Capability-based egress network access control by using DNS server

Journal of Network and Computer Applications

Volumn 30, Issue 4, 2007, Pages 1275-1282

  Suzuki, Shinichi ^a   Shinjo, Yasushi ^a   Hirotsu, Toshio ^b   Itano, Kozo ^a   Kato, Kazuhiko ^a  

^a UNIVERSITY OF TSUKUBA   (Japan)

^b TOYOHASHI UNIVERSITY OF TECHNOLOGY   (Japan)

Author keywords

Access control; Capabilities; DNS; Egress filters; Network security

Indexed keywords

BUFFER STORAGE; NETWORK SECURITY; ROUTERS; SERVERS;

DNS; EGRESS FILTERS;

ACCESS CONTROL;

EID: 34547890289     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2006.09.009     Document Type: Article

References (14)

1. Aladdin Knowledge Systems. eSafe 4 implementation guide, 〈http://www.eAladdin.com/〉.
2. Andreasson O. Iptables Tutorial 1.1.19. 〈http://www.netfilter.org/〉.
3. Cisco Systems Inc. Service selection gateway, 2002.
4. Internet System Consortium. BIND 9. 〈http://www.isc.org/〉.
5. Leech M. Username/password authentication for SOCKS V5, RFC1929, 1996.
6. Leech M, Ganis M, Lee Y, Kuris R, Koblas D, Jones L. SOCKS protocol version 5, RFC1928, 1996.
7. Mullender S.J., van Rossum G., Tanenbaum A.S., van Renesse R., and van Staveren H. Amoeba-a distributed operating system for the 1990s. IEEE Computer 23 (1990) 44-53
8. OpenBSD, OpenSSH. 〈http://www.openssh.com/〉.
9. Resnick P., and Miller J. PICS: internet access controls without censorship. Communications of the ACM 39 10 (1996) 87-93
10. Suzuki, S, Shinjo, Y., Hirotsu, T., Itano, K., Kato, K. Capability-based egress network access control for transferring access rights. In: Third international conference on information technology and applications (ICITA'2005), vol. 2, 2005. p. 488-95.
11. Symantec Corporation. Symantec gateway security 5400 series reference guide. 〈http://www.symantec.com/〉.
12. Vixie P, Gudmundsson O, Eastlake D, Wellington B. Secret key transaction authentication for DNS (TSIG), RFC2845, 2000.
13. Watanabe Y., Watanabe K., Eto H., and Tadaki S. A user authentication gateway system with simple user interface, low administration cost and wide applicability. IPSJ Journal 42 12 (2001) 2802-2809
14. Zorn N. Authentication gateway howto. 〈http://www.itlab.musc.edu/∼nathan/authentication_gateway/〉.