Security as a Service Platform Leveraging Multi-Access Edge Computing Infrastructure Provisions

Abstract

The mobile service platform envisaged by emerging IoT and 5G is guaranteeing gigabit-level bandwidth, ultra-low latency and ultra-high storage capacity for their subscribers. In spite of the variety of applications plausible with the envisaged technologies, security is a demanding objective that should be applied beyond the design stages. Thus, Security as a Service (SECaaS) is an initiative for a service model that enable mobile and IoT consumers with diverse security functions such as Intrusion Detection and Prevention (IDPaaS), Authentication (AaaS), and Secure Transmission Channel (STCaaS) as a Service. A well-equipped edge computing infrastructure is intrinsic to achieve this goal. The emerging Multi-Access Edge Computing (MEC) paradigm standardized by the ETSI is excelling among other edge computing flavours due to its well-defined structure and protocols. Thus, in our directive, we intend to utilize MEC as the edge computing platform to launch the SECaaS functions. Though, the actual development of a MEC infrastructure is highly dependent on the integration of virtualization technologies to enable dynamic creation, the deployment, and the detachment of virtualized entities that should feature interoperability to cater the heterogeneous IoT devices and services. To that extent, this work is proposing a security service architecture that offers these SECaaS services. Further, we validate our proposed architecture through the development of a virtualized infrastructure that integrates lightweight and hypervisor-based virtualization technologies. Our experiments prove the plausibility of launching multiple security instances on the developed prototype edge platform.

A Survey on Mobile Augmented Reality With 5G Mobile Edge Computing: Architectures, Applications, and Technical Aspects

“…Slice isolation in 5G to mitigate DDoS attacks [239] is a potential technique to enhance the security of MAR systems. With the MEC enabled 5G UDN, the complex security algorithms can be offloaded to the network edge, providing Security as a Service (SECaaS) [240]. For example, input security mechanisms for MAR can be implemented at the MEC instead of executing on each device.…”

Survey on Multi-Access Edge Computing Security and Privacy

“…Both genetic algorithms [142] and PLS models [143] have been studied for solving the offloading problem as in SEECO context. Security architectures have been proposed for securing orchestration functions [147], [148], [177], [185], while docker containerization based solutions have also been studied [149], [150].…”

“…This directive dispenses security mechanisms to be employed at the edge level of MEC, specifically to deploy an autonomous security function in MEHs for detecting anomalous behaviour among ME Apps from security parameters derived of contextual information. The Security as a Service (SECaaS) initiatives proposed for edge level infrastructures are standardizing the deployability of security, as an autonomous and intelligent function to strengthen the context-awareness [185]. The patent described in [199] demonstrates different applicable scenarios of context aware security in the MEC deployments.…”

Towards Low-Latency Service Delivery in a Continuum of Virtual Resources: State-of-the-Art and Research Directions

“…Security in MEC is another open challenge that has been studied in [43]. Ranaweera, P., et al propose MEC to enable security-as-a-service features.…”

“…Scalability (C2) has been tackled in the revised literature, starting from different points of view. Novel architectures Mobility (C1) [37], [38], [40], [42], [45], [46], [49], [50], [69], [71], [84], [100], [103], [107], [117], [118], [119], [122], [128], [130], [135], [136], [170], [174], [183] 25 (20.8%) Scalability (C2) [43], [45], [46], [49], [48], [47], [52], [53], [54], [55], [56], [57], [58], [71], [73], [75], [78], [79], [80], [81], [85], [86], [87], [88] [89...…”