Gustavo De Los Reyes

VPMN: virtual private mobile network towards mobility-as-a-service

In this paper we present our vision for a mobile network infrastructure that embraces advances in virtualization to dynamically create private, resource isolated, customizable, end-to-end mobile networks. We describe an architecture for such a virtual private mobile network (VPMN) infrastructure and present a number of use cases that illustrate the requirements and trade-offs to consider in their realization and the benefits that can be achieved.

Securing the mobile enterprise with network-based security and cloud computing

This paper proposes a new security architecture for the mobile enterprise which uses network-based security and cloud computing to both simplify and enhance the security of enterprises, and reinstate the currently disappearing security perimeter.

The Security Cost of Content Distribution Network Architectures

Content Distribution Network (CDN) architectures face a wide range of security threats. In this paper, we compare the cost of achieving low and high security for different CDN architectures. We reviewed the existing and emerging systems, identified the threats that they face, defined the general security requirements and considered the mechanisms available to meet the requirements. To assess the security cost, we first defined the process for selecting security mechanisms, and then defined the process for ranking the mechanisms for each architecture. The security comparison result clearly shows that the more the cost of providing service is pushed to the end points, the higher the security cost. To the best of our knowledge, this study is the first effort to assess a security cost comparison of different CDN architectures. Our work is orthogonal to other studies that try to find ways of reducing the content distribution service cost, rather than quantifying the cost to provide service security.

The network as a mobility security platform

The network can be a powerful platform at the core of an advanced mobility security architecture. There are several unique benefits of using the network to provide security. Virtually all traffic - good and bad - traverses the network. Also, the network sees traffic from many places and can correlate data to find problems. The network has unlimited battery and processing power, is independent of end devices, and cannot easily be circumvented (as can software on devices). AT&T is investing significant research resources in order to realize the vision of the network as a mobility security platform. Project Marconi is instrumenting the mobility network to be able to detect and act upon malicious traffic. Project Saturn / Smart Mobile Computing will provide a more secure environment for mobile devices that today can bypass the protection of a security perimeter. And, a new host-assisted, network-based architecture will enable fine grained detection, mitigation, and recovery on mobile devices. Current research challenges include determining the theoretical subset of attacks that can be detected in the network, and defining algorithms to do this at an extreme scale in near real time.