Re: [Nsaas] 答复: Existing work, other things

[Linda Dunbar <[e-mail]>]

Melinda, 

Answers are inserted below:

-----Original Message-----
From: Melinda Shore [mailto:[e-mail]] 
Sent: Tuesday, August 12, 2014 12:23 PM
To: Linda Dunbar; [e-mail]
Subject: Re: [Nsaas] 答复: Existing work, other things

On 8/12/14 9:08 AM, Linda Dunbar wrote:
> Thank you for the listing. There is also SACM. 
> I will include those IETF initiatives in the existing work of IETF. Gap analysis will be needed. 

I think a gap analysis is premature, given the lack of a sense of overall direction.  And my question really is *not* about why these protocols may not be applicable.  My question is why you feel that new work would be successful given the lack of implementation and deployment of previous efforts (and also given that OpenStack has an implementation of their own design).

[Linda] There is already wide acceptance of security functions that are not running on customer/enterprise premises. Numerous security vendors are now leveraging cloud based models to deliver security solutions. According to [Gartner-2013], the demand for cloud-based security services is growing. Small and medium-sized businesses (SMBs) are increasingly adopting cloud-based security services to replace on-premises security tools, while larger enterprises are deploying a mix of traditional and cloud-based security services.

In addition, NSaaS is very different from all those listed initiatives. 

There are three aspects to NSaaS:
- Define the mechanism for creating virtual security functions on physical appliances,
- Specify concrete rules (or attributes) for instantiating VMs for virtual security functions (NFV initiative), and
- Define the mechanisms for clients (applications) to request/negotiate/validate security functions that are not physically located on the local premises. 

All those aspects share a common need: Attributes for the needed virtual security functions, the request/negotiate mechanism for virtual functions (on physical appliances, from remote domains, or others).

Linda