Technologies for scalable security architecture of virtualized networks

A computer-readable medium comprising instructions stored thereon, that if executed by at least one processor, cause the at least one processor to perform a network functions virtualization (NFV) Security Services Agent (NFV SSA) that is to:

• receive a security monitoring policy;
• monitor telemetry data of a platform or telemetry data of a virtualized network function (VNF) based on the security monitoring policy, wherein the security monitoring policy comprises monitoring rules used by the NFV SSA to monitor telemetry data of the platform or the virtual network function;
• form a part of secure channel using a configuration from a Security Controller;
• and
• provide at least a portion of the monitored telemetry data based on the security monitoring policy to a Security Monitoring Analytics System via the secure channel for analysis.

A computing-platform comprising:

• a network interface controller;
• a memory device;
• and
• at least one processor coupled to the network interface controller and the memory device, the at least one processor to perform a network functions virtualization (NFV) Security Services Agent (NFV SSA) that is to:
• receive a security monitoring policy;
• monitor telemetry data of the platform or telemetry data of a virtualized network function (VNF) based on the security monitoring policy, wherein the security monitoring policy comprises monitoring rules used to monitor telemetry data of the platform or the virtual network function;
• form a part of secure channel using a configuration from a Security Controller;
• and
• provide at least a portion of the monitored telemetry data based on the security monitoring policy to a Security Monitoring Analytics System via the secure channel for analysis.

A method for executing a network functions virtualization (NFV) Security Services Agent (NFV SSA), the method comprising:

• receiving a security monitoring policy;
• monitoring telemetry data of a platform or telemetry data of a virtualized network function (VNF) based on the security monitoring policy, wherein the security monitoring policy comprises monitoring rules used by the NFV SSA to monitor telemetry data of the platform or the virtual network function;
• setting-up a part of secure channel using a configuration from a Security Controller;
• and
• causing transmission of at least a portion of the monitored telemetry data based on the security monitoring policy to a Security Monitoring Analytics System via the secure channel for analysis.