ware of, and be in a position to react appropriately to, undesired traffic. 9.4 SECURITY ARCHITECTURE Our approach to security of a software-enabled network is comprehensive. The security architec- ture addresses multiple security pillars or layers including (1) cloud, (2) network, (3) applications/ tenants, and (4) Open Network Automation Platform (ONAP) security. Security controls will be embedded day one at each layer. The critical need is to have the security controls at each layer well coordinated SO that they enhance the overall security framework instead of allowing for cracks in the implementation where signals or red flags might fall through and be missed. Across each of these core components or layers of the architecture, three major platforms will be ingrained: security analytics, identity and access management, and ASTRA. These platforms enable a multilayer defense strategy. The security analytics platform provides a comprehensive threat detection and investigation capability. The identity and access management platform provides an adaptive security capability that enables effortless protection via authentication and authoriza- tion of hardware, systems, and applications in the cloud. ASTRA provides an adaptive security platform for the cloud infrastructure. Each of these three core components are described in detail in Section 9.5. The cloud architecture was created to provide some core security protection. The separation between the control planes and the VNF on the data plane helps limit the security risks. If there is no direct connectivity between the planes, then attacks and attempts to steal information or data is severely curtailed. 9.4.1 CLOUD SECURITY AT&T Integrated Cloud (AIC) refers to AT&T's common cloud environment, which is discussed in detail in Chapter 4. AIC deployments are based on OpenStack software and are deployed in multiple models. All the deployment models are based on the same OpenStack foundation and are tailored and sized to support different needs. The factors defining th