Security as a Service Platform Leveraging
Multi-Access Edge Computing Infrastructure
Provisions

Security as a Service Platform Leveraging
Multi-Access Edge Computing Infrastructure
Provisions

The mobile service platform envisaged by emerging IoT and 5G is guaranteeing gigabit-level bandwidth, ultra-low latency and ultra-high storage capacity for their subscribers. In The mobile service platform envisaged by emerging IoT and 5G is guaranteeing gigabit-level bandwidth, ultra-low latency and ultra-high storage capacity for their subscribers. In spite of the variety of applications plausible with the envisaged technologies, security is a demanding objective that should be applied beyond the design stages. Thus, Security as a Service (SECaaS) is an initiative for a service model that enable mobile and IoT consumers with diverse security functions such as Intrusion Detection and Prevention (IDPaaS), Authentication (AaaS), and Secure Transmission Channel (STCaaS) as a Service. A well-equipped edge computing infrastructure is intrinsic to achieve this goal. The emerging Multi-Access Edge Computing (MEC) paradigm standardized by the ETSI is excelling among other edge computing flavours due to its well-defined structure and protocols. Thus, in our directive, we intend to utilize MEC as the edge computing platform to launch the SECaaS functions. Though, the actual development of a MEC infrastructure is highly dependent on the integration of virtualization technologies to enable dynamic creation, the deployment, and the detachment of virtualized entities that should feature interoperability to cater the heterogeneous IoT devices and services. To that extent, this work is proposing a security service architecture that offers these SECaaS services. Further, we validate our proposed architecture through the development of a virtualized infrastructure that integrates lightweight and hypervisor-based virtualization technologies. Our experiments prove the plausibility of launching multiple security instances on the developed prototype edge platform.

Assistant Professor at  | pasika.ranaweera@ucd.ie | Website |  + posts

Pasika Ranaweera is an Assistant Professor in the School of Electrical and Electronic Engineering in University College Dublin from September 2023. He was a Post-Doctoral Researcher in the UCD School of Computer Science in 2023. He was the project manager of the CONFIDENTIAL-6G project, funded by the EU H2022-SNS grant id: 101096435, during this profession. He obtained his Bachelor's degree in Electrical and Information Engineering from the Faculty of Engineering, University of Ruhuna, Sri Lanka, in 2010 with honors and received the Lanekassen scholarship for pursuing the Master’s Degree in Information and Communication Technology (ICT) in 2013 from the University of Agder, Norway. Pasika completed his Ph.D. from University College Dublin, Ireland, on improving the security of service migrations of MEC in 2023. Prior to his Ph.D., he served as a lecturer attached to the Department of Electrical and Information Engineering, Faculty of Engineering, University of Ruhuna, Sri Lanka, from 2014 to 2018. Pasika is experienced in conducting teaching/ instructing/ demonstration work at international universities (UCD-Ireland, BDIC-China). He is currently conducting collaborative research with researchers at IIT-India, the University of Oulu-Finland, and the University of Ruhuna-Sri Lanka. Pasika is focused on enhancing the security measures in 5G and beyond 5G mobile networks, while his main research focus is directed at Federated Learning-based security issues and how to overcome them utilizing Blockchain. His additional research directives extend to lightweight security protocols, formal verification, security, service quality optimization, 5G and MEC integration technologies (SDN, NFV, Blockchain), privacy preservation techniques, and IoT security. In addition to the research work, he serves as a reviewer for IEEE IoT journal, IEEE Access, IEEE Communication Magazine, IEEE IoT Magazine, SN Computer Science, and various IEEE-hosted conferences and workshops under the IEEE Communication Society (also a member of IEEE ComSoc).

Vashish N. Imrith
Categories: Conference Paper