An Architecture to Manage Security Operations for Digital Service Chains

Matteo Repetto; Alessandro Carrega; Riccardo Rapuzzi

doi:10.1016/j.future.2020.08.044

An Architecture to Manage Security Operations for Digital Service Chains

Journal article

Matteo Repetto, Alessandro Carrega, Riccardo Rapuzzi
Future Generation Computer Systems, vol. 115, 2021, pp. 251-266

DOI: 10.1016/j.future.2020.08.044

Cite

APA Click to copy
Repetto, M., Carrega, A., & Rapuzzi, R. (2021). An Architecture to Manage Security Operations for Digital Service Chains. Future Generation Computer Systems, 115, 251–266. https://doi.org/10.1016/j.future.2020.08.044

Chicago/Turabian Click to copy
Repetto, Matteo, Alessandro Carrega, and Riccardo Rapuzzi. “An Architecture to Manage Security Operations for Digital Service Chains.” Future Generation Computer Systems 115 (2021): 251–266.

MLA Click to copy
Repetto, Matteo, et al. “An Architecture to Manage Security Operations for Digital Service Chains.” Future Generation Computer Systems, vol. 115, 2021, pp. 251–66, doi:10.1016/j.future.2020.08.044.

BibTeX Click to copy

@article{repetto2021a,
  title = {An Architecture to Manage Security Operations for Digital Service Chains},
  year = {2021},
  journal = {Future Generation Computer Systems},
  pages = {251-266},
  volume = {115},
  doi = {10.1016/j.future.2020.08.044},
  author = {Repetto, Matteo and Carrega, Alessandro and Rapuzzi, Riccardo}
}

🔐 Towards Programmable and Orchestrated Security for Digital Service Chains

Modern digital services increasingly span multiple administrative domains, heterogeneous infrastructures, and dynamic service compositions. These characteristics challenge conventional perimeter-based cybersecurity architectures and limit end-to-end visibility.

In our paper, we propose a reference architecture for Security Operations Center as a Service (SOCaaS) that integrates distributed, programmable security capabilities with logically centralized orchestration, analytics, and security management.

The architecture introduces four key building blocks:

🔹 Digital Services: Embedded monitoring, inspection, and enforcement capabilities.

🔹 SOCaaS Platform: Context Broker, Security Controller, orchestration framework, and modular security services.

🔹 Security Dashboard: Situational awareness, policy management, investigation, and incident response.

🔹 AAA Framework: Coordinated authentication, authorization, and access management.

The proposed approach aims to improve security visibility, automate operational workflows, and support trustworthy service chains across cloud, edge, IoT, and multi-provider environments.

reference architecture for Security Operations Center as a Service (SOCaaS) that integrates distributed, programmable security capabilities with logically centralized orchestration, analytics, and security management.

🛡️ Securing Digital Service Chains: A Cybersecurity Story! ⚡

What happens when cloud platforms, IoT devices, microservices, and multiple providers must work together securely?

Traditional perimeter-based security is no longer enough!

Our research introduces a flexible Security Operations Center as a Service (SOCaaS) architecture that orchestrates distributed security capabilities across heterogeneous, dynamic, and multi-domain environments.

🔍 Distributed monitoring and visibility 🧠 Centralized security analytics and threat detection ⚙️ Dynamic security orchestration 🌐 Cross-domain threat intelligence sharing

The mission? Making digital service chains more secure, trustworthy, and resilient!

flexible Security Operations Center as a Service (SOCaaS) architecture that orchestrates distributed security capabilities across heterogeneous, dynamic, and multi-domain environments.