Implementing Trust-to-Trust with Customer Edge Switching

Kantola, Raimo

doi:10.1109/waina.2010.27

Cited by 10 publications

(17 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Towards that end, we propose a cloud‐based firewall, namely, CES that would make the hosts cooperative in nature. It follows the firewalling model of mobile broadband networks, where mobile hosts are behind a network‐based firewall.…”

Section: Implementing Internet‐wide Trust Managementmentioning

confidence: 99%

“…To outline the feasibility of cooperation among Internet networks, the paper briefly describes the implementation of our solution particularly in 5G. The overall 2-tier security solution proposes: (1) a network-based firewall (Customer Edge Switching [CES] [17][18][19][20][21][22][23][24] ) that addresses inherent Internet vulnerabilities and security at the level of interaction between customer networks and (2) an Internet-wide evidence collection, aggregation, and reputation system. This paper concerns with the latter, i.e.…”

mentioning

confidence: 99%

See 1 more Smart Citation

Cooperation and end‐to‐end in the Internet

Kantola

Kabir

Loiseau

2017

Int J Communication

View full text Add to dashboard Cite

Summary This paper analyzes the motivation and strategies for ensuring cooperative behavior among hosts and customer networks in the Internet and 5G networks. The hypothesis is that better cooperation among the benevolent entities could improve the overall Internet welfare, motivating the need for adoption of cooperative security. However, in state of the art, the prevalent security approach in the Internet is based on self‐help, while the adoption of cooperative methods is progressing slowly. At the same time, the ubiquitous reliance on 5G and mission critical nature of some of the new services, for example, ultrareliable (machine‐to‐machine) communication and Internet of things, requires that 5G will do its best to curb the malicious (noncooperative) behavior from becoming a cause of failure to the legitimate services. In this paper, we relate our analysis of the conditions for sustainable cooperation in the Internet with the famous end‐to‐end principle, and present the hypothesis that there is no end‐to‐end solution to the problem of ensuring cooperation among Internet hosts. Game theory allows studying the outcomes of interactions among the players with conflicting interests. We use it to study the hypothesis and show that introducing the reputation of Internet nodes and customer networks can lead to cooperation, which improves the overall Internet welfare and reduces the payoffs of malicious actors. We study the possible response of noncooperative users with advanced defection strategies and the resulting outcomes. We argue that 5G shall make significant progress towards uprooting the selfish behavior and malicious activities using cooperation and relate it with motivation for providing ubiquitous connectivity and ultrareliable services. The paper concludes by summarizing our earlier work on the application of the proposed methods of cooperation to 5G and the Internet; outlining how cooperation in security is not only desirable but also feasible.

show abstract

Section: Implementing Internet‐wide Trust Managementmentioning

confidence: 99%

mentioning

confidence: 99%

Cooperation and end‐to‐end in the Internet

Kantola

Kabir

Loiseau

2017

Int J Communication

View full text Add to dashboard Cite

show abstract

“…As client-server protocols such as HTTP and SSH earlier have been proved successful [2], the focus is now on applications establishing connections directly between users. Such applications are used for messaging, voice/video calls and file transfer.…”

Section: Compatibility Testingmentioning

confidence: 99%

“…Customer Edge Switching (CES) [2] aims to provide an alternative to NATs. A CES device forwards traffic between the customer and the provider networks according to policies specified by the customer.…”

Section: Introductionmentioning

confidence: 99%

Traversal of the customer edge with NAT-unfriendly protocols

Leppaaho

Beijar

Kantola

et al. 2013

2013 IEEE International Conference on Communications (ICC)

View full text Add to dashboard Cite

Customer Edge Switching (CES) provides policy based reachability to hosts in a private network without the disadvantages caused by traditional mechanisms for traversing Network Address Translators (NAT). The solution enables transparent communication across address realms without keepalive signalling and application layer code in end systems as required by the current recommended approach to NAT traversal. Although most protocols traverse the customer edge correctly, we identify a few protocols that require special processing because of the IP addresses carried in the user data. This paper first presents the results of protocol compatibility testing with CES and selects two protocols, SIP and FTP, for further study. The paper then reports the implementation of Application Layer Gateways for these two protocols and provides guidelines for processing other protocols. The proposed approach significantly cuts the session establishment delays typical in SIP. The presented work is a part of a larger project that proposes the Customer Edge Switching to replace NATs and introduce co-operative firewalls for protecting customer networks.

show abstract

“…Connection state stores everything that is needed to manipulate address and identity information in the packets. Packets are switched over the address space/trust boundaries and the switching state is managed by implicit signaling that is embedded in the normal traffic patterns that applications use [2], [5].…”

Section: Introductionmentioning

confidence: 99%

Future Internet Is by Ethernet

Luoma¹,

Kantola²,

Manner³

2010

Communications: Wireless in Developing Countries and Networks of the Future

View full text Add to dashboard Cite

This is a position paper describing an approach to the creation of the Future Internet. We argue that the new architecture must respond to two key challenges: (1) increase trust among Internet stakeholders and (2) provide cost efficient scaling of the network to new levels of capacity, number of users and applications. We argue that the solution is to redesign the Internet by gradually replacing IP with a carrier grade transport system. In practice such a packet transport system can be created based on Carrier Grade Ethernet. We call the resulting network Internet by Ethernet. We make some fundamental arguments and outline the research agenda that will open based on the premises that we describe.

show abstract

Implementing Trust-to-Trust with Customer Edge Switching

Cited by 10 publications

References 4 publications

Cooperation and end‐to‐end in the Internet

Cooperation and end‐to‐end in the Internet

Traversal of the customer edge with NAT-unfriendly protocols

Future Internet Is by Ethernet

Contact Info

Product

Resources

About