{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,22]],"date-time":"2026-01-22T01:35:18Z","timestamp":1769045718584,"version":"3.49.0"},"reference-count":63,"publisher":"MDPI AG","issue":"3","license":[{"start":{"date-parts":[[2023,2,2]],"date-time":"2023-02-02T00:00:00Z","timestamp":1675296000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100000780","name":"European Union Horizon 2020 research and innovation programme","doi-asserted-by":"publisher","award":["883335"],"award-info":[{"award-number":["883335"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Small and medium enterprises are significantly hampered by cyber-threats as they have inherently limited skills and financial capacities to anticipate, prevent, and handle security incidents. The EU-funded PALANTIR project aims at facilitating the outsourcing of the security supervision to external providers to relieve SMEs\/MEs from this burden. However, good practices for the operation of SME\/ME assets involve avoiding their exposure to external parties, which requires a tightly defined and timely enforced security policy when resources span across the cloud continuum and need interactions. This paper proposes an innovative architecture extending Network Function Virtualisation to externalise and automate threat mitigation and remediation in cloud, edge, and on-premises environments. Our contributions include an ontology for the decision-making process, a Fault-and-Breach-Management-based remediation policy model, a framework conducting remediation actions, and a set of deployment models adapted to the constraints of cloud, edge, and on-premises environment(s). Finally, we also detail an implementation prototype of the framework serving as evaluation material.<\/jats:p>","DOI":"10.3390\/s23031658","type":"journal-article","created":{"date-parts":[[2023,2,3]],"date-time":"2023-02-03T01:40:25Z","timestamp":1675388425000},"page":"1658","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["PALANTIR: An NFV-Based Security-as-a-Service Approach for Automating Threat Mitigation"],"prefix":"10.3390","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7399-709X","authenticated-orcid":false,"given":"Maxime","family":"Compasti\u00e9","sequence":"first","affiliation":[{"name":"Cybersecurity Department, i2CAT Foundation, 08034 Barcelona, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4077-4030","authenticated-orcid":false,"given":"Antonio","family":"L\u00f3pez Mart\u00ednez","sequence":"additional","affiliation":[{"name":"Department of Information and Communication Engineering, University of Murcia, 30100 Murcia, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1865-7177","authenticated-orcid":false,"given":"Carolina","family":"Fern\u00e1ndez","sequence":"additional","affiliation":[{"name":"Cybersecurity Department, i2CAT Foundation, 08034 Barcelona, Spain"},{"name":"Department of Information and Communication Technologies, Universitat Pompeu Fabra, 08018 Barcelona, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7768-9665","authenticated-orcid":false,"given":"Manuel","family":"Gil P\u00e9rez","sequence":"additional","affiliation":[{"name":"Department of Information and Communication Engineering, University of Murcia, 30100 Murcia, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7763-6291","authenticated-orcid":false,"given":"Stylianos","family":"Tsarsitalidis","sequence":"additional","affiliation":[{"name":"UBITECH Ubiquitous Solutions, 15231 Athens, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2695-4534","authenticated-orcid":false,"given":"George","family":"Xylouris","sequence":"additional","affiliation":[{"name":"ORION Innovations PC, 11744 Athens, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4910-1879","authenticated-orcid":false,"given":"Izidor","family":"Mlakar","sequence":"additional","affiliation":[{"name":"Faculty of Electrical Engineering and Computer Science, University