Articles
Optimized Integration of Security Services within Network Access Control Architectures
Downloads
Keywords
Network Access Control
Security Services Integration
Service Function Chaining
Zero Trust Architecture
Article Usage Statistics
Live Metrics
Abstract Views
253
File Views
133
PDF
0
HTML
0
Other
133
Total
386
Article Usage Chart
Abstract
File Views
PDF
HTML
Other
Total
Abstract
The rapid expansion of enterprise networks, coupled with increased cyber threats, necessitates the integration of security services directly within network access control architectures. Traditional perimeter-based defenses are insufficient for addressing dynamic threats in modern network environments. This research investigates an optimized integration framework for security services, emphasizing service function chaining (SFC) mechanisms and zero-trust principles. Drawing upon existing studies, including policy-driven vCPE implementations and SFC-enabled SSL/TLS traffic management, the paper proposes a structured approach for embedding security functions within access control systems. Findings indicate that dynamically orchestrated security functions improve threat mitigation, minimize latency, and enhance compliance enforcement. This study contributes to advancing secure network architectures and offers practical guidelines for enterprise deployment.
Downloads
Download data is not yet available.
References
1. V. A. Cunha, I. Cardoso, J. P. Barraca, and R. L. Aguiar, “Policy-driven vCPE through dynamic network service function chaining,” in Proc. IEEE NetSoft Conf. Workshops (NetSoft), Jun. 2016, pp. 156–160.
2. V. A. Cunha, M. B. d. Carvalho, D. Corujo, J. P. Barraca, D. Gomes, A. Schaeffer-Filho, C. R. P. d. Santos, L. Z. Granville, and R. L. Aguiar, “An SFC-enabled approach for processing SSL/TLS encrypted traffic in future enterprise networks,” in Proc. IEEE Symp. Comput. Commun. (ISCC), Jun. 2018, pp. 1013–1019.
3. L. Bradatsch, M. Haeberle, B. Steinert, F. Kargl, and M. Menth, “Secure service function chaining in the context of zero trust security,” in Proc. IEEE 47th Conf. Local Comput. Netw. (LCN), Sep. 2022, pp. 123–131.
4. L. Bradatsch, O. Miroshkin, and F. Kargl, “ZTSFC: A service function chaining-enabled zero trust architecture,” IEEE Access, vol. 11, pp. 125307–125327, 2023.
5. M. S. Castanho, C. K. Dominicini, R. S. Villacça, M. Martinello, and R. N. M. Ribeiro, “PhantomSFC: A fully virtualized and agnostic service function chaining architecture,” in Proc. IEEE Symp. Comput. Commun. (ISCC), Jun. 2018, pp. 354–359.
6. D. Eidle, S. Y. Ni, C. DeCusatis, and A. Sager, “Autonomic security for zero trust networks,” in Proc. IEEE 8th Annu. Ubiquitous Comput., Electron. Mobile Commun. Conf. (UEMCON), Oct. 2017, pp. 288–293.
7. W. Fan, F. Yang, P. Wang, M. Miao, P. Zhao, and T. Huang, “DRL-based service function chain edge-to-edge and edge-to-cloud joint offloading in edge-cloud network,” IEEE Trans. Netw. Service Manage., vol. 20, no. 4, Dec. 2023.
8. K. Fysarakis, N. E. Petroulakis, A. Roos, K. Abbasi, P. Vizarreta, G. Petropoulos, E. Sakic, G. Spanoudakis, and I. Askoxylakis, “A reactive security framework for operational wind parks using service function chaining,” in Proc. IEEE Symp. Comput. Commun. (ISCC), Jul. 2017, pp. 663–668.
9. J. Garbis and J. W. Chapman, Zero Trust Security. Cham, Switzerland : Springer, 2021.
10. H. Gunleifsen, T. Kemmerich, and V. Gkioulos, “A proof-of-concept demonstration of isolated and encrypted service function chains,” Future Internet, vol. 11, no. 9, p. 183, Aug. 2019.
11. J. Halpern and C. Pignataro, Service Function Chaining (SFC) Architecture, document RFC 7665, Internet Requests for Comments, IETF, 2015.
12. H. Hantouti, N. Benamar, T. Taleb, and A. Laghrissi, “Traffic steering for service function chaining,” IEEE Commun. Surveys Tuts., vol. 21, no. 1, pp. 487–507, 1st Quart., 2019.
