Application-layer based centralized information access control for VPN

Journal of Zhejiang University: Science

Volumn 7, Issue 2, 2006, Pages 240-249

  Ouyang, Kai ^a   Zhou, Jing Li ^a   Xia, Tao ^a   Yu, Sheng Sheng ^a  

^a HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

Author keywords

Access control; Centralized management; Stream; Tunneling; Virtual private network

Indexed keywords

CONTROL THEORY; INFORMATION SERVICES; INFORMATION TECHNOLOGY; NETWORK PROTOCOLS; SECURITY OF DATA;

ABSTRACT ACCESS CONTROL MECHANISM; ACCESS CONTROL; APPLICATION LAYER BASED CENTRALIZED INFORMATION ACCESS CONTROL (ACIAC); CENTRALIZED MANAGEMENT; SECURITY PROTOCOLS; STREAM; TUNNELING; TUNNELING TECHNIQUE; VIRTUAL PRIVATE NETWORK (VPN);

TELECOMMUNICATION TRAFFIC;

EID: 33645650470     PISSN: 10093095     EISSN: None     Source Type: Journal    
DOI: 10.1631/jzus.2006.A0240     Document Type: Article

References (18)

1. Bertino, E., Catania, B., Ferrari, E., Perlasca, P., 2002. A System to Specify and Manage Multipolicy Access Control Models. Policies for Distributed Systems and Networks, p.116-127.
2. Cohen, R., 2003. On the establishment of an access VPN in broadband access networks. Communications Magazine, IEEE, 41(2):156-163.
3. Dierks, T., Allen, C., 1999. The TLS Protocol Version 1.0. RFC2246.
4. Ferraiolo, D., Sandhu, R., Gavrila, S., Kuhn, D., Chandramouli, R., 2001. Proposed NIST standard for role-based access control. ACM Trans. Inform. and System Security, 4(3):224-274. [doi: 10.1145/501978.501980]
5. Guo, X., Yang, K., Galis, A., Cheng, X., Yang B., Liu, D., 2003. A Policy-based Network Management System for IP VPN. Communication Technology Proceedings. ICCT 2003, 2:1630-1633.
6. Jason, J., Rafalow, L., Vyncke, E., 2003. IPSec Configuration Policy Information Model. RFC3585.
7. Kent, S., Atkinson, R., 1998. Security Architecture for the Internet Protocol. RFC2401.
8. Ku, H., Son, H.G., Facsko, J., Tyrrell, J., Haines, A., 2002. Web-based Policy Deployment Management System. Proceedings of Policies for Distributed Systems and Networks, p.240-243.
9. Moffett, M.D., Sloman, M.S., 1991. Content-dependent access control. ACM SIGOPS Operating Systems Review, 25(2):63-70. [doi: 10.1145/122120.122125]
10. Ryutov, T., Neuman, C., Dongho, K., 2003. Integrated access control and intrusion detection for Web servers. IEEE Trans. on Parallel and Distributed Systems, 14(9): 841-850. [doi: 10.1109/TPDS.2003.1233707]
11. Sanchez, L., Condell, M., 2002. Security Policy Specification Language. Internet Draft, http://www.csie.nctu.edu.tw/-jkzao/Publication/draft -ietf-ipsec-spsl-01.pdf.
12. Sandhu, R.S., Coyne, E.J., Feinstein, H., Youman, C., 1996. Role-based access control models. IEEE Computer, 29(2):38-47.
13. Spencer, R., Smalley, S., Loscocco, P., Hibler, M., Andersen, D., Lepreau, J., 1999. The Flask Security Architecture: System Support for Diverse Security Policies. Proceedings of the Eighth Security Symposium, p.123-139.
14. Steinmuller, B., Safarik, J., 2001. Extending Role-based Access Control Model with States. EUROCON'2001, International Conference on Trends in Communications, 2:398-399.
15. Verschuren, J., Govaerts, R., Vandewalle, J., 1992. Simultaneous Enforcement of the Bell-LaPadula and the Biba Security Policy Models in an OSI-distributed System. ICCS/ISITA'92, Singapore, p.257-263.
16. Wang, C., 2000. Policy-based Network Management. Communication Technology Proceedings. ICCT 2000, 1:101-105.
17. Wolf, R., Keinz, T., Schneider, M., 2003. A Model for Content-dependent Access Control for Web-based Services with Role-based Approach. Database and Expert Systems Applications, Proceedings 14th International Workshop, p.209-214.
18. Yague, M.I., Mana, A., Lopez, J., Troya, J.M., 2003. Applying the Semantic Web Layers to Access Control. Proceedings of Database and Expert Systems Applications, p. 622-626.