of Maribor, 2000 Maribor, Slovenia"},{"name":"Sfera IT d.o.o., 2000 Maribor, Slovenia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8356-114X","authenticated-orcid":false,"given":"Michail Alexandros","family":"Kourtis","sequence":"additional","affiliation":[{"name":"ORION Innovations PC, 11744 Athens, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3664-3564","authenticated-orcid":false,"given":"Valentino","family":"\u0160afran","sequence":"additional","affiliation":[{"name":"Faculty of Electrical Engineering and Computer Science, University of Maribor, 2000 Maribor, Slovenia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2023,2,2]]},"reference":[{"key":"ref_1","unstructured":"(2023, January 11). 2022 Global Threat Report. Available online: https:\/\/www.crowdstrike.com\/global-threat-report."},{"key":"ref_2","unstructured":"(2023, January 11). SMBs Are Fighting against All Odds in Today\u2019s Cyber Landscape. Available online: https:\/\/pages.checkpoint.com\/smb-2021-security-report.html."},{"key":"ref_3","unstructured":"(2023, January 11). Managing the Trend of Growing IT Complexity. Available online: https:\/\/mysecuritymarketplace.com\/reports\/managing-the-trend-of-growing-it-complexity."},{"key":"ref_4","unstructured":"(2023, January 11). 2021 DBIR Master\u2019s Guide. Available online: https:\/\/www.verizon.com\/business\/resources\/reports\/dbir\/2021\/masters-guide\/."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"216","DOI":"10.1016\/j.csi.2016.12.007","article-title":"Technology Pillars in the Architecture of Future 5G Mobile Networks: NFV, MEC and SDN","volume":"54","author":"Blanco","year":"2017","journal-title":"Comput. Stand. Interfaces"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Mantas, E., Papadopoulos, D., Fern\u00e1ndez, C., Ortiz, N., Compasti\u00e9, M., L\u00f3pez Mart\u00ednez, A., Gil P\u00e9rez, M., Kourtis, A., Xylouris, G., and Mlakar, I. (2021, January 7\u201310). Practical Autonomous Cyberhealth for Resilient Micro, Small and Medium-sized Enterprises. Proceedings of the 2021 IEEE International Mediterranean Conference on Communications and Networking (MeditCom), Athens, Greece.","DOI":"10.1109\/MeditCom49071.2021.9647609"},{"key":"ref_7","unstructured":"L\u00f3pez Mart\u00ednez, A., Zago, M., and Gil P\u00e9rez, M. (2022, January 27\u201329). Provision of Security-as-a-Service (SecaaS) in Lightweight Scenarios. Proceedings of the VII National Conference on Cybersecurity Research (JNIC), Bilbao, Spain."},{"key":"ref_8","unstructured":"Hutchins, E.M., Cloppert, M.J., and Amin, R.M. (2023, January 11). Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains. Available online: https:\/\/www.lockheedmartin.com\/content\/dam\/lockheed-martin\/rms\/documents\/cyber\/LM-White-Paper-Intel-Driven-Defense.pdf."},{"key":"ref_9","unstructured":"Diogenes, Y., and Ozkaya, E. (2022). Cybersecurity\u2013Attack and Defense Strategies: Improve Your Security Posture to Mitigate Risks and Prevent Attackers from Infiltrating Your System, Packt Publishing Ltd.. [3rd ed.]."},{"key":"ref_10","unstructured":"(2023, January 11). Network Functions Virtualisation (NFV); Use Cases. Available online: https:\/\/www.etsi.org\/deliver\/etsi_gs\/nfv\/001_099\/001\/01.01.01_60\/gs_nfv001v010101p.pdf."},{"key":"ref_11","unstructured":"(2023, January 11). Network Functions Virtualisation (NFV); Architectural Framework. Available online: https:\/\/www.etsi.org\/deliver\/etsi_gs\/nfv\/001_099\/002\/01.02.01_60\/gs_nfv002v010201p.pdf."