A new methodology to automatically define the allocation scheme and configuration of packet filters in the logical topology of a virtual network is proposed, based on solving a carefully designed partial weighted Maximum Satisfiability Modulo Theories problem by means of a state of the art solver.
A novel methodology which leverages Maximum Satisfiability Modulo Theories (MaxSMT) to automatically compute a formally correct and optimized allocation scheme and configuration of SDN switches by refining security policies, user-defined or derived from detected attacks is proposed.
Daniele Bringhenti, Jalolliddin Yusupov, A. M. Zarca et al.· 3 citations
This demo presents a looping process that autonomously mitigates ongoing attacks by extracting security policies from intrusion detection system alerts and automatically reconfiguring distributed firewalls via a provably correct and optimized approach.
Francesco Pizzato, Daniele Bringhenti, Riccardo Sisto et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.