{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T15:27:34Z","timestamp":1784302054692,"version":"3.55.0"},"reference-count":57,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,3,30]],"date-time":"2026-03-30T00:00:00Z","timestamp":1774828800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Networks"],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1016\/j.comnet.2026.112279","type":"journal-article","created":{"date-parts":[[2026,3,31]],"date-time":"2026-03-31T06:53:03Z","timestamp":1774939983000},"page":"112279","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":1,"special_numbering":"C","title":["GreenShield-E2C: A sustainable energy-aware firewall configuration mechanism for edge-to-cloud continuum"],"prefix":"10.1016","volume":"282","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3086-7364","authenticated-orcid":false,"given":"Daniele","family":"Bringhenti","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8471-3029","authenticated-orcid":false,"given":"Fulvio","family":"Valenza","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.comnet.2026.112279_bib0001","series-title":"World Congress on Services, SERVICES 2011, Washington, DC, USA, July 4\u20139, 2011","first-page":"594","article-title":"NIST Cloud computing reference architecture","author":"Bohn","year":"2011"},{"key":"10.1016\/j.comnet.2026.112279_bib0002","doi-asserted-by":"crossref","first-page":"289","DOI":"10.1016\/j.sysarc.2019.02.009","article-title":"All one needs to know about fog computing and related edge computing paradigms: a complete survey","volume":"98","author":"Yousefpour","year":"2019","journal-title":"J. Syst. Archit."},{"key":"10.1016\/j.comnet.2026.112279_bib0003","doi-asserted-by":"crossref","first-page":"71","DOI":"10.1016\/j.jpdc.2022.04.004","article-title":"Distributed intelligence on the edge-to-Cloud continuum: a systematic literature review","volume":"166","author":"Rosendo","year":"2022","journal-title":"J. Parallel Distributed Comput."},{"key":"10.1016\/j.comnet.2026.112279_bib0004","doi-asserted-by":"crossref","DOI":"10.1016\/j.icte.2025.04.015","article-title":"The journey to cloud as a continuum: opportunities, challenges, and research directions","author":"Hasan","year":"2025","journal-title":"ICT Express"},{"issue":"6","key":"10.1016\/j.comnet.2026.112279_bib0005","doi-asserted-by":"crossref","first-page":"3587","DOI":"10.1007\/s11831-022-09708-9","article-title":"A comprehensive survey on security challenges in different network layers in cloud computing","volume":"29","author":"Jangjou","year":"2022","journal-title":"Arch. Comput. Methods Eng."},{"issue":"6","key":"10.1016\/j.comnet.2026.112279_bib0006","doi-asserted-by":"crossref","first-page":"87:1","DOI":"10.1145\/3130876","article-title":"Systematic literature review on usability of firewall configuration","volume":"50","author":"Voronkov","year":"2018","journal-title":"ACM Comput. Surv."},{"issue":"3","key":"10.1016\/j.comnet.2026.112279_bib0007","doi-asserted-by":"crossref","first-page":"57:1","DOI":"10.1145\/3616401","article-title":"Automation for network security configuration: state of the art and research trends","volume":"56","author":"Bringhenti","year":"2024","journal-title":"ACM Comput. Surv."},{"issue":"3","key":"10.1016\/j.comnet.2026.112279_bib0008","doi-asserted-by":"crossref","first-page":"2308","DOI":"10.1109\/TDSC.2024.3495230","article-title":"Atomizing firewall policies for anomaly analysis and resolution","volume":"22","author":"Bringhenti","year":"2025","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"issue":"6","key":"10.1016\/j.comnet.2026.112279_bib0009","doi-asserted-by":"crossref","first-page":"6909","DOI":"10.1109\/TNSM.2024.3452150","article-title":"GreenShield: optimizing firewall configuration for sustainable networks","volume":"21","author":"Bringhenti","year":"2024","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"issue":"4","key":"10.1016\/j.comnet.2026.112279_bib0010","doi-asserted-by":"crossref","first-page":"381","DOI":"10.1145\/1035582.1035583","article-title":"Firmato: a novel firewall management toolkit","volume":"22","author":"Bartal","year":"2004","journal-title":"ACM Trans. Comput. Syst."