Native Security Support for Virtualised Networked Infrastructures

这个博士项目将研究网络异常和攻击检测领域，以及用于检测和修复其影响的算法类型。随后将考虑如何以分布式方式在假定支持其组件的虚拟化的联网基础设施上实现此类算法，例如，云数据中心。该项目探讨了软件定义网络（SDN）和网络功能虚拟化（NFV）等最新技术，以灵活和可扩展的方式保护基础设施。这是为了克服在长时间尺度上和静态配置上部署有限的安全功能集合的当前限制，这导致不能防御未知攻击，也无法提供自定义的安全级别。该项目的结果将有利于主要网络和服务提供商，简而言之，他们将能够保护其基础设施免受不断变化的攻击媒介的影响时间尺度。该项目与信息通信技术网络和分布式系统EPSRC研究领域有关，并与数字经济和全球可持续发展主题保持一致。

This PhD project will look into the areas of network anomaly and attack detection, and the types of algorithms used to detect and remediate their effects. It will subsequently consider how such algorithms can be implemented in a distributed manner over networked infrastructures that are assumed to support virtualisation of their components, such as, e.g., Cloud Data Centres.The project explores recent technologies such as Software-Defined Networking (SDN) and Network Function Virtualisation (NFV) for securing the infrastructure in a flexible and extensible way. This is in order to overcome the current limitation of a limited set of security functions being deployed over long time-scales and over static configurations, which results in not being able to defend against unknown attacks, nor to be able to offer custom levels of security.Results from this project will be of benefit to major network and service providers who will be able to secure their infrastructures from evolving attack vectors in short timescales. The project is related to the ICT Networks and Distributed Systems EPSRC research area, and is aligned with the Digital Economy and Global Uncertainties themes.