Abstract:Opening-up sharing has prompted the multi-tenancy architecture, whereby different vendors (including outsourcees) work together with network operators to form a vibrant service ecosystem, resulting in several advantages as well as risks. In particular, the static nature of existing architectures in network functions virtualization-based (NFV-based) clouds facilitate hacking. Thus, much attention has been focused on determining how to avoid the uncontrollable cloud security induced by complex production relations and non-trustworthy software/hardware sources when the two sets of security risks intersect. In this article, we investigate latent persistent threats against cloud environments and determine a high degree of complementarity and consistency between the NFV-based cloud environment and the dynamic defense concept. More specifically, new NFV-based cloud features provide an effective implementation for dynamic defense, while the generalized robustness of dynamic defense theory allows for high security gains. Intrinsic cloud security (iCS) is then proposed to align NFV-based clouds, mimicking defense and the moving target defense (MTD) paradigm to implement a seamless integration and symbiosis evolution between security and NFV-based clouds. We quantify the impact on system overhead to account for efficiency and cost issues. The simulation analysis demonstrates that the enhanced mode is able to consistently obtain a more beneficial and stable defense compared with the counterparts.

An authentication model for multilevel security domains

Inter-domain authentication scheme for Pervasive Computing Environments

A Three-layer Security Assurance Model for a Decentralized Federated Learning System

The Research on Definition of Multilevel Security Based on the Construction of Covert Channels.

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Dynamically modified union model combining confidentiality and integrity

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Researche on Design of Biometric Authentication System

A Multilevel Security Model with Credibility Characteristics

Constructing authentication web in cloud computing

A Multilevel Security Model for Private Cloud

FORMAL SECURITY DATABASE SYSTEM ACCESS MODEL

ON A MULTILEVEL SECURITY MODEL OF SECURITY DATABASE AND FOREIGN KEY REFERENCE

Trust Degree Based Multilevel Security Policy and Its Model of State Machine

A Dynamic Cross Domain Access Control Model for Multi-level System

Contructing Authentication Web in Cloud Computing

Mandatory Access Control Modeling and Security Analysis: A Petri-Nets Based Method

A Modeling Method of Cyberspace Security Structure Based on Layer-Level Division

SafeZone: A Hierarchical Inter-Domain Authenticated Source Address Validation Solution

A Multi-Protection Domains Process Model and Its Implementation