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"1292","DOI":"10.1109\/TNSM.2018.2867827","article-title":"z-TORCH: An Automated NFV Orchestration and Monitoring Solution","volume":"15","author":"Sciancalepore","year":"2018","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"586","DOI":"10.1109\/TNSM.2017.2733620","article-title":"T-NOVA: An Open-Source MANO Stack for NFV Infrastructures","volume":"14","author":"Kourtis","year":"2017","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Riggio, R., Khan, S.N., Subramanya, T., Yahia, I.G.B., and Lopez, D. (2018, January 23\u201327). LightMANO: Converging NFV and SDN at the Edges of the Network. Proceedings of the 2018 IEEE\/IFIP Network Operations and Management Symposium, Taipei, Taiwan.","DOI":"10.1109\/NOMS.2018.8406266"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"108880","DOI":"10.1016\/j.comnet.2022.108880","article-title":"An Experimental Study on Latency-Aware and Self-Adaptive Service Chaining Orchestration in Distributed NFV and SDN Infrastructures","volume":"208","author":"Gharbaoui","year":"2022","journal-title":"Comput. Netw."},{"key":"ref_16","unstructured":"He, M., Basta, A., Blenk, A., Deric, N., and Kellerer, W. (2018, January 5\u20139). P4NFV: An NFV Architecture with Flexible Data Plane Reconfiguration. Proceedings of the 2018 14th International Conference on Network and Service Management (CNSM), Rome, Italy."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Sanchez-Aguero, V., Vidal, I., Valera, F., Nogales, B., Mendes, L.L., Damascena Dias, W., and Carvalho Ferreira, A. (2021). Deploying an NFV-Based Experimentation Scenario for 5G Solutions in Underserved Areas. Sensors, 21.","DOI":"10.3390\/s21051897"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Dhakal, A., and Ramakrishnan, K.K. (2019, January 24\u201328). NetML: An NFV Platform with Efficient Support for Machine Learning Applications. Proceedings of the 2019 IEEE Conference on Network Softwarization (NetSoft), Paris, France.","DOI":"10.1109\/NETSOFT.2019.8806698"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Gardikis, G., Tzoulas, K., Tripolitis, K., Bartzas, A., Costicoglou, S., Lioy, A., Gaston, B., Fernandez, C., Davila, C., and Litke, A. (2017, January 3\u20137). SHIELD: A Novel NFV-Based Cybersecurity Framework. Proceedings of the 2017 IEEE Conference on Network Softwarization (NetSoft), Bologna, Italy.","DOI":"10.1109\/NETSOFT.2017.8004228"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Pattaranantakul, M., He, R., Meddahi, A., and Zhang, Z. (2016, January 23\u201326). SecMANO: Towards Network Functions Virtualization (NFV) Based Security MANagement and Orchestration. Proceedings of the 2016 IEEE Trustcom\/BigDataSE\/ISPA, Tianjin, China.","DOI":"10.1109\/TrustCom.2016.0115"},{"key":"ref_21","unstructured":"Dutta, A., Sood, K., and Lu, W. (2023, January 11). Network Functions Virtualisation (NFV) Release 3; Security; Security Management and Monitoring Specification. Available online: https:\/\/www.etsi.org\/deliver\/etsi_gs\/NFV-SEC\/001_099\/013\/03.01.01_60\/gs_NFV-SEC013v030101p.pdf."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"148","DOI":"10.1109\/MNET.011.2000089","article-title":"Convergence of Networking and Cloud\/Edge Computing: Status, Challenges, and Opportunities","volume":"34","author":"Duan","year":"2020","journal-title":"IEEE Netw."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Tsagkaropoulos, A., Verginadis, Y., Compasti\u00e9, M., Apostolou, D., and Mentzas, G. (2021). Extending TOSCA for Edge and Fog Deployment Support. Electronics, 10.","DOI":"10.3390\/electronics10060737"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Compasti\u00e9, M., Badonnel, R., Festor, O., and He, R. (2019, January 24\u201328). A TOSCA-Oriented Software-Defined Security Approach for Unikernel-Based Protected Clouds. Proceedings of the 2019 IEEE Conference on Network Softwarization (NetSoft), Paris, France.","DOI":"10.1109\/NETSOFT.2019.8806623"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"J\u00e9z\u00e9quel, J.M., Hussmann, H., and Cook, S. (2002). The Unified Modeling Language, Proceedings of the \u00abUML\u00bb 2002, Dresden, Germany, 30 September\u20134 October 2002, Springer.","DOI":"10.1007\/3-540-45800-X"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Chowdhary, A., Sabur, A., Vadnere, N., and Huang, D. (2022). Intent-Driven Security Policy Management for Software-Defined Systems. IEEE Trans. Netw. Serv. Manag., Early Access.","DOI":"10.1109\/TNSM.2022.3183591"},{"key":"ref_27","unstructured":"Godik, S., Moses, T., Anderson, A., Parducci, B., Adams, C., Flinn, D., Brose, G., Lockhart, H., Beznosov, K., and Kudo, M. (2003). EXtensible Access Control Markup Language (XACML) Version 1.0, OASIS Standard."