},{"key":"10.1016\/j.comnet.2026.112279_bib0011","series-title":"Proc. of Formal Aspects in Security and Trust: Second IFIP TC1 WG1.7 Workshop on Formal Aspects in Security and Trust (FAST), an Event of the 18Th IFIP World Computer Congress, August 22\u201327, 2004, Toulouse, France","first-page":"203","article-title":"A formal approach to specify and deploy a network security policy","volume":"173","author":"Cuppens","year":"2004"},{"key":"10.1016\/j.comnet.2026.112279_bib0012","series-title":"Proc. of the 2005 IEEE\/IPSJ International Symposium on Applications and the Internet (SAINT 2005), 31 January - 4 February 2005, Trento, Italy","first-page":"74","article-title":"FACE: A firewall analysis and configuration engine","author":"Verma","year":"2005"},{"key":"10.1016\/j.comnet.2026.112279_bib0013","series-title":"Proc. of the 11Th IEEE International Conference on Computer and Information Technology, CIT 2011, Pafos, Cyprus, 31 August-2 September 2011","first-page":"461","article-title":"A fully automatic approach for fixing firewall misconfigurations","author":"Youssef","year":"2011"},{"key":"10.1016\/j.comnet.2026.112279_bib0014","doi-asserted-by":"crossref","first-page":"156","DOI":"10.1016\/j.cose.2017.10.012","article-title":"Automatic security policy enforcement in computer systems","volume":"73","author":"Adi","year":"2018","journal-title":"Comput. Secur."},{"key":"10.1016\/j.comnet.2026.112279_bib0015","series-title":"Proc. of the 13th International Joint Conference on e-Business and Telecommunications (ICETE 2016) - Volume 4: SECRYPT, Lisbon, Portugal, July 26\u201328, 2016","first-page":"197","article-title":"The mathematical foundations for mapping policies to network devices","author":"Ranathunga","year":"2016"},{"key":"10.1016\/j.comnet.2026.112279_bib0016","series-title":"Proc. of the 15th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2018, Renton, WA, USA, April 9\u201311, 2018","first-page":"579","article-title":"Netcomplete: practical network-Wide configuration synthesis with autocompletion","author":"El-Hassany","year":"2018"},{"key":"10.1016\/j.comnet.2026.112279_bib0017","series-title":"2022 IEEE\/IFIP Network Operations and Management Symposium, NOMS 2022, Budapest, Hungary, April 25\u201329, 2022","first-page":"1","article-title":"Deep reinforcement learning based method for the rule placement problem in software-Defined networks","author":"Jim\u00e9nez-L\u00e1zaro","year":"2022"},{"key":"10.1016\/j.comnet.2026.112279_bib0018","series-title":"20th International Conference on Network and Service Management, CNSM 2024, Prague, Czech Republic, October 28\u201331, 2024","first-page":"1","article-title":"Automating network perimeter threat prevention for decentralized network administration","author":"Wintering","year":"2024"},{"key":"10.1016\/j.comnet.2026.112279_bib0019","series-title":"IEEE International Mediterranean Conference on Communications and Networking, MeditCom 2024, Madrid, Spain, July 8\u201311, 2024","first-page":"341","article-title":"In-Network ACL rules placement using deep reinforcement learning","author":"Zahwa","year":"2024"},{"issue":"5","key":"10.1016\/j.comnet.2026.112279_bib0020","doi-asserted-by":"crossref","first-page":"4175","DOI":"10.1109\/TNET.2024.3409529","article-title":"Fast and scalable ACL policy solving under complex constraints with graph neural networks","volume":"32","author":"Sun","year":"2024","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"10.1016\/j.comnet.2026.112279_bib0021","series-title":"2025 21St International Conference on Network and Service Management (CNSM), Bologna, Italy, October 27\u201331, 2025","first-page":"1","article-title":"Deep reinforcement learning for in-Network placement of ACL rules under constraints","author":"Zahwa","year":"2025"},{"key":"10.1016\/j.comnet.2026.112279_bib0022","doi-asserted-by":"crossref","first-page":"138","DOI":"10.1016\/j.jnca.2016.09.001","article-title":"A survey on service function chaining","volume":"75","author":"Bhamare","year":"2016","journal-title":"J. Netw. Comput. Appl."