Network Policy Enforcement in cloud-native environments
Year: 2025
Type: conference-paper
Abstract: The shift towards cloud-native environments has gained significant momentum, and with it, several security and privacy concernshave arisen. One of them is related to the reliable definition and enforcement of network policies in such scenarios. This paper starts by discussing those concerns, reviewing existing technologies and later, introduces a policy orchestrator. Such a proposal addresses the research gap and the notoriously difficult task of ensuring compliance and compatibility with standards. Indeed, the proposed approach supports XACML and JSON-based requests, ensuring interoperability with established standards while also accommodating cloud-native specificities. This paper presents a proof-of-concept of the policy orchestrator in a real-world scenario, demonstrating the usefulness and feasibility of the proposed approach.
Authors: Tomás, Pedro, Ribeiro da Silva, Sofia Margarida, Neto, Marco, Proença, Jorge, Rosa, Luis, Cordeiro, Luis, Taleb, Tarik, Cruz, Tiago
Language: English
Topic: Access Control and Trust
Subfield: Computer Networks and Communications
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
Funder: European Commission
OpenAlex ID: W7106794909