In this presentation the SHIELD a distributed cyber-security system that leverages Network Function Virtualisation for dynamically deploying virtual Network Security Functions will be presented. The security functions send network traffic’s monitoring data to a big-data store. The Data Analysis and Remediation Engine executes security analytics modules on top of monitoring data modules in order to detect threats. The security analytics heavily leverage Machine Learning algorithms for detecting anomalies and classifying threats.