},{"key":"10.1016\/j.comnet.2026.112279_bib0023","series-title":"Proc. of the 12th International Conference on Network and Service Management, CNSM","first-page":"353","article-title":"An intent-based network virtualization platform for SDN","author":"Han","year":"2016"},{"key":"10.1016\/j.comnet.2026.112279_bib0024","series-title":"Proc. of the IFIP\/IEEE Symp. on Integrated Network and Service Management (IM17)","article-title":"INSpIre: integrated NFV-based intent refinement environment","author":"Scheid","year":"2017"},{"key":"10.1016\/j.comnet.2026.112279_bib0025","series-title":"Proc. of the 2Nd Intern. Conf. on Computer Science and Application Engineering (CSAE18)","article-title":"A SDN\/NFV security protection architecture with a function composition algorithm based on trie","author":"Hao","year":"2018"},{"key":"10.1016\/j.comnet.2026.112279_bib0026","article-title":"A dynamic composition mechanism of security service chaining oriented to SDN\/NFV-Enabled networks","volume":"6","author":"Liu","year":"2018","journal-title":"IEEE Access"},{"issue":"4","key":"10.1016\/j.comnet.2026.112279_bib0027","article-title":"Efficient provisioning of security service function chaining using network security defense patterns","volume":"12","author":"Sendi","year":"2019","journal-title":"IEEE Trans. Services Comput."},{"issue":"2","key":"10.1016\/j.comnet.2026.112279_bib0028","doi-asserted-by":"crossref","DOI":"10.1109\/TC.2009.172","article-title":"Minimizing the maximum firewall rule set in a network with multiple firewalls","volume":"59","author":"Yoon","year":"2010","journal-title":"IEEE Trans. Comput."},{"issue":"2","key":"10.1016\/j.comnet.2026.112279_bib0029","article-title":"Automated synthesis of distributed network access controls: a formal framework with refinement","volume":"28","author":"Rahman","year":"2017","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"10.1016\/j.comnet.2026.112279_bib0030","article-title":"Rule-Based synthesis of chains of security functions for software-Defined networks","volume":"76","author":"Schnepf","year":"2018","journal-title":"Electron. Commun. Eur. Assoc. Softw. Sci. Technol."},{"issue":"2","key":"10.1016\/j.comnet.2026.112279_bib0031","doi-asserted-by":"crossref","first-page":"1559","DOI":"10.1109\/TDSC.2022.3160293","article-title":"Automated firewall configuration in virtual networks","volume":"20","author":"Bringhenti","year":"2023","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"10.1016\/j.comnet.2026.112279_bib0032","series-title":"NOMS 2024 IEEE Network Operations and Management Symposium, Seoul, Republic of Korea, May 6\u201310, 2024","first-page":"1","article-title":"Automatic and optimized firewall reconfiguration","author":"Pizzato","year":"2024"},{"issue":"6","key":"10.1016\/j.comnet.2026.112279_bib0033","doi-asserted-by":"crossref","first-page":"1981","DOI":"10.1109\/TSC.2019.2914649","article-title":"Scheduling real-Time security aware tasks in fog networks","volume":"14","author":"Singh","year":"2021","journal-title":"IEEE Trans. Serv. Comput."},{"issue":"3","key":"10.1016\/j.comnet.2026.112279_bib0034","doi-asserted-by":"crossref","first-page":"954","DOI":"10.1109\/TCC.2024.3426282","article-title":"Security, reliability, cost, and energy-Aware scheduling of real-Time workflows in compute-Continuum environments","volume":"12","author":"Taghinezhad-Niar","year":"2024","journal-title":"IEEE Trans. Cloud Comput."