1 Postdoctoral Position in Automation and Optimization of Security Monitoring Systems Deployment in Clouds (MYRIADS) in France | Inria

The overall objective proposed for this post-doc position is to study a configuration language and runtime strategies in order to allow cloud tenants to write their security monitoring requirements, and have the security monitoring infrastructure automatically deployed and self-adapted by services of the cloud infrastructure. As this objective is ambitious, the post-doc will be free to choose the work-directions suiting her best to progress towards the overall objective.

Three work-directions are proposed :

• First, the work on the DISCUS massively distributed IDS [3] could be extended in order to enlarge the range of security monitoring components supported: different kinds of probes, collectors, aggregators, etc. The main challenge consists in studying strategies to implement a given security monitoring policy and optimize the information flow and its processing through available or to-be-deployed-onthe-fly software components.
• Second, strategies must be studied in order to combine the security monitoring requirements of client organizations and of the cloud provider. The challenge is to make the implementations of these requirements share the security monitoring resources. Resources that can be shared include physical probes, software probes running in network devices and in hypervisors. The allocated capacity of each resource to each tenant is possibly constrained and should depend on the SLAs negociated with the cloud operator.
• Finally, the implementation of a security monitoring policy should self-adapt to the reconfigurations of the virtualized infrastructures. The challenge is to find strategies to do these adaptations as ordered adaptations of single security monitoring components, as well as to keep respecting SLAs during theadaptation phases.

The post-doc will leverage results obtained during a PhD thesis on DISCUS and will work with PhD students of the team. In particular a thesis started in 2014 is focused on the adaptation of different security monitoring components [9].

Experiments will be carried out on the Grid’5000 experimentation platform on which researchers can deploy and experiment with custom cloud infrastructures such as OpenStack .

Profile

The applicant is required to have defended his Ph.D.

Knowledge and/or experience in distributed systems, cloud computing, security, compilers, domain-specific languages, Experimentation skills, Autonomy / Curiosity, English mandatory