SERVICE ORIENTED SOFTWARE-DEFINED SECURITY FRAMEWORK

摘要

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for service oriented software-defined security framework are disclosed. In one aspect, a system includes a security control device, one or more assets, and a security controller that communicates with the security control device and the one or more assets. The security controller includes a processing engine configured to register the security control device by creating a physical-logical attribute mapping for the security control device, and generating a security service description associated with the security control device. The processing engine is further configured to register the one or more assets by creating a physical-logical attribute mapping for each of the one or more assets, and generating security service requirements for each of the one or more assets. The processing engine is further configured to generate a security service binding based on a request for service.

主权项

1. A software defined security system comprising:
a security control device; one or more assets; and a security controller that communicates with the security control device and the one or more assets, the security controller including a processing engine configured to:
register the security control device by creating a physical-logical attribute mapping for the security control device, and generating a security service description associated with the security control device;register the one or more assets by creating a physical-logical attribute mapping for each of the one or more assets, and generating security service requirements for each of the one or more assets; andgenerate a security service binding based on a request for service, the processing engine being operable to translate the security service binding into a set of security control commands and communicate the security control commands to the security control device.