ROSA: Realistic Open Security Architecture for Active Networks

Bagnulo, Marcelo; Alarcos, Bernardo; Calderón, María; Sedano, Marifeli

doi:10.1007/3-540-36199-5_16

Cited by 3 publications

(2 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Preliminary ideas on the proposed security architecture have been published in [20]. In this article, we present a number of improvements on the solution, the multidomain extension, and the tests carried out on a real platform in section VI.…”

Section: Security Architecturementioning

confidence: 99%

Multidomain Network Based on Programmable Networks: Security Architecture

Alarco¹,

Sedano²,

Calderón³

2005

ETRI J

Self Cite

View full text Add to dashboard Cite

This paper proposes a generic security architecture designed for a multidomain and multiservice network based on programmable networks. The multiservice network allows users of an IP network to run programmable services using programmable nodes located in the architecture of the network. The programmable nodes execute codes to process active packets, which can carry user data and control information. The multiservice network model defined here considers the more pragmatic trends in programmable networks. In this scenario, new security risks that do not appear in traditional IP networks become visible. These new risks are as a result of the execution of code in the programmable nodes and the processing of the active packets. The proposed security architecture is based on symmetric cryptography in the critical process, combined with an efficient manner of distributing the symmetric keys. Another important contribution has been to scale the security architecture to a multidomain scenario in a single and efficient way.

show abstract

Section: Security Architecturementioning

confidence: 99%

Multidomain Network Based on Programmable Networks: Security Architecture

Alarco¹,

Sedano²,

Calderón³

2005

ETRI J

Self Cite

View full text Add to dashboard Cite

show abstract

“…Like in SARA [1] an analysis of security aspects and possible solutions are provided, but some forms of attacks have been neglected, like DoS attacks on the active router. To verify a request in SARA, the active router must first download the module from the code server and then verify the authenticity of the request.…”

Section: Related Workmentioning

confidence: 99%

Secure Service Signaling and Fast Authorization in Programmable Networks

et al.

View full text Add to dashboard Cite

Abstract. Programmable networks aim at the fast and flexible creation of services within a network. Often cited examples are audio and video transcoding, application layer multicast, or mobility and resilience support. In order to become commercially viable, programmable networks must provide authentication, authorization and accounting functionality. The mechanisms used to achieve these functionalities must be secure, reliable, and scalable, to be used in production scale programmable networks. Additionally programmable nodes must resist various kinds of attacks, such as denial of service or replay attacks. Fraudulent use by individual users must also be prohibited. This paper describes the design and implementation of a secure, reliable, and scalable signaling mechanism clients can use to initiate service startup and to manage services running on the nodes of a programmable network. This mechanism is designed for production scale networks with AAA-functionality.

show abstract

Distributed Instrusion Prevention in Active and Extensible Networks

Sproull

Lockwood

Active Networks

View full text Add to dashboard Cite

Abstract. The proliferation of computer viruses and Internet worms has had a major impact on the Internet Community. Cleanup and control of malicious software (malware) has become a key problem for network administrators. Effective techniques are now needed to protect networks against outbreaks of malware. Wire-speed firewalls have been widely deployed to limit the flow of traffic from untrusted domains. But these devices weakness resides in a limited ability to protect networks from infected machines on otherwise trusted networks.Progressive network administrators have been using an Intrusion Prevention System (IPS) to actively block the flow of malicious traffic. New types of active and extensible network systems that use both microprocessors and reconfigurable logic can perform wire-speed services in order to protect networks against computer virus and Internet worm propagation. This paper discusses a scalable system that makes use of automated worm detection and intrusion prevention to stop the spread of computer viruses and Internet worms using extensible hardware components distributed throughout a network. The contribution of this work is to present how to manage and configure large numbers of distributed and extensible IPSs.

show abstract

ROSA: Realistic Open Security Architecture for Active Networks

Cited by 3 publications

References 11 publications

Multidomain Network Based on Programmable Networks: Security Architecture

Multidomain Network Based on Programmable Networks: Security Architecture

Secure Service Signaling and Fast Authorization in Programmable Networks

Distributed Instrusion Prevention in Active and Extensible Networks

Contact Info

Product

Resources

About