Skip to Main content Skip to Navigation
New interface

Orchestration et vérification de fonctions de sécurité pour des environnements intelligents

Nicolas Schnepf 1, 2, 3 
1 RESIST - Resilience and Elasticity for Security and ScalabiliTy of dynamic networked systems
Inria Nancy - Grand Est, LORIA - NSS - Department of Networks, Systems and Services
2 VERIDIS - Modeling and Verification of Distributed Algorithms and Systems
MPII - Max-Planck-Institut für Informatik, Inria Nancy - Grand Est, LORIA - FM - Department of Formal Methods
3 MOSEL - Proof-oriented development of computer-based systems
LORIA - FM - Department of Formal Methods
Abstract : Smart environments, in particular smartphones, are the target of multiple security attacks. Moreover, the deployment of traditional security mechanisms is often inadequate due to their highly constrained resources. In that context, we propose to use chains of security functions which are composed of several security services, such as firewalls or antivirus, automatically configured and deployed in the network. Chains of security functions are known as being error prone and hard to validate. This difficulty is caused by the complexity of these constructs that involve hundreds and even thousands of configuration rules. In this PhD thesis, we propose the architecture of an orchestrator, exploiting the programmability brought by software defined networking, for the automated configuration and deployment of chains of security functions. It is important to automatically insure that these security chains are correct, before their deployment in order to avoid the introduction of security breaches in the network. To do so, our orchestrator relies on methods of automated verification and synthesis, also known as formal methods, to ensure the correctness of the chains. Our work also consider the optimization of the deployment of chains of security functions in the network, in order to maintain its resources and quality of service.
Complete list of metadata

Cited literature [110 references]  Display  Hide  Download
Contributor : Thèses UL Connect in order to contact the contributor
Submitted on : Wednesday, November 6, 2019 - 3:17:11 PM
Last modification on : Saturday, June 25, 2022 - 7:44:36 PM
Long-term archiving on: : Saturday, February 8, 2020 - 7:51:36 AM


Files produced by the author(s)


  • HAL Id : tel-02351769, version 1


Nicolas Schnepf. Orchestration et vérification de fonctions de sécurité pour des environnements intelligents. Réseaux et télécommunications [cs.NI]. Université de Lorraine, 2019. Français. ⟨NNT : 2019LORR0088⟩. ⟨tel-02351769⟩



Record views


Files downloads