Titulo Estágio
Network Softwarization for IACS Applications
Local do Estágio
Universidade de Roma Tre - MUSE Lab + LCT (DEI/UC)
Enquadramento
This topic is focused on understanding how SDN (Software-Defined Networking) and NFV (Network Function Virtualization) technologies can be used for security purposes in the context of critical systems, namely industrial control networks. In addition to the security of industrial control networks (based on SCADA technologies) or IoT environments (including smart grids) this project also aims to investigate several innovative mechanisms, in terms of the detection of attacks on industrial control networks, their containment and the delimitation of the risks associated with these attacks as well as the strengthening of the infrastructure resilience and fault tolerance.
Thus, the objective of this work focuses on two lines of action: to support the development of an SDN/NFV testbed and to investigate the potential arising from the association of these two technologies.
Objetivo
The objective of this proposal is to develop solutions/agents/components for a distributed platform for security in SDN/NFV environments. The work will be focused in the implementation of a security concept based on these technologies, with particular focus on the integration of the control plane, and eventual integration with a distributed agent-based detection component. These agents may consist of software components (in the case of Host IDS), specialized appliances, or virtualized components.
Subsequently, the trainee should design and implement a SDN/NFV testbed, undertaking the prospection, design and development of mechanisms and solutions capable of taking advantage of the potential synergies between these two technologies. The following objectives are thus envisaged:
• Research about the state of the art in the theme of cyber-physical system communication and network infrastructures
• Research about the state of the art regarding SDN and NFV technologies
• Analysis of the combined potential of NFV/SDN technologies and proposal of technical solutions capable of taking advantage of their combined potential, in terms of security (prevention, detection, reaction), resilience and fault tolerance
• Architecture proposal and implementation for an NFV/SDN testbed/scenario (real, hybrid or simulated) for designated environments
Plano de Trabalhos - Semestre 1
• Research about the state of the art regarding SDN and NFV technologies, with a focus on security
• Prospection effort about the technologies and requirements for SDN and NFV
• Planning and implementation of a test environment/use case scenario supporting the development and evaluation effort
• Identification of critical points to deal with regarding the security domain, as well as their corresponding requirements’ elicitation
• Architecture proposal for the solution to be implemented
• Writing of documentation, including the interim report
Plano de Trabalhos - Semestre 2
• Architectural refinement of the proposed solution
• Development, integration and deployment of the mechanisms/solutions to be developed
• Validation and evaluation of the proposed solutions
• Final Documentation and Writing of the Report/Dissertation
Condições
The ability to work within a team will be essential, as the candidate will be part of a joint effort between the Multimedia and Security Laboratory of the University of Roma Tre and the Laboratory of Communications and Telematics of the Department of Informatics Engineering of the University of Coimbra. A workspace will be provided in a Roma Tre laboratory, which will be involved in the daily dynamics of the project and the group, under joint coordination/monitoring of both the Italian and Portuguese teams.
Observações
O orientador remoto na Universidade de Roma Tre será o professor Marco Carli. Os dados são os seguintes:
Professor Marco Carli
Department of Industrial, Electronics and Mechanical Engineering
Università degli Studi Roma Tre
E-mail: marco.carli@uniroma3.it
Orientador
Tiago José dos Santos Martins da Cruz
tjcruz@dei.uc.pt 📩