},{"issue":"4","key":"10.1016\/j.comnet.2026.112279_bib0035","doi-asserted-by":"crossref","first-page":"1223","DOI":"10.1007\/s10796-022-10304-2","article-title":"Security, cost and energy aware scheduling of real-Time IoT workflows in a mist computing environment","volume":"26","author":"Stavrinides","year":"2024","journal-title":"Inf. Syst. Frontiers"},{"key":"10.1016\/j.comnet.2026.112279_bib0036","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2021.107950","article-title":"NOMA And 5G emerging technologies: a survey on issues and solution techniques","volume":"190","author":"Akbar","year":"2021","journal-title":"Comput. Networks"},{"issue":"1","key":"10.1016\/j.comnet.2026.112279_bib0037","doi-asserted-by":"crossref","first-page":"118","DOI":"10.1007\/s44196-023-00273-y","article-title":"Security energy efficiency analysis of CR-NOMA enabled IoT systems for edge-cloud environment","volume":"16","author":"She","year":"2023","journal-title":"Int. J. Comput. Intell. Syst."},{"issue":"8","key":"10.1016\/j.comnet.2026.112279_bib0038","doi-asserted-by":"crossref","first-page":"2737","DOI":"10.1007\/s00607-024-01305-x","article-title":"Energy-aware dynamic response and efficient consolidation strategies for disaster survivability of cloud microservices architecture","volume":"106","author":"F\u00e9","year":"2024","journal-title":"Computing"},{"key":"10.1016\/j.comnet.2026.112279_bib0039","unstructured":"FortiGate 7000 Series Datasheet, Fortinet, 2025. Visited: 2025-12-27, https:\/\/www.fortinet.com\/content\/dam\/fortinet\/assets\/data-sheets\/FortiGate_7000_Series_Bundle.pdf."},{"key":"10.1016\/j.comnet.2026.112279_bib0040","unstructured":"Palo Alto Networks PA-400 Series Datasheet, Palo Alto Networks, 2023. Visited: 2025-12-27, https:\/\/www.paloaltonetworks.com\/resources\/datasheets\/pa-400-series-pan-os-11-0."},{"key":"10.1016\/j.comnet.2026.112279_bib0041","article-title":"2024 United states data center energy usage report","author":"Shehabi","year":"2024","journal-title":"eScholarship Publishing"},{"key":"10.1016\/j.comnet.2026.112279_bib0042","unstructured":"SPECpower\u2122 Benchmark \u2013 Power Consumption and Energy Efficiency for Servers, SPEC.org, 2025. Visited: 2025-12-27, https:\/\/www.spec.org\/30th\/power.html."},{"key":"10.1016\/j.comnet.2026.112279_bib0043","series-title":"8th IEEE\/ACM International Conference on Utility and Cloud Computing, UCC 2015, Limassol, Cyprus, December 7\u201310, 2015","first-page":"522","article-title":"Power consumption of virtualization technologies: an empirical investigation","author":"Morabito","year":"2015"},{"key":"10.1016\/j.comnet.2026.112279_bib0044","doi-asserted-by":"crossref","first-page":"311","DOI":"10.1016\/j.suscom.2017.09.005","article-title":"Energy efficiency comparison of hypervisors","volume":"22","author":"Jiang","year":"2019","journal-title":"Sustain. Comput. Informatics Syst."},{"issue":"2","key":"10.1016\/j.comnet.2026.112279_bib0045","doi-asserted-by":"crossref","first-page":"835","DOI":"10.1109\/JSYST.2015.2429731","article-title":"Energy efficiency of cloud virtual machines: from traffic pattern and CPU affinity perspectives","volume":"11","author":"Xu","year":"2017","journal-title":"IEEE Syst. J."},{"key":"10.1016\/j.comnet.2026.112279_bib0046","series-title":"47th IEEE Annual Computers, Software, and Applications Conference, COMPSAC 2023, Torino, Italy, June 26\u201330, 2023","first-page":"1703","article-title":"Monitoring the energy consumption of docker containers","author":"Warade","year":"2023"},{"issue":"10","key":"10.1016\/j.comnet.2026.112279_bib0047","doi-asserted-by":"crossref","first-page":"2069","DOI":"10.1109\/JSAC.2005.854119","article-title":"Conflict classification and analysis of distributed firewall policies","volume":"23","author":"Al-Shaer","year":"2005","journal-title":"IEEE J. Sel. Areas Commun."