I2NSF NETWORK SECURITY FUNCTION-FACING INTERFACE YANG DATA MODEL

摘要

Disclosed is a method and apparatus in which a network operation management system provides a security service in a security management system. According to the present invention, in a method in which a network operation management system provides a security service in a security management system, a high-level first security policy is received from an interface to network security functions (I2NSF) user; an available security service is received through a developer management system; a low-level second security policy corresponding to the first security policy is generated on the basis of the security service; a packet including the second security policy for setting the generated second security policy to each of a plurality of network security functions (NSFs) is transmitted; the network operation management system and each of the plurality of NSFs are connected by an I2NSF NSF-facing interface; and the second security policy may have a dynamic life-cycle through the developer management system.