Sungkyunkwan University

Patrick Lingga

Jaehoon Jeong

Jung Soo Park

Jae Hoon Jeong

Yun Chul Choi

A method of performing a security management automation in an Interface to Network Security Functions (I2NSF) system is disclosed. The method comprises receiving a high-level security policy via a consumer-facing interface; translating the high-level security policy into a low-level security policy based on an automatic mapping model; transmitting the low-level security policy to a network security function (NSF) via an NSF-facing interface, wherein the low-level security policy is applied to a system of the NSF; receiving monitoring data for a network security from the NSF; reconfiguring a security policy based on the monitoring data; and transmitting the reconfigured security policy to the NSF via the NSF-facing interface. The reconfigured security policy is updated to a system of the NSF.

Method and system for performing security management automation in cloud-based security services

The present disclosure relates to a data model for an analytics interface between an Interface to Network Security Functions (I2NSF) analyzer and a security controller in a security management system. A method of performing a security management by the I2NSF analyzer includes receiving monitoring data from at least one network security function (NSF) providing a security service, analyzing the received monitoring data to generate a new security policy or feedback information, and providing the generated new security policy or feedback information to the security controller.

Growing community of inventors

Suwon-si, South Korea

Patrick Lingga