Trust Management for IPsec

Proceedings of the Symposium on Network and Distributed System Security, NDSS 2001

Volumn , Issue , 2001, Pages

  Blaze, Matt ^a   Ioannidis, John ^a   Keromytis, Angelos D ^b  

^a AT AND T LABS RESEARCH   (United States)

^b UNIVERSITY OF PENNSYLVANIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPLIANCE CONTROL; NETWORK SECURITY; SECURITY SYSTEMS;

COMPLIANCE CHECKS; INTERNET TRAFFIC; IPSEC PROTOCOL; MANAGEMENT SCHEME; PACKET FILTERS; POLICY MANAGEMENT; POLICY-BASED; SECURITY ASSOCIATION; SECURITY POLICY; TRUST MANAGEMENT;

NETWORK LAYERS;

EID: 35248875420     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. C. Alaettinoglu, T. Bates, E. Gerich, D. Karrenberg, D. Meyer, M. Terpstra, and C. Villamizer. Routing Policy Specification Language (RPSL). Request for Comments (Proposed Standard) 2280, Internet Engineering Task Force, January 1998.
2. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. D. Keromytis. The KeyNote Trust Management System Version 2. Internet RFC 2704, September 1999.
3. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized Trust Management. In Proc. of the 17th Symposium on Security and Privacy, pages 164–173. IEEE Computer Society Press, Los Alamitos, 1996.
4. M. Blaze, J. Ioannidis, and A. Keromytis. Trust Management and Network Layer Security Protocols. In Proceedings of the 1999 Cambridge Security Protocols International Workshop, 1999.
5. J. Boyle, R. Cohen, D. Durham, S. Herzog, R. Rajan, and A. Sastry. The COPS (Common Open Policy Service) Protocol. Request for comments (proposed standard), Internet Engineering Task Force, January 2000.
6. R. Braden, L. Zhang, S. Berson, S. Herzog, and S. Jamin. Resource ReSerVation Protocol (RSVP) – Version 1 Functional Specification. Internet RFC 2208, 1997.
7. P. Calhoun, A. Rubens, H. Akhtar, and E. Guttman. DIAMETER Base Protocol. Internet Draft, Internet Engineering Task Force, Dec. 1999. Work in progress.
8. CCITT. X.509: The Directory Authentication Framework. International Telecommunications Union, Geneva, 1989.
9. M. Condell, C. Lynn, and J. Zao. Security Policy Specification Language. Internet draft, Internet Engineering Task Force, July 1999.
10. N. Hallqvist and A. D. Keromytis. Implementing Internet Key Exchange (IKE). In Proceedings of the Annual USENIX Technical Conference, Freenix Track, pages 201–214, June 2000.
11. D. Harkins and D. Carrel. The Internet Key Exchange (IKE). Request for Comments (Proposed Standard) 2409, Internet Engineering Task Force, Nov. 1998.
12. J. Ioannidis and M. Blaze. The Architecture and Implementation of Network-Layer Security Under Unix. In Fourth Usenix Security Symposium Proceedings. USENIX, October 1993.
13. S. Ioannidis, A. Keromytis, S. Bellovin, and J. Smith. Implementing a Distributed Firewall. In Proceedings of Computer and Communications Security (CCS) 2000, November 2000.
14. S. Kent and R. Atkinson. IP Encapsulating Security Payload (ESP). Request for Comments (Proposed Standard) 2406, Internet Engineering Task Force, Nov. 1998.
15. S. Kent and R. Atkinson. Security Architecture for the Internet Protocol. Request for Comments (Proposed Standard) 2401, Internet Engineering Task Force, Nov. 1998.
16. A. D. Keromytis, J. Ioannidis, and J. M. Smith. Implementing IPsec. In Proceedings of Global Internet (GlobeCom) ’97, pages 1948 – 1952, November 1997.
17. S. McCanne and V. Jacobson. A BSD Packet Filter: A New Architecture for User-level Packet Capture. In Proceedings of USENIX Winter Technical Conference, pages 259–269, San Diego, California, Jan. 1993. Usenix.
18. R. Needham and M. Schroeder. Using Encryption for Authentication in Large Networks of Computers. Communications of the ACM, 21(12):993–998, December 1978.
19. C. Rigney, A. Rubens, W. Simpson, and S. Willens. Remote Authentication Dial In User Service (RADIUS). Request for Comments (Proposed Standard) 2138, Internet Engineering Task Force, Apr. 1997.
20. L. Sanchez and M. Condell. Security Policy System. Internet draft, work in progress, Internet Engineering Task Force, November 1998.
21. T. Ylonen, T. Kivinen, M. Saarinen, T. Rinne, and S. Lehtinen. SSH Protocol Architecture. Internet Draft, Internet Engineering Task Force, Feb. 1999. Work in progress.