous droits réservés)

Identifiants

  • HAL Id : hal-04645953 , version 1

Citer

Do Duc Anh Nguyen, Fabien Autrel, Ahmed Bouabdallah, Jérôme François, Pierre Alain, et al.. Intent-Based Attack Mitigation through Opportunistic Synchronization of Microservices. RESSI 2024 - Rendez-vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2024, Eppe-Sauvage, France. ⟨hal-04645953⟩
74 Consultations
30 Téléchargements

Partager

More