The price of safety in an active network

Journal of Communications and Networks

Volumn 3, Issue 1, 2001, Pages 4-18

  Alexander, D Scott ^a   Menage, Paul B ^b   Keromytis, Angelos D ^c   Arbaugh, William A ^d   Anagnostakis, Kostas G ^c   Smith, Jonathan M ^c  

^a Activium Inc ^*  (United States)

^b Ensim Corporation   (United States)

^c UNIVERSITY OF PENNSYLVANIA   (United States)

^d UNIVERSITY OF MARYLAND   (United States)

Author keywords

Active networking; Performance; Security

Indexed keywords

EID: 0038972375     PISSN: 12292370     EISSN: None     Source Type: Journal    
DOI: 10.1109/JCN.2001.6596875     Document Type: Article

References (44)

1. D. S. Alexander et al., "A secure active network architecture: Realization in SwitchWare," IEEE Network, (Special issue on Active and Programmable Networks), vol. 12, pp. 37-45, May/June 1998.
2. D. S. Alexander et al., "Safety and security of programmable network infrastructures," IEEE Commun. Mag., (Special issue on Programmable Networks), vol. 36, pp. 84-92, Oct. 1998.
3. D. S. Alexander et al., "A secure active network environment architecture," Technical Report MS-CIS-97-17, Pennsylvania Univ., Nov. 1997.
4. D. S. Alexander and J. M. Smith, "The architecture of ALIEN," in Proc. 1st International Working Conf. Active Networks (IWAN'99), Lecture Notes in Computer Science, July 1999.
5. P. Menage, "RCANE: A resource controlled framework for active network services," in Proc. 1st International Working Conf. Active Networks (IWAN'99), Lecture Notes in Computer Science, July 1999.
6. L. Breslau and S. Shenker, "Best-effort versus reservations: A simple comparative analysis," in Proc. ACM SIGCOMM, vol. 28, Sept. 1998.
7. V. Paxson and S. Floyd, "Wide-area traffic: The failure of poisson modeling," in Proc. ACM SIGCOMM, vol. 24, Sept. 1994, pp. 257-268.
8. W. E. Leland et al., "On the self-similar nature of Ethernet traffic," in Proc. ACM SIGCOMM, vol. 23, Sept. 1993, pp. 183-193.
9. M. Crovella and A. Bestavros, "Explaining world wide web traffic self-similarity," Technical Report 95-015. Boston Univ., Aug. 1995.
10. A. B. Montz et al., "Scout: A communications-oriented operating system," Technical Report, Department of Computer Science, Arizona Univ., June 1994.
11. I. M. Leslie et al., "The design and implementation of an operating system to support distributed multimedia applications," IEEE J. Select. Areas Commun., vol. 14, pp. 1280-1297, Sept. 1996.
12. W. A. Arbaugh, D. J. Farber, and J. M. Smith, "A secure and reliable bootstrap architecture," in Proc. IEEE Symposium on Security and Privacy, May 1997, pp. 65-71.
13. W. A. Arbaugh et al., "Automated recovery in a secure bootstrap process," in Symposium on Network and Distributed System Security, Internet Society, Mar. 1998.
14. "Data encryption standard," Technical Report FIPS-46, U.S. Department of Commerce, Jan. 1977.
15. "Secure hash standard," Technical Report FIPS-180-1, U.S. Department of Commerce, Apr. 1995. Also known as: 59 Fed Reg 35317, 1994.
16. "Digital signature standard," Technical Report FIPS-186, U.S. Department of Commerce, May 1994.
17. D. S. Alexander, ALIEN: A Generalised Computing Model of Active Networks, Ph.D. Dissertation, Pennsylvania Univ., Sept. 1998.
18. G. Back and W. Hsieh, "Drawing the Red Line in Java," in Proc. the Seventh Workshop on Hot Topics in Operating Systems (HOTOS-VII), Mar. 1999.
19. L. Peterson, (ed.), "NodeOS interface specification," AN Node OS Working Group, Jan. 2000. Draft.
