Secure Virtualization System for Industrial Distributed Applications

The focus of this thesis is the creation and the implementation of a secure platform and its integration in a specific in- dustrial use case. The architecture of this platform is based on an extensive audit made within the industry as well as the re- sult of using different technologies. The overall platform is based on an open-source virtualization technology and in- cludes security mechanisms that ensure Availability and Confidentiality aspects. The platform contains an attribute-based access control (ABAC) framework that is responsible of evaluating and imposing access control rules for accessing and exchanging information between systems. A proof-of-concept implementation integrates the OPC UA as a communication protocol; it also includes a network monitoring tool that is used to provide a high detection of attacks and a Health Monitoring Check tool to check the availability of services within the platform. A hardening security policy is also developed to increase the security resilience of the platform. The platform was integrated following a specific application scenario that is compatible with the industry needs.