Network architectures and applications are becoming increasingly complex. Several approaches to automatically enforce configurations on devices, applications and services have been proposed, such as Policy-Based Network Management (PBNM). However, the management of enforced configurations in production environments (e.g. data center) is a crucial and complex task. For example, updates on firewall configuration to change a set of rules. Although this task is fundamental for complex systems, few effective solutions have been proposed for monitoring and managing enforced configurations. This work proposes a novel approach to monitor and manage enforced configurations in production environments. The main contributions of this paper are a formal model to identify/generate traffic flows and to verify the enforced configurations, and a slim and transparent framework to perform the policy assessment. We have implemented and validated our approach in a virtual environment in order to evaluate different scenarios. The results demonstrate that the prototype is effective and has good performance, therefore our model can be effectively used to analyse several types of IT infrastructures. A further interesting result is that our approach is complementary to PBNM.


    Zugriff

    Download


    Exportieren, teilen und zitieren



    Titel :

    Online and offline security policy assessment



    Erscheinungsdatum :

    2016-01-01



    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch



    Klassifikation :

    DDC:    006 / 629



    RL-Driven MPPI: Accelerating Online Control Laws Calculation With Offline Policy

    Qu, Yue / Chu, Hongqing / Gao, Shuhua et al. | IEEE | 2024


    Online and Offline Stability Assessment Development at National Grid, UK

    Li, Fan / Bradley, Martin / Howell, Frederic | Springer Verlag | 2021


    Online- und Offline-Schliesssystem kombiniert

    British Library Online Contents | 2011



    Combining Online and Offline Handwriting Recognition

    Vinciarelli, A. / Perrone, M. / Institute of Electrical and Electronics Engineers | British Library Conference Proceedings | 2003