ualized and added to the D2 roadmap and integrated with ONAP security capabilities. As the security technology is evolving and maturing, new technology platforms are driving additional integration requirements and opportunities. Initial Security Posture Target Security Posture (D2) Functionality Legend IDP/IPS - Intrusion Detection & Prevention TMS Feeds - Threat Management System Feeds DDoS - Distributed Denial of Service IDS/IPS DLP - Data Leakage Protection Packet Vulnerability Scanning - Industry Standard Scanning Inspectio Feeds Verify LAN/IP - Router/Switch IP Validation SB Firewall - Security Boundary for Internal Networks NB Firewall - Security Boundary for External Networks IT Tools Deep Packet Inspection - Enhanced Configurable IDS/IPS IT Tools Deep Packet TMS Fee IT Tools - Operational Compliance Tools TMS Feed Inspection Firewall (ASTRA) (ASTRA) Firewall Forensics - Breach Analysis and Remediation Capabilities DS/IPS Cloud Cloud ALB Firewall Forensics TSB Firewall Vulnerability Vulnerability Scanning Scanning Firewall Vulnerabil Vulnerabil Verify Verify LAN IP LAN IP Scanning Scanning FIGURE 9.8 AIC security framework evolution. Building the Network of the Future The target security framework for AIC will work in concert with the network cloud components to enhance, strengthen, and continue to build upon and optimize the original baseline set of security functionality. With a network cloud environment, the limitations of the initial deployments will be lifted and security functionality will be available for all AIC environments. The functionality will be implemented in the appropriate position within the environment with the vast majority being cloud- based. As shown in Figure 9.8, the perimeter will still exist but will not be the main tenant of cloud security. In order to reach this target, significant virtualization of security functionality will need to take place, something the vendors and marketplace are marching toward. This, along with the contin- ued rollout of ASTRA, security analytics and i