Copyright © 2004 Elsevier B.V. All rights reserved.
Future active Ip networks security architecture
Received 5 August 2004;
References and further reading may be available for this article. To view references and further reading you must purchase this article.
Abstract
Programmable and active networking principles provide a basis for a flexible and extensible network element architecture. Such architecture enables provision of various services in the network for its users but raises many security concerns and security becomes a key issue in such system. Based on description of the system, possible threats, high level security architecture goals and issues we propose a flexible and general security architecture which was designed and implemented in the context of the Future Active Ip Networks [FAIN project home page. URL http://www.ist-fain.org] project. Initial evaluation shows that strong security in such system is possible and that we have achieved most of our goals. The security architecture itself is general; we have applied it to three types of nodes developed and to one pure active networking approach.
Keywords: Security architecture; Programmable networks; Active networks
Article Outline
- 1. Introduction
- 2. System relationships and entities
- 3. Threats, security requirements and architecture goals
- 4. Security issues
- 4.1. Authorization and policy enforcement
- 4.2. Authentication
- 4.3. Packet integrity
- 4.4. System integrity
- 4.5. Code and service verification
- 4.6. Controlling resource usage
- 4.7. Accountability
- 5. High level security architecture
- 6. FAIN architectural model and security architecture
- 7. FAIN node implementation
- 8. Security architecture design and implementation
- 8.1. Building components security context
- 8.2. Enforcement layer, authorization and policy enforcement
- 8.3. External security representation
- 8.4. Cryptographic subsystem and secure store
- 8.5. Connection manager
- 8.6. Verification manager
- 8.7. Security manager and security area interfaces
- 9. General active packet security events
- 10. Security architecture performance
- 11. Architecture applicability
- 12. Evaluation of the security architecture
- 13. Conclusions and future work
- Acknowledgements
- References
- Vitae






E-mail Article
Add to my Quick Links

Cited By in Scopus (1)