},{"key":"ref_28","unstructured":"Sahay, R. (2017). Policy-Driven Autonomic Cyberdefense Using Software-Defined Networking. [Ph.D. Thesis, Institut National des T\u00e9l\u00e9communications]. Available online: https:\/\/tel.archives-ouvertes.fr\/tel-01712306\/document."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Barr\u00e8re, M., Badonnel, R., and Festor, O. (2014, January 5\u20139). A SAT-Based Autonomous Strategy for Security Vulnerability Management. Proceedings of the 2014 IEEE Network Operations and Management Symposium (NOMS), Krakow, Poland.","DOI":"10.1109\/NOMS.2014.6838309"},{"key":"ref_30","first-page":"1","article-title":"TCloud: A Dynamic Framework and Policies for Access Control across Multiple Domains in Cloud Computing","volume":"62","author":"Ullah","year":"2013","journal-title":"Int. J. Comput. Appl."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Mozzaquatro, B.A., Jardim-Goncalves, R., and Agostinho, C. (2015, January 12\u201313). Towards a Reference Ontology for Security in the Internet of Things. Proceedings of the 2015 IEEE International Workshop on Measurements Networking (M N), Coimbra, Portugal.","DOI":"10.1109\/IWMN.2015.7322984"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Preuveneers, D., and Joosen, W. (2019, January 17\u201319). Towards Multi-Party Policy-Based Access Control in Federations of Cloud and Edge Microservices. Proceedings of the 2019 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), Stockholm, Sweden.","DOI":"10.1109\/EuroSPW.2019.00010"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Weissman, D., and Jayasumana, A. (2020, January 3). Integrating IoT Monitoring for Security Operation Center. Proceedings of the 2020 Global Internet of Things Summit (GIoTS), virtual.","DOI":"10.1109\/GIOTS49054.2020.9119680"},{"key":"ref_34","unstructured":"Luo, S., and Salem, M.B. (2016, January 23\u201327). Orchestration of Software-Defined Security Services. Proceedings of the 2016 IEEE International Conference on Communications Workshops (ICC), Kuala Lumpur, Malaysia."},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Compasti\u00e9, M., Badonnel, R., Festor, O., He, R., and Kassi-Lahlou, M. (2017, January 10\u201313). Towards a Software-Defined Security Framework for Supporting Distributed Cloud. Proceedings of the 2017 IFIP International Conference on Autonomous Infrastructure, Management and Security (AIMS), Zurich, Switzerland.","DOI":"10.1007\/978-3-319-60774-0_4"},{"key":"ref_36","unstructured":"Lopez, D., Lopez, E., Dunbar, L., Strassner, J., and Kumar, R. (2023, January 11). Framework for Interface to Network Security Functions. Available online: https:\/\/datatracker.ietf.org\/doc\/rfc8329."},{"key":"ref_37","unstructured":"Gu, G., Ott, D., Sekar, V., Sun, K., Al-Shaer, E., Cardenas, A., Chen, Y., Enck, W., Hu, H., and Moreau, D. (2023, January 11). Programmable System Security in a Software-Defined World\u2014Research Challenges and Opportunities. Available online: https:\/\/research.vmware.com\/publications\/programmable-system-security-in-a-software-defined-world-research-challenges-and-opportunities."},{"key":"ref_38","unstructured":"Benzina, H. (2012). Enforcing Virtualized Systems Security. [Ph.D. Thesis, \u00c9cole Normale sup\u00e9Rieure de Cachan\u2014ENS Cachan]. Available online: https:\/\/tel.archives-ouvertes.fr\/tel-00846513\/document."