Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Patrick Lingga

dblp:284/3223 · DBLP profile ↗
← Back
1ranked-venue papers
1as first author
1since 2021 · last 2024
0009-0009-9506-136XORCID · reported

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 1 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Computer networks
1 paper
Network management and operations · 87% Software-defined and programmable networks · 13%

Topics — the 3 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Network management and operations › policy-based management
policy transformation
0.812024
SPT: Security Policy Translator for Network Security Functions in Cloud-Based Security Services · IEEE Trans. Dependable Secur. Comput. 2024
Network management and operations › network security management
security policy configuration
0.812024
SPT: Security Policy Translator for Network Security Functions in Cloud-Based Security Services · IEEE Trans. Dependable Secur. Comput. 2024
Software-defined and programmable networks
network function virtualization
0.212024
SPT: Security Policy Translator for Network Security Functions in Cloud-Based Security Services · IEEE Trans. Dependable Secur. Comput. 2024

Methods — techniques the papers use, named apart from their topics

deterministic finite automaton · 0.8YANG data model mapping · 0.8
YearPublicationVenuePosition
2024 SPT: Security Policy Translator for Network Security Functions in Cloud-Based Security Services
abstract
Interface to Network Security Functions (I2NSF) Working Group within Internet Engineering Task Force (IETF) has developed a framework and its interfaces with YANG data models for configuring Network Security Functions (NSF). These models include a high-level security policy (i.e., an overview of configuration) and a low-level security policy (i.e., a detailed and specific configuration) to facilitate the configuration of NSFs. In this paper, a Security Policy Translator (SPT) is proposed to translate high-level security policies created by users into the corresponding low-level security policies. It leverages the design of I2NSF YANG data models to accurately translate security policies. The SPT performs a translation by extracting the high-level security principles using Deterministic Finite Automaton (DFA) construction from the high-level YANG data model. It converts the extracted information to a low-level form by utilizing a mapping model created by comparing the two YANG data models, such as the Consumer-Facing Interface (CFI) and NSF-Facing Interface (NFI) YANG data models. It selects the optimal NSFs based on the security policies to provide maximum security performance. It generates low-level security policies for the NSFs to deploy the security services. The proposed approach allows security policy translation for the I2NSF framework with high accuracy and speed.
Patrick Lingga, Jaehoon Jeong 0001, Jinhyuk Yang
IEEE Trans. Dependable Secur. Comput.1