Native Security Support for Virtualised Networked Infrastructures

这个博士项目将研究网络异常和攻击检测领域，以及用于检测和修复其影响的算法类型。随后将考虑如何在网络基础设施上以分布式方式实现这些算法，假设这些基础设施支持其组件的虚拟化，例如云数据中心。该项目探索了软件定义网络（SDN）和网络功能虚拟化（NFV）等最新技术，以灵活和可扩展的方式保护基础设施。这是为了克服目前在长时间尺度和静态配置上部署的有限安全功能集的限制，这导致无法防御未知攻击，也无法提供自定义的安全级别。该项目的结果将有利于主要的网络和服务提供商，他们将能够在短时间内保护其基础设施免受不断发展的攻击向量。该项目与EPSRC的ICT网络和分布式系统研究领域相关，并与数字经济和全球不确定性主题保持一致。

This PhD project will look into the areas of network anomaly and attack detection, and the types of algorithms used to detect and remediate their effects. It will subsequently consider how such algorithms can be implemented in a distributed manner over networked infrastructures that are assumed to support virtualisation of their components, such as, e.g., Cloud Data Centres.The project explores recent technologies such as Software-Defined Networking (SDN) and Network Function Virtualisation (NFV) for securing the infrastructure in a flexible and extensible way. This is in order to overcome the current limitation of a limited set of security functions being deployed over long time-scales and over static configurations, which results in not being able to defend against unknown attacks, nor to be able to offer custom levels of security.Results from this project will be of benefit to major network and service providers who will be able to secure their infrastructures from evolving attack vectors in short timescales. The project is related to the ICT Networks and Distributed Systems EPSRC research area, and is aligned with the Digital Economy and Global Uncertainties themes.