Strong security for active networks

Murphy, Sandra; Lewis, Edward; Puga, R.; Watson, Richard; Yee, R.

doi:10.1109/opnarc.2001.916839

Cited by 38 publications

(22 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Several works, prompted by the security working group [7], are leaning towards secure execution rather than secure deployment. Projects like SANE [1] and SANTS [12] provide a secure framework for active nodes. Another technique adopts a different method to secure the execution of the code by restrictive active languages like PLAN [8] and SafetyNet [14].…”

Section: Related Workmentioning

confidence: 99%

A Secure Code Deployment Scheme for Active Networks

Kloul¹,

Mokhtari²

2009

Active and Programmable Networks

View full text Add to dashboard Cite

Abstract. Active Networking is an innovative technology which can open the network and make it more flexible. But introducing active codes within the network increases the network vulnerability from the security point of view. The security is always considered as a separated layer from the other layers of the active network architecture. In this paper, we develop a global security architecture for a safe code distribution. A three level mechanism is defined to provide a unique identification, authentication, and classification of a code, according to its developer and its users.

show abstract

Section: Related Workmentioning

confidence: 99%

A Secure Code Deployment Scheme for Active Networks

Kloul¹,

Mokhtari²

2009

Active and Programmable Networks

View full text Add to dashboard Cite

show abstract

“…However, the works in [27][28][29] has suggested the implementation of security in active networks where the sending network element or user identification and resource access authorization are addressed for secure execution of active programs. The programs should be constructed based on the languages that provide safe execution such as Java and a special language particularly designed for active networks in [30], and run on a secure environment with limited resource (CPU time and memory).…”

Section: Security and Scalabilitymentioning

confidence: 99%

Using active networks technology for dynamic QoS

et al. 2006

View full text Add to dashboard Cite

We propose a dynamic QoS, or D-QoS, model where QoS settings can be automatically reconfigured based upon requests from authorized users. Different levels of privilege can be assigned to users enabling higher privileged users to interrupt the network flows belonging to those of lower privileged levels. To request for a special QoS treatment, a user can issue an active packet to interrupt any active node along its flow path which is D-QoS enabled. The request for a specific interruption level is approved by a D-QoS enabled node which allows for multi-level interruptions to be handled. After an interrupting flow has completed transmitting all its packets, D-QoS enabled node can resume its services for those pending flows which are of lower privilege levels. In this paper, we describe the overall concept of D-QoS and demonstrate how it can be implemented by a small prototype. Using simulation, we show that the proposed system can provide assurance for privileged flows with an improved network utilization where bandwidth is shared among the flows according to the levels of privilege. D-QoS should be deployed on those bottleneck hops with limited bandwidth on the edge network to ensure the best service is given to privileged users.

show abstract

“…ASP specification does not define a security architecture but SANTS [15] is an ANSA based proposal for ANTS. ANSA is an Active Network Security Architecture (ANSA) [14] proposed by the research community to be used in Abone [16].…”

Section: Related Workmentioning

confidence: 99%

“…That is possible because we do not need the non-repudiation service over the active packets flow, since we provide it during service request. Furthermore, since a topology independent solution is required, the mechanism to share the keys based on the neighboring relationship proposed in the ANSA based EEs [15] is not acceptable. ROSA proposes a more sophisticated key distribution mechanism between the trusted components of SARA.…”

Section: Related Workmentioning

confidence: 99%

ROSA: Realistic Open Security Architecture for Active Networks

et al. 2002

View full text Add to dashboard Cite

Abstract. Active network technology enables fast deployment of new network services tailored to the specific needs of end users, among other features. Nevertheless, security is still a main concern when considering the industrial adoption of this technology. In this article we describe an open security architecture for active network platforms that follow the discrete approach. The proposed solution provides all the required security features, and it also grants proper scalability of the overall system, by using a distributed key-generation algorithm. The performance of the proposal is validated with experimental data obtained from a prototype implementation of the solution.

show abstract

Strong security for active networks

Cited by 38 publications

References 10 publications

A Secure Code Deployment Scheme for Active Networks

A Secure Code Deployment Scheme for Active Networks

Using active networks technology for dynamic QoS

ROSA: Realistic Open Security Architecture for Active Networks

Contact Info

Product

Resources

About