Dynamic Security Orchestration for CDN Edge-Servers
Elaheh Jalalpour, Milad Ghaznavi, Daniel Migault, Stere Preda, Makan Pourzandi, Raouf Boutaba · 2018
Content Delivery Networks (CDNs) aim to provide high Quality of Service (QoS) in serving digital content. To achieve high QoS, CDNs employ edge-servers that cache content in the vicinity of end-users. Edge-servers are vulnerable to attacks that degrade the QoS of end-users. Protecting edge-servers against these threats is vital and complex. The attack mitigation must be immediate, and its overhead should have the least impact on the QoS of legitimate end-users. In this paper, we demonstrate a software-based security system that can be programmed to automatically react to threats by deploying and managing security function chains. Using high-level security policies, a network operator can program a desired system behavior. We demonstrate how our system automatically deploys security function chains to handle real-world threats.