},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"B\u00e9lair, M., Laniepce, S., and Menaud, J.M. (2021, January 22\u201326). SNAPPY: Programmable Kernel-Level Policies for Containers. Proceedings of the 36th Annual ACM Symposium on Applied Computing, SAC \u201921, virtual.","DOI":"10.1145\/3412841.3442037"},{"key":"ref_40","unstructured":"(2023, January 11). Current and Emerging Healthcare Cyber Threat Landscape. Available online: https:\/\/h-isac.org\/health-isacs-first-annual-current-and-emerging-healthcare-cyber-threat-landscape-executive-summary\/."},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"16","DOI":"10.1007\/s42979-021-00858-4","article-title":"Risk Assessment Driven Use of Advanced SIEM Technology for Cyber Protection of Critical e-Health Processes","volume":"3","author":"Coppolino","year":"2022","journal-title":"SN Comput. Sci."},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Gonzalez-Granadillo, G., Menesidou, S.A., Papamartzivanos, D., Romeu, R., Navarro-Llobet, D., Okoh, C., Nifakos, S., Xenakis, C., and Panaousis, E. (2021). Automated Cyber and Privacy Risk Management Toolkit. Sensors, 21.","DOI":"10.3390\/s21165493"},{"key":"ref_43","first-page":"MOBMU","article-title":"Evaluation of AI-Based Use Cases for Enhancing the Cyber Security Defense of Small and Medium-Sized Companies (SMEs)","volume":"34","author":"Kant","year":"2022","journal-title":"J. Electron. Imaging"},{"key":"ref_44","unstructured":"(2023, January 11). Monitoring Progress in National Initiatives on Digitising Industry-Country Report Germany-European. Available online: https:\/\/ec.europa.eu\/information_society\/newsroom\/image\/document\/2019-32\/country_report_-_germany_-_final_2019_0D303AC9-00B0-5F1A-A0DF3E5B4391E9B5_61206.pdf."},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"402","DOI":"10.1016\/j.cose.2019.07.001","article-title":"Strategically-Motivated Advanced Persistent Threat: Definition, Process, Tactics and a Disinformation Model of Counterattack","volume":"86","author":"Ahmad","year":"2019","journal-title":"Comput. Secur."},{"key":"ref_46","unstructured":"Howard, L.S. (2023, January 11). SMEs Underestimate Cyber Risks which Could Prove \u2019Fatal\u2019: Allianz Report. Available online: https:\/\/www.insurancejournal.com\/magazines\/mag-features\/2018\/03\/05\/481912.htm."},{"key":"ref_47","first-page":"1","article-title":"A Systematic Review on Security of E-Commerce Systems","volume":"18","author":"Badotra","year":"2021","journal-title":"Int. J. Appl. Sci. Eng."},{"key":"ref_48","unstructured":"(2023, January 11). 5G; System Architecture for the 5G System (5GS) (3GPP TS 23.501 Version 16.6.0 Release 16). Available online: https:\/\/www.etsi.org\/deliver\/etsi_ts\/123500_123599\/123501\/16.06.00_60\/ts_123501v160600p.pdf."},{"key":"ref_49","unstructured":"Group, T.C. (2023, January 11). TCG Trusted Attestation Protocol (TAP) Information Model for TPM Families 1.2 and 2.0 and DICE Family 1.0. Available online: https:\/\/trustedcomputinggroup.org\/resource\/tcg-tap-information-model\/."},{"key":"ref_50","unstructured":"Marsico, A., Reid, A., Ram\u00f3n, F.J., and Garc\u00eda, G. (2023, January 11). Available online: https:\/\/osm.etsi.org\/images\/OSM_EUAG_White_Paper_OSM_in_Action.pdf."},{"key":"ref_51","doi-asserted-by":"crossref","unstructured":"Coullon, H., Perez, C., and Pertin, D. (2017, January 21\u201323). Production Deployment Tools for IaaSes: An Overall Model and Survey. Proceedings of the 2017 IEEE 5th International Conference on Future Internet of Things and Cloud (FiCloud), Prague, Czech Republic.","DOI":"10.1109\/FiCloud.2017.51"},{"key":"ref_52","doi-asserted-by":"crossref","unstructured":"Chi, Y., Dai, W., Fan, Y., Ruan, J., Hwang, K., and Cai, W. (2021). Total Cost Ownership Optimization of Private Clouds: A Rack Minimization Perspective. Wirel. Netw., 2021, in press.","DOI":"10.1007\/s11276-021-02757-1"},{"key":"ref_53","doi-asserted-by":"crossref","unstructured":"Prajanti, A.D., and Ramli, K. (2019, January 23\u201326). A Proposed Framework for Ranking Critical Information Assets in Information Security Risk Assessment using the OCTAVE Allegro Method with Decision Support System Methods. Proceedings of the 34th International Technical Conference on Circuits\/Systems, Computers and Communications (ITC-CSCC), Jeju, Republic of Korea.","DOI":"10.1109\/ITC-CSCC.2019.8793421"},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1109\/MSP.2005.119","article-title":"Demystifying the Threat Modeling Process","volume":"3","author":"Torr","year":"2005","journal-title":"IEEE Secur. Priv."