A mobile-agent based distributed dynamic μfirewall architecture

Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS

Volumn 2002-January, Issue , 2002, Pages 431-436

  Xian, Feng ^a   Jin, Hai ^a   Liu, Ke ^a   Han, Zongfen ^a  

^a HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

Author keywords

Computer architecture; Filters; Internet; Intrusion detection; Mobile agents; Mobile computing; Network topology; Protection; Scalability; Web server

Indexed keywords

COMPUTER ARCHITECTURE; FILTERS (FOR FLUIDS); INTERNET; INTRUSION DETECTION; MEMORY ARCHITECTURE; MERCURY (METAL); MOBILE COMPUTING; NETWORK ARCHITECTURE; NETWORK SECURITY; SCALABILITY; SECURITY SYSTEMS; TOPOLOGY;

DISTRIBUTED DYNAMICS; DISTRIBUTED INTRUSION DETECTION; DISTRIBUTED SECURITY; NETWORK TOPOLOGY; PROTECTION; SECURITY CHALLENGES; TOPOLOGY-INDEPENDENT; WEB SERVERS;

MOBILE AGENTS;

EID: 3543075969     PISSN: 15219097     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICPADS.2002.1183435     Document Type: Conference Paper

References (15)

1. E. Amoroso, Intrusion Detection: An Introduction to Internet Surveillance, Correlation, Traps, Trace Back, and Response, Intrusion. Net Books, 1999.
2. L. Badger, D. F. Sterne, D. L. Sherman, and K. M. Walker, "A Domain and Type Enforcement UNIX Prototype", USENIX Computing Systems, Vol. 9, Cambridge, Massachusetts, 1996.
3. Y. Bartal, A. Mayer, K. Nissim, and A. Wool, "Firmato: a novel firewall management toolkit", Proceedings of IEEE Symposium on Security and Privacy, pp. 17-31, 1999.
4. S. M. Bellovin, "Distributed Firewalls", login:, November 1999, pp. 37-39.
5. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. D. Keromytis, "The role of trust management in distributed systems security", Secure Internet Programming, pp. 185-210.
6. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. D. Keromytis, The KeyNote trust management system, version 2Internet RFC 2704Sept. 1999.
7. D. Chess, "Security Issues in Mobile Code Systems", Mobile Agent Security, Lecture Notes in Computer Science, Vol. 1419, 1998, Springer, pp. 1-14
8. D. Chess, B. Grosof, C. Harrison, D. Levine, C. Parris, G. Tsudik, "Itinerant Agents for Mobile Computing", IEEE Personal Communications Magazine, October 1995.
9. J. Chinits and S. Sonnenberg, "A Transparent Security Framework for TCP/IP and Legacy Applications", Technical Report, Intellisoft Corp, August 1998.
10. D. Clarke, J. E. Elien, C. Ellison, M. Fredette, A. Morcos, and R. L. Rivest, "Certificate Chain Discovery in SPKI/SDSI", Technical Report, Computer Science Dept, MIT, November 1999.
11. W. Farmer, J. Guttman, and V. Swarup, "Security for Mobile Agents: Issues and Requirements", Proceedings of the 19th National Information Systems Security Conference, Baltimore, MD, October 1996, pp. 591-597.
12. D. Friedman and D. Nagle, "Building Firewalls with Intelligent Network Interface Cards", Technical Report, Dept. Electrical & Computer Engineering School of Computer Science, Carnegie Mellon University, May 2001.
13. K. Hwang and M. Gangadhran, "Micro-Firewalls for Dynamic Network Security with Distributed Intrusion Detection", Proceedings of IEEE Int'l Symposium on Network Computing and Applications, June 20, 2001.
14. S. Ioannidis, A. D. Keromytis, S. M. Bellovin, J. M. Smith, "Implementing a Distributed Firewall", Proceedings of 7th ACM conference on Computer and Communication Security, Nov. 2000, Athens, Greece.
15. T. Markham and C. Payne, "Security at the Network Edge: A Distributed Firewall Architecture", Proceedings of DARPA Information Survivability Conference & Exposition II, (DISCEX'01), Vol. 1, 2001, pp. 279-286.