MSNetViews: Geographically Distributed Management of Enterprise Network Security Policy

I Anjum, J Sokal, HR Rehman, B Weintraub… - Proceedings of the 28th …, 2023 - dl.acm.org
I Anjum, J Sokal, HR Rehman, B Weintraub, E Leba, W Enck, C Nita-Rotaru, B Reaves
Proceedings of the 28th ACM Symposium on Access Control Models and Technologies, 2023dl.acm.org
Commercially-available software defined networking (SDN) technologies will play an
important role in protecting the on-premises resources that remain as enterprises transition
to zero trust architectures. However, existing solutions assume the entire network resides in
a single geographic location, requiring organizations with multiple sites to manually ensure
consistency of security policy across all sites. In this paper, we present MSNetViews, which
extends a single, globally-defined and managed, enterprise network security policy to many …
Commercially-available software defined networking (SDN) technologies will play an important role in protecting the on-premises resources that remain as enterprises transition to zero trust architectures. However, existing solutions assume the entire network resides in a single geographic location, requiring organizations with multiple sites to manually ensure consistency of security policy across all sites. In this paper, we present MSNetViews, which extends a single, globally-defined and managed, enterprise network security policy to many geographically distributed sites. Each site operates independently and enforces a site-specific policy slice that is dynamically parameterized with user location as employees roam between sites. We build a prototype of MSNetViews and show that for an enterprise with globally distributed sites, the average time for policy state to settle after a user roams to a new site is well below two seconds. As such, we demonstrate that multisite organizations can efficiently protect their on-premises network-attached devices via a single global perspective.
ACM Digital Library
Showing the best result for this search. See all results