20. M. Hicks et al., "PLANet: An active internetwork," in Proc. IEEE INFOCOM'99, Mar. 1999.
21. D. J. Wetherall, J. Guttag, and D. L. Tennenhouse, "ANTS: A toolkit for building and dynamically deploying network protocols," in Proc. OPENARCH'98, Apr. 1998.
22. C. Liu and J. Layland, "Scheduling algorithms for multiprogramming in a hard real-time environment," J. ACM, vol. 20, pp. 46-61, Feb. 1973.
23. A Demers, S. Keshav, and S. Shenker, "Analysis and simulation of a fair queueing algorithm," in Proc. ACM SIGCOMM, vol. 19, Sept. 1989, pp. 1-12.
24. P. Druschel and G. Banga, "Lazy receiver processing (LRP): A network subsystem architecture for server systems," in Proc. 2nd Symposium on Operating Systems Design and Implementation (OSDI'96), USENIX, Oct. 1996, pp. 261-275.
25. P. Menage, Resource Control of Untrusted Code in an Open Programmable Network, Ph.D. Dissertation, Cambridge Univ., Computer Lab., June 2000.
26. F. Rouaix, "A web navigator with applets in Caml," Fifth WWW Conf., May 1996. Available at http://pauillac.inria.fr/mmm/papers/mmm.ps.gz.
27. D. S. Alexander et al., "Active bridging," in Proc. ACM SIGCOMM, Sept. 1997.
28. C. M. Ellison et al, "Simple public key certificate," Apr. 1997, work in progress.
29. L. Gong and P. Syverson, "Fail-stop protocols: An approach to designing secure protocols," in Proc. IFIP DCCA-5, Sept. 1995.
30. P. Karn and W. Simpson, "Photuris: Session-key management protocol," RFC 2522, Mar. 1999.
31. D. Maughan et al., "Internet security association and key management protocol (ISAKMP)," Internet Draft, IPSEC Working Group, June 1996.
32. R. Jain, The Art of Computer Systems Performance Analysis, New York: John Wiley & Sons Inc., 1991.
33. J. C. Brustoloni and P. Steenkiste, "Application-allocated I/O buffering with system-allocated performance," Technical Report CMU-CS-96-169, Carnegie Mellon Univ., Pittsburgh, PA., Aug. 1996.
34. B. Schwartz et al., "Smart packets for active networks," Jan. 1998. Available at http://www.net-tech.bbn.com/smtpkts/smartpkts-index.html.
35. A. W. Appel, "Garbage collection can be faster than stack allocation," Information Processing Lett., vol. 25, pp. 275-279. June 1987.
36. H. G. Baker, "List processing in real-time on a serial computer," Commun. ACM, vol. 21, no. 4, pp. 280-94, 1978.
37. S. M. Nettles and J. W. O'Toole, "Real-time replication garbage collection," SIGPLAN Symposium on Programming Language Design and Implementation, pp. 217-226, ACM, June 1993.
38. J. O'Toole and S. Nettles, "Concurrent replicating garbage collection," ACM Symposium on LISP and Functional Programming, ACM Press, June 1994.
39. M. Shaw, An Architecture for an Active Network Node, Master's thesis, Pennsylvania Univ., Philadelphia, Dec. 1998.
40. L. Lehman, S. J. Garland, and D. L. Tennenhouse, "Active reliable multicast," in Proc. IEEE INFOCOM'98, Mar. 1998.
41. D. L. Tennenhouse et al., "A survey of active network research," IEEE Commun. Mag., pp. 80-86, Jan. 1997.
42. J. M. Smith et al., "Activating networks: A progress report," IEEE Computer, vol. 32, pp. 32-41, Apr. 1999.
43. R. D. Sansom, D. P. Julin, and R. F. Rashid, "Extending a capability based system into a network environment," in Proc. ACM SIGCOMM, Aug. 1986.
44. D. Wetherall, "Active network vision and reality: Lessons from a capsule-based system," in Proc. 17th ACM Symposium on Operating Systems Principles (SOSP'99), vol. 33, Dec. 1999.