capability to integrate security into the cloud services. These cloud services are created and orchestrated by the ONAP platform. This approach is referred to as security by design. The enabler for these capabilities within ONAP is an application programing interface (API)- based security framework, depicted in Figure 9.12. The illustration highlights the security platforms work with ONAP to provide security functionality. The security platform is connected to ONAP through a set of security APIs. While the security platform could be specific to the service provider, the ONAP framework can be utilized by other security platforms. This framework allows for secu- rity platforms and applications existing outside of ONAP, to be leveraged for platform security and security by design for services it orchestrates. Security of the platform begins with a strong foundation of security requirements with adoption of security best practices as an inherent part of the ONAP design. Some examples include Deployment of the platform on a secure physical and network infrastructure Adherence to secure coding best practices Security analysis of source code Vulnerability scanning Defined vulnerability patching process Building upon this foundation, external security platforms that provide additional security capa- bilities such as identity and access management, micro-perimeter controls, and security event analy- sis are integrated onto the platform by leveraging the ONAP security framework. The ONAP platform also enables security by design for services it orchestrates, by engaging a security trust model and engine. This begins with validation of security characteristics of resources as part of the SDC resource certification process. This assures service designers are using resource modules that have accounted for security. By leveraging the ONAP security framework to access an external security engine, additional security logic can be applied and enforced during service creation. Building the Network of the Future Deliver Deliver Mode