},{"key":"ref_55","doi-asserted-by":"crossref","first-page":"100146","DOI":"10.1016\/j.array.2022.100146","article-title":"Enhancing Cybersecurity by Generating User-Specific Security Policy through the Formal Modeling of User Behavior","volume":"14","author":"AlQadheeb","year":"2022","journal-title":"Array"},{"key":"ref_56","doi-asserted-by":"crossref","unstructured":"Sarkar, S., Choudhary, G., Shandilya, S.K., Hussain, A., and Kim, H. (2022). Security of Zero Trust Networks in Cloud Computing: A Comparative Review. Sustainability, 14.","DOI":"10.3390\/su141811213"},{"key":"ref_57","unstructured":"(2023, January 11). Network Functions Virtualisation (NFV) Release 2; Protocols and Data Models; NFV Descriptors Based on YANG Specification. Available online: https:\/\/www.etsi.org\/deliver\/etsi_gs\/NFV-SOL\/001_099\/006\/02.06.01_60\/gs_NFV-SOL006v020601p.pdf."},{"key":"ref_58","doi-asserted-by":"crossref","unstructured":"Kompougias, O., Papadopoulos, D., Mantas, E., Litke, A., Papadakis, N., Paraschos, D., Kourtis, A., and Xylouris, G. (2021, January 7\u201310). IoT Botnet Detection on Flow Data using Autoencoders. Proceedings of the 2021 IEEE International Mediterranean Conference on Communications and Networking (MeditCom), Athens, Greece.","DOI":"10.1109\/MeditCom49071.2021.9647639"},{"key":"ref_59","doi-asserted-by":"crossref","unstructured":"Sanvito, D., Siracusano, G., Santhanam, S., Gonzalez, R., and Bifulco, R. (2022, January 5\u20138). Syslrn: Learning what to Monitor for Efficient Anomaly Detection. Proceedings of the 2nd European Workshop on Machine Learning and Systems, EuroMLSys \u201922, Rennes, France.","DOI":"10.1145\/3517207.3526979"},{"key":"ref_60","doi-asserted-by":"crossref","first-page":"4708","DOI":"10.21105\/joss.04708","article-title":"Choco-Solver: A Java Library for Constraint Programming","volume":"7","author":"Fages","year":"2022","journal-title":"J. Open Source Softw."},{"key":"ref_61","unstructured":"(2023, January 11). Network Functions Virtualisation (NFV) Release 4; Management and Orchestration; Requirements and Interfaces Specification for Management of NFV-MANO. Available online: https:\/\/www.etsi.org\/deliver\/etsi_gs\/NFV-IFA\/001_099\/031\/04.03.01_60\/gs_nfv-ifa031v040301p.pdf."},{"key":"ref_62","doi-asserted-by":"crossref","first-page":"109116","DOI":"10.1016\/j.comnet.2022.109116","article-title":"Which Open-Source IDS? Snort, Suricata or Zeek","volume":"213","author":"Waleed","year":"2022","journal-title":"Comput. Netw."},{"key":"ref_63","doi-asserted-by":"crossref","unstructured":"Sklavidis, I., Angelidis, C., Babagiannou, R., and Liapis, A. (2021, January 26\u201328). Enhancing SIEM Technology for Protecting Electrical Power and Energy Sector. Proceedings of the 2021 IEEE International Conference on Cyber Security and Resilience (CSR), virtual.","DOI":"10.1109\/CSR51186.2021.9527944"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/3\/1658\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T18:22:42Z","timestamp":1760120562000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/3\/1658"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,2,2]]},"references-count":63,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2023,2]]}},"alternative-id":["s23031658"],"URL":"https:\/\/doi.org\/10.3390\/s23031658","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,2,2]]}}}