Supporting Security Automation for Multi-chassis Link Aggregation Groups via the Interconnected-Asset Ontology

Multi-chassis (MC) endpoints and link aggregation groups (LAG) are common configurations in production networks today. Security automation processes that rely on correct topological data require a machine-process able representation of corresponding network topologies. Unfortunately, MC-LAG setups can be interpreted in more than one way regarding the topological layout, which complicates the process significantly. In this paper we present an extension to the Interconnected-asset topology (IO) that provides detailed data about topologies in process-specific views to better support security automation processes.