The Multilayer Firewall

Proceedings of the Symposium on Network and Distributed System Security, NDSS 1998

Volumn , Issue , 1998, Pages

  Nessett, Dan ^a   Humenn, Polar ^b  

^a 3COM Corporation   (United States)

^b SYRACUSE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SYSTEM FIREWALLS; NETWORK SECURITY;

PROTECTED COMMUNICATIONS; SECURITY TECHNOLOGY;

MULTILAYERS;

EID: 33644494023     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (36)

1. Computer Science Institute, "1997 Computer Crime and Security Survey," Computer Security Institute, 600 Harrison Street, San Francisco, CA 94107.
2. J. Heffeman and D. T. Swartwood, Trends in Intellectual Property Loss Survey, American Society for Industrial Security, March 1996.
3. William R. Cheswick and Steven M. Bellovin, Firewalls and Internet Security, Addison-Wesley, Reading, Massachusetts, 1994.
4. D. Brent Chapman and Elizabeth D. Zwicky, Building Internet Firewalls, O'Reilly and Associates, Sebastopol, CA, 1995.
5. Fisher, Susan E., "VPNs use tunneling to build private business links," Datamation, Vol 41, No. 23, June 1, 1996.
6. Kory Hamzeh, Tim Kolar, Morgan Littlewood, Gurdeep Singh Pall, Jeff Taarud, Andrew J. Valencia, William Verthein, "Layer Two Tunneling Protocol 'L2TP'," IETF work in progress.
7. R. Atkinson, "Security Architecture for the Internet Protocol," Internet RFC 1825, August, 1995.
8. R. Atkinson, "IP Authentication Header," Internet RFC 1826, August, 1995.
9. R. Atkinson, "IP Encapsulating Security Payload (ESP)," Internet RFC 1827, August, 1995.
10. S.L Murphy and M.R. Badger, "Digital signature protection of the OSPF routing protocol," ISOC Symposium on Network and Distributed System Security, San Diego, CA., 1996, pp. 93-102.
11. Bradley R. Smith, Shree Murthy and JJ. Garcia-Luna-Aceves, "Securing distance-vector routing protocols," ISOC Symposium on Network and Distributed System Security, San Diego, CA., 1997, pp. 85-92.
12. Karen E. Sirois and Stephen T. Kent, "Securing the nimrod routing architecture," ISOC Symposium on Network and Distributed System Security, San Diego, CA., 1997, pp. 74-84.
13. Germano Caronni, Hannes Lubich, Ashar Aziz, Tom Markson, Rich Skrenta, "SKIP - securing the internet," Proceedings of the fifth workshop on enabling technologies, (WET ICE '96), IEEE Computer Society Press, 1996.
14. SDNS Secure Data Network System, Security Protocol 3, SP3, Document SDN.301, Revision 1.5, 15 May 1989, as published in NIST Publication NIST-IR-90-4250, February 1990
15. ISO/IEC JTC1/SC6, Network Layer Security Protocol, ISO-IEC DIS 11577, International Standards Organisation, Geneva, Switzerland, 29 November, 1992.
16. J. Kohl and C. Neuman, "The Kerberos Network Authentication Service (V5)," Internet RFC 1510, September, 1993.
17. Brad Curtis Johnson, "A distributed computing environment framework: an OSF perspective," Open Group Technical Paper DEV-DCE-TP6-1, June 10, 1991.
18. Alan O. Freier, Philip Karlton, Paul C. Kocher, "The SSL Protocol, Version 3.0," IETF work in progress.
19. Object Mangement Group, "CORBA Security," OMG Document Number 95-12-1, Dec., 1995, Object Management Group, 492 Old Connecticut Park, Framingham, MA 01701.
20. Comments seen on the IPSEC Working Group mailing list (ipsec@tis.com), 1997.
21. Checkpoint Software Technologies, Ltd., "Firewall-1 Architecture and Administration, Version 2.1," Checkpoint Software Technologies, Ltd., 400 Seaport Court, Suite 105, Redwood City, CA 94063.
22. B. Hartman, D. Nessett, and N. Yialelis, “Scalability of security in distributed object systems: panel session,” ISOC Symposium on Network and Distributed System Security San Diego, 1996, CA., pp. 40-41.
23. Institute of Electrical and Electronics Engineers, “Standard 802.10-1992, Interoperable LAN/MAN Security (SILS),” IEEE, Inc., 345 East 47th St., New York, NY 10017.
24. A. Bierman and K. McCloghrie, “Physical Topology MIB and Discovery Protocol Proposal,” IETF work in progress.
25. D. Brent Chapman, "Network (in)security through IP packet filtering," In Proceedings Third Usenix UNIX Security Symposium, pp. 63-76, Baltimore, MD, Sept., 1992.
26. Steffen Stempel, “IpAcess – an internet service access system for firewall installations,” Proceedings 1995 Symposium on Network and Distributed System Security, San Diego, CA., pp. 31–41.
27. William J. Wied, “Trusted to untrusted network connectivity,” Proceedings 1994 Symposium on Network and Distributed System Security, San Diego, CA, pp. 89–98.
28. J.D. Guttman, “Filtering Postures: Local Enforcement for Global Policies,” Proceedings of the 1997 IEEE Symposium on Security and Privacy, Oakland, CA., pp. 120-129.
29. K. Marzullo, R. Cooper, M. Wood, and K. Birman, “Tools for Distributed Application Management,” IEEE Computer, August, 1991, pp. 42–51.
30. M. Blaze, J. Feigenbaum, and L. Lacy, “Decentralized Trust Management,” IEEE Symposium on Security and Privacy, Oakland, CA., May, 1996.
31. C. Weissman, “BLACKER: Security for the DDN, Examples of A1 Security Engineering Trades,” IEEE Symposium on Security and Privacy, May, 1992, pp. 286-292.
32. D. Harkins, D. Carrel, “The resolution of ISAKMP with Oakley,” version 2, IETF work in progress
33. D. Maughhan, M. Schertler, M. Schneider, and J. Turner, "Internet Security Association and Key Management Protocol (ISAKMP)", version 6, IETF work in progress
34. H. Orman, "The Oakley Key Determination Protocol", version 1, IETF work in progress.
35. D. Clark, “Policy routing in internetworks,” Internetworking: Research and Experience, Vol 1., No. 1, Sept., 1990, John Wiley and Sons, pp. 35–52.
36. D. Nessett and D. Solo, “Policy route certification: requirements and techniques,” Information Security, Proceedings of IFIP TC11, 7th International Conference on Information Security, May, 1991, pp. 87–98.