SecureWeaver: Intent-Driven Secure System Designer

Ooi, Sian En; Beuran, Răzvan; Tan, Yasuo; Kuroda, Takayuki; Kuwahara, Tomohiro; Fujita, Norihito

doi:10.1145/3510547.3517923

Cited by 4 publications

(1 citation statement)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Intent-driven security introduces new capabilities for automation and resilience: By presenting security strategies and requirements as intents, low-level configuration and reconfigurations, implementation, and enforcement of the policies can be left for the responsibility of the network. For example, Ooi et al [11], [12] described a system designer, called SecurityWeaver, to annotate network service requirements with security demands and then automatically generate secure network designs. They utilized MITRE attack matrix based knowledge base to present security annotations: to identify adversarial tactics and to include appropriate countermeasures into designs.…”

Section: B Automated Security Configurationmentioning

confidence: 99%

Security in Intent-Based Networking: Challenges and Solutions

Ahmad,

Malinen,

Christou

et al. 2023

2023 IEEE Conference on Standards for Communications and Networking (CSCN)

View full text Add to dashboard Cite

Intent-Based Networking (IBN) aims to automate administrative and management tasks in future communications networks. By leveraging networking concepts such as network abstractions and data-plane programmability and using artificial intelligence (AI), IBN improves the overall efficiency of communications networks. IBN employs a closed-loop architecture to monitor and optimize real-time network performance, reduce human intervention, and enhance resilience. However, the paradigm and the technological enablers introduce security challenges. This article studies the security gains and challenges in IBN from the aspect of enabling concepts and technologies. Furthermore, the article highlights potential solutions to existing challenges, outlines the standardization efforts, and summarizes the most important research gaps to advance future research in this direction.

show abstract

Section: B Automated Security Configurationmentioning

confidence: 99%

Security in Intent-Based Networking: Challenges and Solutions

Ahmad,

Malinen,

Christou

et al. 2023

2023 IEEE Conference on Standards for Communications and Networking (CSCN)

View full text Add to dashboard Cite

show abstract

Robust by design: Designing ICT infrastructures using Twins

Baiardi

2024

Digital Twins and Applications

View full text Add to dashboard Cite

Robust‐by‐design (RbD) is a design strategy that uses adversary emulation to strengthen the security of an information and communication infrastructure. It relies on two key components: the security twin and the threat actor twins. The security twin is a detailed database that outlines the different parts of the infrastructure, how they are connected, and their vulnerabilities. It also highlights the types of attacks each part could enable. On the other hand, the twin of a threat actor describes its potential attack surface, the attacks it can carry out, its strategy, and its ultimate goal, if any. This information comes from threat intelligence. RbD conducts independent simulations of various threat actors against the security twin to identify all possible attack paths they could exploit. Three types of analysis use this information to improve the robustness and resilience of the infrastructure. The first analysis fills in the gaps in threat intelligence by extending information on threat actors and vulnerabilities. The second analysis focuses on selecting countermeasures aimed at eliminating attack paths or at least reducing their chances of success. Possible countermeasures include patching vulnerabilities, adjusting firewall rules, and implementing network segmentation. Information on attack paths guides the choice and configuration of these countermeasures. Once the infrastructure twin is updated to reflect countermeasure deployment, RbD performs further simulations to uncover any new attack paths that could be exploited and to identify additional countermeasures. The final analysis seeks to address the risks associated with any remaining unaddressed attack paths.

show abstract

Merging FMEA and Digital Twins to Improve Trustfulness

Baiardi

2023

2023 7th International Conference on System Reliability and Safety (ICSRS)

View full text Add to dashboard Cite

SecureWeaver: Intent-Driven Secure System Designer

Cited by 4 publications

References 9 publications

Security in Intent-Based Networking: Challenges and Solutions

Security in Intent-Based Networking: Challenges and Solutions

Robust by design: Designing ICT infrastructures using Twins

Merging FMEA and Digital Twins to Improve Trustfulness

Contact Info

Product

Resources

About