Design and implementation of virtual security appliances (VSA) for SME

Abstract

The deployment of new security technologies in existing network topologies requires exhaustive testing before usage to avoid down time of the production systems. Nowadays, the required testing is in many cases omitted due to the complexity of creating test cases and experimental set ups. The VISA (Virtual IT Security Architectures) project [1], funded by the German Federal Ministry of Research, aims to provide a simulation environment for semi-automated deployment of experiments based on system models. Building Virtualised Security Appliances (VSA) for enterprise networks is the most important part of the VISA project, which offers the user the possibility to build and deploy secured virtual machines and services within the model to improve it. The developed VSAs are based on mobile scenarios to establish secure connections from an Android smartphone to an enterprise IT infrastructure as well as a meta-data client/server system to establish a higher security level for e xisting infrastructures. The approach of VISA is therefore to implement such complex security systems easily within the basic environment of small and medium enterprises (SME). This paper is intended to describe the final results of the project, before the analysis phase has been started

Enhancing Security Testing via Automated Replication of IT-Asset Topologies

“…2) The Topology Editor: The Topology Editor 3 [31] provides the general user interface required for interaction with the IRP. The back-end communication of the Topology Editor is handled by IO-X.…”

The Good, The Bad and The Missing: A Narrative Review of Cyber-security Implications for Australian Small Businesses

“…Cloud infrastructure presents challenges for traditional cyber-security products. For example, general network scanning [99] assumes the infrastructure is local and/or reachable for scanning purposes, an assumption valid only for private infrastructure. The increasing suite of cloud-based network perimeter scanning services [100,101,102] require explicit input from users on the target devices to be scanned.…”