Journal article
Matteo Repetto, Alessandro Carrega, Riccardo Rapuzzi
Future Generation Computer Systems, vol. 115, 2021, pp. 251-266
Future Generation Computer Systems, vol. 115, 2021, pp. 251-266
Cite
Cite
APA
Click to copy
Repetto, M., Carrega, A., & Rapuzzi, R. (2021). An Architecture to Manage Security Operations for Digital Service Chains. Future Generation Computer Systems, 115, 251โ266. https://doi.org/10.1016/j.future.2020.08.044
Chicago/Turabian
Click to copy
Repetto, Matteo, Alessandro Carrega, and Riccardo Rapuzzi. โAn Architecture to Manage Security Operations for Digital Service Chains.โ Future Generation Computer Systems 115 (2021): 251โ266.
MLA
Click to copy
Repetto, Matteo, et al. โAn Architecture to Manage Security Operations for Digital Service Chains.โ Future Generation Computer Systems, vol. 115, 2021, pp. 251โ66, doi:10.1016/j.future.2020.08.044.
BibTeX Click to copy
@article{repetto2021a,
title = {An Architecture to Manage Security Operations for Digital Service Chains},
year = {2021},
journal = {Future Generation Computer Systems},
pages = {251-266},
volume = {115},
doi = {10.1016/j.future.2020.08.044},
author = {Repetto, Matteo and Carrega, Alessandro and Rapuzzi, Riccardo}
}
๐ Towards Programmable and Orchestrated Security for Digital Service Chains
Modern digital services increasingly span multiple administrative domains, heterogeneous infrastructures, and dynamic service compositions. These characteristics challenge conventional perimeter-based cybersecurity architectures and limit end-to-end visibility.
In our paper, we propose a reference architecture for Security Operations Center as a Service (SOCaaS) that integrates distributed, programmable security capabilities with logically centralized orchestration, analytics, and security management.
The architecture introduces four key building blocks:
๐น Digital Services: Embedded monitoring, inspection, and enforcement capabilities.
๐น SOCaaS Platform: Context Broker, Security Controller, orchestration framework, and modular security services.
๐น Security Dashboard: Situational awareness, policy management, investigation, and incident response.
๐น AAA Framework: Coordinated authentication, authorization, and access management.
The proposed approach aims to improve security visibility, automate operational workflows, and support trustworthy service chains across cloud, edge, IoT, and multi-provider environments.
๐ก๏ธ Securing Digital Service Chains: A Cybersecurity Story! โก
What happens when cloud platforms, IoT devices, microservices, and multiple providers must work together securely?
Traditional perimeter-based security is no longer enough!
Our research introduces a flexible Security Operations Center as a Service (SOCaaS) architecture that orchestrates distributed security capabilities across heterogeneous, dynamic, and multi-domain environments.
๐ Distributed monitoring and visibility ๐ง Centralized security analytics and threat detection โ๏ธ Dynamic security orchestration ๐ Cross-domain threat intelligence sharing
The mission? Making digital service chains more secure, trustworthy, and resilient!
