Security automation for web-based attacks
Francesco Grande
Security automation for web-based attacks.
Rel. Fulvio Valenza, Riccardo Sisto, Daniele Bringhenti. Politecnico di Torino, Corso di laurea magistrale in Ingegneria Informatica (Computer Engineering), 2024
|
Preview |
PDF (Tesi_di_laurea)
- Tesi
Licenza: Creative Commons Attribution Non-commercial. Download (3MB) | Preview |
|
|
Archive (ZIP) (Documenti_allegati)
- Altro
Licenza: Creative Commons Attribution Non-commercial. Download (90kB) |
Abstract
One of the most emerging innovations of the last years is the security automation of networks. Various technologies have been developed to streamline all security processes within different network environments. Two significant advancements in this field are SDN (Software-Defined Network) and NFV (Network Function Virtualization), which have elevated automation to a central role in cybersecurity. These technologies enable the construction of networks where certain nodes are not tied to specific hardware but are instead virtualized, allowing them to deploy network functions through software. Within this context, the VEREFOO (VErified REfinement and Optimized Orchestration) framework has been developed; it is capable of obtaining an automated and optimal allocation of some NSFs (Network Security Functions), necessary to fulfil a set of NSRs (Network Security Requirements) provided as input, starting from a logical description of the network topology.
VEREFOO ensures optimality and formal correctness of its solutions through the formulation of a MaxSMT problem solved efficiently by z3, a theorem prover developed by Microsoft Research
Tipo di pubblicazione
URI
![]() |
Modifica (riservato agli operatori) |
