Explaining security compliance failures in Network Function Virtualization environment through root cause analysis

The objective of this project is to elaborate an automated and scalable approach to assist security analyst in investigating and identifying underlying key cause (or causes) behind security or compliance failures of network services in NFV-based environment. Finding the root cause allows appropriate and achievable actions to be taken to recover or/and prevent the recurrence of the same situation leading to the failure. More precisely, we propose to design an approach that, based on a reported incident or compliance failure, can assist a security analyst to investigate and report the principal possible root causes. As a proof of concept, we plan to implement the approach in a tool that can be deployed in NFV-enabled environment and eventually integrated in an opensource tools/framework. To evaluate the proposed approach, we plan to perform experiments on runtime performance and storage consumption of such a solution and to implement use cases to show the applicability of our approach.

Faculty Supervisor:

Lingyu Wang

Student:

Partner:

Ericsson Canada Inc (Quebec)

Discipline:

Engineering

Sector:

Information and cultural industries; Professional, scientific and technical services

University:

Concordia University

Program: