Deployment of a Policy-Based Management System for the Dynamic Provision of IPsec-Based VPNs in IPv6 Networks

Clemente, Félix J. García; Millán, Gabriel López; Re, Jesús D. Jiménez; Pérez, Gregorio Martínez; Skarmeta, Antonio F.

doi:10.1109/saintw.2005.1619966

Cited by 2 publications

(2 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Regarding the PDP-PEP protocol, [11] uses COPS-PR to distribute an IPsec policy in an IPv6 network. [17] compares COPS-PR and Netconf in terms of bandwidth and CPU consumptions and concludes that the Netconf protocol is more suitable for network configurations.…”

Section: Related Workmentioning

confidence: 99%

Semantic context aware security policy deployment

Preda¹,

Cuppens²,

Cuppens-Boulahia³

et al. 2009

Proceedings of the 4th International Symposium on Information, Computer, and Communications Security

View full text Add to dashboard Cite

The successful deployment of a security policy is closely related not only to the complexity of the security requirements but also to the capabilities/functionalities of the security devices. The complexity of the security requirements is additionally increased when contextual constraints are taken into account. Such situations appear when addressing the dynamism of some security requirements or when searching a finer granularity for the security rules. The context denotes those specific conditions in which the security requirements are to be met. (Re)deploying a contextual security policy depends on the security device functionalities: either (1) the devices include all functionalities necessary to deal with a context and the policy is consequently deployed for ensuring its automatic changes or (2) the devices do not have the right functionalities to entirely interpret a contextual requirement. We present a solution to cope with this issue: the (re)deployment of access control policies in a system that lacks the necessary functionalities to deal with contexts.

show abstract

Section: Related Workmentioning

confidence: 99%

Semantic context aware security policy deployment

Preda¹,

Cuppens²,

Cuppens-Boulahia³

et al. 2009

Proceedings of the 4th International Symposium on Information, Computer, and Communications Security

View full text Add to dashboard Cite

show abstract

“…GX-Bone [17] extends the X-Bone by adding a global LDAP directory infrastructure for resource registration and discovery. UMU-PBNM [18] addresses automated VPN deployment, though it focuses on standardized XML-based configuration and PKI-based authentication. Although both X-Bone and UMU-PBNM can create/delete VIs and VPNs in an on-demand fashion, neither supports individual node join/departure and self-organization.…”

Section: Related Workmentioning

confidence: 99%

A Dynamic Topology and Routing Management Strategy for Virtual IP Networks

Fujita¹,

Touch²,

Pingali³

et al. 2006

IEICE Transactions on Communications

View full text Add to dashboard Cite

This paper describes an architecture for deploying virtual IP networks with P2P-like dynamic topology and routing management. Existing virtual IP network deployment mechanisms do not allow for dynamic topology adaptation and fault-tolerance because provisioning of IP tunnels is performed only once-when a virtual network is deployed. We propose a P2P-XBone, in which a P2P protocol such as DHT drives the topology and the routing table of a virtual IP network consistent with its neighbor node state. We describe how to extend both the existing X-Bone system and P2P mechanisms to achieve interworking between them. The P2P-XBone not only provides P2P's characteristics such as self-organization, fault-tolerance and content-based routing to virtual IP networks but also provides higher forwarding performance and simpler implementation to P2P systems due to the support for the use of existing network services. We also show several results on the evaluation of overhead of P2P-driven provisioning and on forwarding performance.

show abstract

Deployment of a Policy-Based Management System for the Dynamic Provision of IPsec-Based VPNs in IPv6 Networks

Cited by 2 publications

References 6 publications

Semantic context aware security policy deployment

Semantic context aware security policy deployment

A Dynamic Topology and Routing Management Strategy for Virtual IP Networks

Contact Info

Product

Resources

About