We present a service-oriented approach to security orchestration for software-defined infrastructure. This approach adopts software-defined security principles. It abstracts security controls as security services, and interprets assets' security policies as service requirements. This approach supports security management and orchestration at an abstract level and shields them from the underlying infrastructure and its dynamic changes. The orchestration approach described in this paper helps enforce consistent security policies across heterogeneous cloud environments and simplifies security management tasks for network administrators. We present a prototype that implements a service-oriented approach to software-defined security and discuss several practical use cases for this approach.
['Song Luo', 'Malek Ben Salem']
Orchestration of software-defined security services