Abstract: Disclosed is a method in which a security controller translates a security policy for Interface to Network Security Functions (I2NSF), the method including: extracting data from a higher-level policy received from an I2NSF user; converting the extracted data into a capability of a target network security function (NSF) of the security policy by referring to mapping information between elements of a high-level data model and elements of a low-level data model; and generating a lower-level policy to execute the capability of the NSF.

Abstract: A method of performing a security management automation in an Interface to Network Security Functions (I2NSF) system is disclosed. The method comprises receiving a high-level security policy via a consumer-facing interface; translating the high-level security policy into a low-level security policy based on an automatic mapping model; transmitting the low-level security policy to a network security function (NSF) via an NSF-facing interface, wherein the low-level security policy is applied to a system of the NSF; receiving monitoring data for a network security from the NSF; reconfiguring a security policy based on the monitoring data; and transmitting the reconfigured security policy to the NSF via the NSF-facing interface. The reconfigured security policy is updated to a system of the NSF.

Abstract: The present disclosure relates to a data model for an analytics interface between an Interface to Network Security Functions (I2NSF) analyzer and a security controller in a security management system. A method of performing a security management by the I2NSF analyzer includes receiving monitoring data from at least one network security function (NSF) providing a security service, analyzing the received monitoring data to generate a new security policy or feedback information, and providing the generated new security policy or feedback information to the security controller.

Abstract: Disclosed is a method in which a security controller translates a security policy for Interface to Network Security Functions (I2NSF), the method including: extracting data from a higher-level policy received from an I2NSF user; converting the extracted data into a capability of a target network security function (NSF) of the security policy by referring to mapping information between elements of a high-level data model and elements of a low-level data model; and generating a lower-level policy to execute the capability of the NSF.

Abstract: The present disclosure relates to a data model for an analytics interface between an Interface to Network Security Functions (I2NSF) analyzer and a security controller in a security management system. A method of performing a security management by the I2NSF analyzer includes receiving monitoring data from at least one network security function (NSF) providing a security service, analyzing the received monitoring data to generate a new security policy or feedback information, and providing the generated new security policy or feedback information to the security controller.

Abstract: A method of performing a security management automation in an Interface to Network Security Functions (I2NSF) system is disclosed. The method comprises receiving a high-level security policy via a consumer-facing interface; translating the high-level security policy into a low-level security policy based on an automatic mapping model; transmitting the low-level security policy to a network security function (NSF) via an NSF-facing interface, wherein the low-level security policy is applied to a system of the NSF; receiving monitoring data for a network security from the NSF; reconfiguring a security policy based on the monitoring data; and transmitting the reconfigured security policy to the NSF via the NSF-facing interface. The reconfigured security policy is updated to a system of the NSF.