Secure overlay networks for federated service provision and management

Computers and Electrical Engineering

Volumn 34, Issue 3, 2008, Pages 173-191

  Martínez Pérez, Gregorio ^a   García Clemente, Félix J ^a   Gil Pérez, Manuel ^a   Gómez Skarmeta, Antonio F ^a  

^a UNIVERSITY OF MURCIA   (Spain)

Author keywords

Cross certification; Federated services; Inter domain security; Policy based management; Secure overlay networks; Service level agreement; Trust establishment and negotiation

Indexed keywords

ALGORITHMS; INFORMATION MANAGEMENT; INFORMATION SERVICES; NETWORK SECURITY;

CROSS-CERTIFICATION; FEDERATED SERVICES; INTER-DOMAIN SECURITY; POLICY-BASED MANAGEMENT; SECURE OVERLAY NETWORKS; SERVICE LEVEL AGREEMENT; TRUST ESTABLISHMENT AND NEGOTIATION;

COMPUTER NETWORKS;

EID: 40849093164     PISSN: 00457906     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.compeleceng.2007.03.001     Document Type: Article

References (40)

1. VPN Workshop initiative. http://www-mice.cs.ucl.ac.uk/multimedia/meetings/vpnworkshop/.
2. Defence R&D Canada. The Dynamic VPN Controller, Secure information sharing in a coalition environment. Technical memorandum. DRDC Ottawa TM 2005-025; 2005. http://www.ottawa.drdc-rddc.gc.ca/html/TM2005-025_e.html.
3. SEINIT (Security Expert INITiative) EU-IST FP6 Project, IST-2002-001929.
4. Lloyd S, Fillingham D, Lampard R, Orlowski S, Weigelt J. CA-CA interoperability. PKI Forum; 2001.
5. Hesse PM, Lemire DP. Managing interoperability in non-hierarchical public key infrastructures. In: Network and distributed system security symposium. Internet Society; 2002.
6. Levi D, Meyer P, Stewart B. Simple network management protocol (SNMP) applications. RFC 3413. IETF; 2002.
7. Durham D, Boyle J, Cohen R, Herzog S, Rajan R, Sastry A. The COPS (Common Open Policy Service) protocol. RFC 2748. IETF; 2000.
8. Kent S, Atkinson R. Security architecture for the internet protocol. RFC 2401. IETF; 1998.
9. Strassner J. Policy-based network management: solutions for the next generation (2003), Morgan Kaufman
10. Martinez Perez G, García Clemente FJ, Gomez Skarmeta AF. Policy-based management of web and information systems security: an emerging technology. In: Web and Information Security. Idea Group Inc.; 2006.
11. Verma D. Service level agreements on IP networks. Proc IEEE 92 9 (2004)
12. The X-Bone System, Information Sciences Institute. University of Southern California. http://www.isi.edu/xbone/.
13. DNS Extensions (dnsext) Working Group. IETF. http://www.ietf.org/html.charters/dnsext-charter.html.
14. UMU-DNSSEC Testbed. http://dnssec.inf.um.es/.
15. Myers M, Ankney R, Malpani A, Galperin S, Adams C. X.509 Internet public key infrastructure online certificate status protocol - OCSP. RFC 2560. IETF; 1999.
16. Freeman T, Housley R, Malpani A, Cooper D, Polk T. Server-based certificate validation protocol (SCVP). Internet draft. IETF; 2006.
17. Cooper M, Dzambasow Y, Hesse P, Joseph S, Nicholas R. Internet X.509 Public key infrastructure: certification path building. RFC 4158. IETF; 2005.
18. Pinkas D, Housley R. Delegated path validation and delegated path discovery protocol requirements. RFC 3379. IETF; 2002.
19. Mullan S. Java Certification Path API; 2003. http://java.sun.com/j2se/1.5.0/docs/guide/security/certpath/ CertPathProgGuide.html.
20. Elley Y, Hanna S. LibPKIX Library. http://libpkix.sourceforge.net.
21. DigitalNet government solutions, LLC. Certificate management library (CML). http://digitalnet.com/knowledge/cml_home.htm.
22. Adams C, Sylvester P, Zolotarev M, Zuccherato R. Internet X.509 public key infrastructure data validation and certification server protocols. RFC 3029. IETF; 2001.
23. Housley R, Polk W, Ford W, Solo D. Internet X.509 public key infrastructure certificate and certificate revocation list (CRL) profile. RFC 3280. IETF; 2002.
24. Gómez Skarmeta A.F., Martinez Pérez G., Cánovas Reverte O., and López Millán G. PKI Services for IPv6. IEEE Internet Comput 7 3 (2003) 36-42
25. UMU-PKIv6 (University of Murcia public key infrastructure with IPv6 support). http://pki.inf.um.es/.
26. Myers M, Liu X, Schaad J, Weinstein J. Certificate management messages over CMS. RFC 2797. IETF; 2000.
27. UMU-PKIv6 CMC API. http://pki.inf.um.es/CMC/.
28. UMU-PKIv6 SCVP API. http://pki.inf.um.es/SCVP/.
29. CIM Common Information Model. DMTF. http://www.dmtf.org/standards/cim.
30. Session Initiation Protocol (SIP) Working Group. IETF. http://www.ietf.org/html.charters/sip-charter.html.
31. Roach AB. Session initiation protocol (SIP) - specific event notification. RFC 3265. IETF; 2002.
32. Web Service Level Agreement (WSLA) Language Specification version 1.0; IBM Corporation; 2003.
33. Andrieux A, Czajkowski K, Dan A, Keahey K, Ludwig H, Pruyne J, et al. Web Services agreement specification (WS-Agreement), version 2005/09. Global Grid Forum; 2005.
34. UMU-PBNM (University of Murcia Policy-Based Network Management) system. http://pbnm.inf.um.es/.
35. Martínez Pérez G., and Gómez Skarmeta A.F. Policy-based dynamic provision of IP services in a VPN coalition scenario. IEEE Commun Mag 47 11 (2004) 118-124
36. Keromytis AD, Misra V, Rubenstein D. SOS: An Architecture For Mitigating DDoS Attacks. IEEE Journal on Selected Areas in Communications (JSAC); special issue on Recent Advances in Service Overlay Networks 2004;22(1); 176-188.
37. Stavrou A, Cook DL, Morein WG, Keromytis AD, Misra V, Rubenstein D. WebSOS: an overlay-based system for protecting web servers from denial of service attacks. J Comput Networks 2005;48(5):781-807 [Special issue on Web and Network Security].
38. POSITIF project framework. http://positif.inf.um.es/.
39. Charlie Kaufman. Internet key exchange (IKEv2) protocol. RFC 4306. IETF; 2005.
40. OpenIKEv2 implementation. http://openikev2.sourceforge.net/.