},{"issue":"3","key":"10.1016\/j.comnet.2026.112279_bib0048","doi-asserted-by":"crossref","first-page":"318","DOI":"10.1109\/TDSC.2012.20","article-title":"Detecting and resolving firewall policy anomalies","volume":"9","author":"Hu","year":"2012","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"issue":"6","key":"10.1016\/j.comnet.2026.112279_bib0049","doi-asserted-by":"crossref","first-page":"1011","DOI":"10.1109\/TDSC.2017.2726066","article-title":"Brew: a security policy analysis framework for distributed SDN-Based cloud environments","volume":"16","author":"Pisharody","year":"2019","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"10.1016\/j.comnet.2026.112279_bib0050","series-title":"11th IEEE International Conference on Network Softwarization, NetSoft 2025, Budapest, Hungary, June 23\u201327, 2025","first-page":"579","article-title":"Context discovery for digital service chain with openc2","author":"Tanzarella","year":"2025"},{"issue":"2","key":"10.1016\/j.comnet.2026.112279_bib0051","doi-asserted-by":"crossref","first-page":"887","DOI":"10.1109\/TNET.2015.2398197","article-title":"Real-Time verification of network properties using atomic predicates","volume":"24","author":"Yang","year":"2016","journal-title":"IEEE\/ACM Trans. Netw."},{"issue":"5","key":"10.1016\/j.comnet.2026.112279_bib0052","doi-asserted-by":"crossref","first-page":"2900","DOI":"10.1109\/TNET.2017.2720172","article-title":"Scalable verification of networks with packet transformers using atomic predicates","volume":"25","author":"Yang","year":"2017","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"10.1016\/j.comnet.2026.112279_bib0053","series-title":"17th USENIX Symposium on Networked Systems Designand Implementation, NSDI 2020, Santa Clara, CA, USA, February 25\u201327, 2020","first-page":"241","article-title":"APKeep: Realtime verification for real networks","author":"Zhang","year":"2020"},{"issue":"4","key":"10.1016\/j.comnet.2026.112279_bib0054","doi-asserted-by":"crossref","first-page":"3740","DOI":"10.1109\/TNSM.2024.3407159","article-title":"A two-Fold traffic flow model for network security management","volume":"21","author":"Bringhenti","year":"2024","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"10.1016\/j.comnet.2026.112279_bib0055","first-page":"337","article-title":"Z3: An efficient SMT solver","volume":"4963","author":"de Moura","year":"2008"},{"issue":"27","key":"10.1016\/j.comnet.2026.112279_bib0056","doi-asserted-by":"crossref","first-page":"16621","DOI":"10.1007\/s00521-024-10136-y","article-title":"Distributed intelligence for IoT-based smart cities: a survey","volume":"36","author":"Hashem","year":"2024","journal-title":"Neural Comput. Appl."},{"key":"10.1016\/j.comnet.2026.112279_bib0057","unstructured":"VEREFOO: Open-source implementation. Visited: 2025-12-27, https:\/\/github.com\/netgroup-polito\/verefoo."}],"container-title":["Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626002914?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626002914?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T15:51:05Z","timestamp":1780415465000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1389128626002914"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":57,"alternative-id":["S1389128626002914"],"URL":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112279","relation":{},"ISSN":["1389-1286"],"issn-type":[{"value":"1389-1286","type":"print"}],"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"GreenShield-E2C: A sustainable energy-aware firewall configuration mechanism for edge-to-cloud continuum","name":"articletitle","label":"Article Title"},{"value":"Computer Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112279","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Author(s). Published by Elsevier B.V.","name":"copyright","label":"Copyright"}],"article-number":"112279"}}