TY - GEN
T1 - An Automata-based Security Policy Translation for Network Security Functions
AU - Yang, Jinhyuk
AU - Jeong, Jaehoon Paul
N1 - Publisher Copyright:
© 2018 IEEE.
PY - 2018/11/16
Y1 - 2018/11/16
N2 - This paper proposes the design of a security policy translator in Interface to Network Security Functions (I2NSF) framework. Also, this paper shows the benefits of designing security policy translations. I2NSF is an architecture for providing various Network Security Functions (NSFs) to users. I2NSF user should be able to use NSF even if user has no overall knowledge of NSFs. Generally, policies which are generated by I2NSF user contain abstract data because users do not consider the attributes of NSFs when creating policies. Therefore, the I2NSF framework requires a translator that automatically finds the NSFs which is required for policy when Security Controller receives a security policy from the user and translates it for selected NSFs. We satisfied the above requirements by modularizing the translator through Automata theory.
AB - This paper proposes the design of a security policy translator in Interface to Network Security Functions (I2NSF) framework. Also, this paper shows the benefits of designing security policy translations. I2NSF is an architecture for providing various Network Security Functions (NSFs) to users. I2NSF user should be able to use NSF even if user has no overall knowledge of NSFs. Generally, policies which are generated by I2NSF user contain abstract data because users do not consider the attributes of NSFs when creating policies. Therefore, the I2NSF framework requires a translator that automatically finds the NSFs which is required for policy when Security Controller receives a security policy from the user and translates it for selected NSFs. We satisfied the above requirements by modularizing the translator through Automata theory.
KW - Automata theory
KW - Interface to Network Security Functions
KW - Policy Translation
UR - https://www.scopus.com/pages/publications/85059447299
U2 - 10.1109/ICTC.2018.8539702
DO - 10.1109/ICTC.2018.8539702
M3 - Conference contribution
AN - SCOPUS:85059447299
T3 - 9th International Conference on Information and Communication Technology Convergence: ICT Convergence Powered by Smart Intelligence, ICTC 2018
SP - 268
EP - 272
BT - 9th International Conference on Information and Communication Technology Convergence
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 9th International Conference on Information and Communication Technology Convergence, ICTC 2018
Y2 - 17 October 2018 through 19 October 2018
ER -