13. H. Huang, S. Guo, J. Wu, and J. Li, “Service chaining for hybrid network function,” IEEE Trans. Cloud Comput., vol. 7, no. 4, pp. 1082–1094, Oct. 2019.
14. U. Inayat, M. Farzan, S. Mahmood, M. F. Zia, S. Hussain, and F. Pallonetto, “Insider threat mitigation: Systematic literature review,” Ain Shams Eng. J., vol. 15, no. 12, Dec. 2024, Art. no. 103068.
15. J. M. Kizza, Guide to Computer Network Security, vol. 6. Cham, Switzerland : Springer, 2024.
16. J. R. Vacca, Network and System Security. Amsterdam, The Netherlands : Elsevier, 2013.
17. J. Malis, S. Bryant, J. Halpern, and W. Henderickx, MPLS Transport Encapsulation for the Service Function Chaining (SFC) Network Service Header (NSH), document RFC 8596, Internet Requests for Comments, IETF, Jun. 2019.
18. C. Katsis, F. Cicala, D. Thomsen, N. Ringo, and E. Bertino, “NEUTRON: A graph-based pipeline for zero-trust network architectures,” in Proc. 12th ACM Conf. Data Appl. Secur. Privacy. New York, NY, USA : Association for Computing Machinery, Apr. 2022, pp. 167–178, doi: 10.1145/3508398.3511499.
19. T. Yu, S. K. Fayaz, M. J. Collins, V. Sekar, and S. Seshan, “PSI: Precise security instrumentation for enterprise networks,” in Proc. NDSS, Jan. 2017.
20. M. Pattaranantakul, Q. Song, Y. Tian, L. Wang, Z. Zhang, A. Meddahi, and C. Vorakulpipat, “On achieving trustworthy service function chaining,” IEEE Trans. Netw. Service Manage., vol. 18, no. 3, pp. 3140–3153, Sep. 2021.
21. P. Quinn and T. Nedeau, Network Service Header (NSH), document RFC 7498, IETF, 2015.
22. M. Polverini, J. Galán-Jiménez, F. G. Lavacca, A. Cianfrani, and V. Eramo, “A scalable and offloading-based traffic classification solution in NFV/SDN network architectures,” IEEE Trans. Netw. Service Manage., vol. 18, no. 2, pp. 1445–1460, Jun. 2021.
23. M. Polverini, J. Galán-Jiménez, F. G. Lavacca, A. Cianfrani, and V. Eramo, “Dynamic in-network classification for service function chaining ready SDN networks,” in Proc. 10th Int. Conf. Netw. Future (NoF), vol. 128, Oct. 2019, pp. 74–81.
24. A. Shameli-Sendi, Y. Jarraya, M. Pourzandi, and M. Cheriet, “Efficient provisioning of security service function chaining using network security defense patterns,” IEEE Trans. Services Comput., vol. 12, no. 4, pp. 534–549, Jul. 2019.
25. S. Rose, O. Borchert, S. Mitchell, and S. Connelly, “Zero trust architecture,” NIST Comput. Secur. Resource Center, Aug. 2020.
26. R. Vanickis, P. Jacob, S. Dehghanzadeh, and B. Lee, “Access control policy enforcement for zero-trust-networking,” in Proc. 29th Irish Signals Syst. Conf. (ISSC), Jun. 2018, pp. 1–6.
27. C. Zhang, S. Addepalli, N. Murthy, L. Fourie, M. Zarny, and L. Dunbar, L4-l7 Service Function Chaining Solution Architecture, document ONF TS-027, Open Networking Foundation, 2015, vol. 379.
28. D. Zhai, X. Meng, Z. Yu, H. Hu, and T. Huang, “A security-aware service function chain deployment method for load balance and delay optimization,” Sci. Rep., vol. 12, no. 1, p. 10442, Jun. 2022.
29. W. Stallings, Network Security Essentials: Applications and Standards. London, U.K. : Pearson, 2016.
30. A. Malis, S. Bryant, J. Halpern, and W. Henderickx, MPLS Transport Encapsulation for the Service Function Chaining (SFC) Network Service Header (NSH), document RFC 8596, Internet Requests for Comments, IETF, Jun. 2019.