Design and implementation of virtual private services

Proceedings of the Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises, WETICE

Volumn 2003-January, Issue , 2003, Pages 269-274

  Ioannidis, S ^a   Bellovin, S M ^b   Ioannidis, J ^b   Keromytis, A D ^c   Smith, J M ^a  

^a UNIVERSITY OF PENNSYLVANIA   (United States)

^b AT AND T LABS RESEARCH   (United States)

^c Och Spine at New York Presbyterian Hospitals   (United States)

Author keywords

Access control; Application software; Credit cards; Electronic commerce; File servers; Large scale systems; Privacy; Security; Transaction databases; Web server

Indexed keywords

ACCESS CONTROL; APPLICATION PROGRAMS; COMMERCE; COMPLEX NETWORKS; DATA PRIVACY; ELECTRONIC COMMERCE; ELECTRONIC DOCUMENT EXCHANGE; LARGE SCALE SYSTEMS; SECURITY SYSTEMS;

CREDIT CARDS; FILE SERVERS; SECURITY; TRANSACTION DATABASE; WEB SERVERS;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 4544378423     PISSN: 15244547     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ENABL.2003.1231419     Document Type: Conference Paper

References (21)

1. A. Acharya and M. Raje. Mapbox: Using parameterized behavior classes to confine applications. In Proceedings of the USENIX Security Symposium, pages 1-17, Denver, CO, August 2000.
2. A. Alexandrov, P. Kmiec, and K. Schauser. Consh: A confined execution environment for internet computations, December 1998.
3. Y. Bartal, A. Mayer, K. Nissim, and A. Wool. Firmato: A novel firewall management toolkit. In Proc. IEEE Computer Society Symposium on Security and Privacy, 1999.
4. S. M. Bellovin. Distributed Firewalls. ;login: magazine, special issue on security, November 1999.
5. A. Berman, V. Bourassa, and E. Selberg. TRON: Process-Specific File Protection for the UNIX Operating System. In Proceedings of the USENIX 1995 Technical Conference, New Orleans, Louisiana, January 1995.
6. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. D. Keromytis. The KeyNote Trust Management System Version 2. RFC 2704, September 1999.
7. W. R. Cheswick and S. M. Bellovin. Firewalls and Internet Security: Repelling the Wily Hacker. Addison-Wesley, 1994.
8. C. Cowan, S. Beattie, C. Pu, P. Wagle, and V. Gligor. SubDomain: Parsimonious Security for Server Appliances. In Proceedings of the 14th USENIX System Administration Conference (LISA 2000), Mar. 2000.
9. H. Custer. Inside Windows NT. Microsoft Press, 1993.
10. I. Goldberg, D. Wagner, R. Thomas, and E. A. Brewer. A Secure Environment for Untrusted Helper Applications. In Procedings of the 1996 USENIX Annual Technical Conference, 1996.
11. N. Hardy. The KeyKOS architecture. In Operating Systems Review, pages 8-25, October 1985.
12. J. D. Howard. An Analysis Of Security On The Internet 1989-1995. PhD thesis, Carnegie Mellon University, April 1997.
13. S. Ioannidis, A. Keromytis, S. Bellovin, and J. Smith. Implementing a Distributed Firewall. In Proceedings of Computer and Communications Security (CCS), pages 190-199, November 2000.
14. A. D. Keromytis, S. Ioannidis, M. B. Greenwald, and J. M. Smith. The STRONGMAN Architecture. In DARPA Information Survivability Conference and Exposition (DISCEX III), pages 178-188. IEEE Computer Society Press, April 2003.
15. A. Koenig. Automatic software distribution. In USENIX Conference Proceedings, pages 312-322, Salt Lake City, UT, Summer 1984.
16. R. Levin, E. Cohen, W. Corwin, and W. Wulf. Policy/mechanism separation in hydra. In Proceedings of the 5th ACM Symposium on Operating Systems Principles, pages 132-140, November 1975.
17. I. Lueck, C. Schaefer, and H. Krumm. Model-Based Toll-Assistance for Packet-Filter Design. In Proceedings of the IEEE Workshop on Policy: Policies for Distributed Systems and Networks, pages 120-136, 2001.
18. I. Lueck, S. Voegel, and H. Krumm. Model-based configuration of VPNs. In Proceedings of the 8th IEEE/IFIP Network Operations and Management Symposium (NOMS), pages 589-602, 2002.
19. J. S. Shapiro, J. M. Smith, and D. J. Farber. EROS: a fast capability system. In Proceedings of the 17th ACM Symposium on Operating Systems Principles, pages 170-185, 1999.
20. R. Spencer, S. Smalley, P. Loscocco, M. Hibler, D. Anderson, and J. Lepreau. The flask security architecture: System support for diverse security policies. In Proceedings of the USENIX Security Symposium, pages 123-139, Denver, CO, August 2000.
21. A. Wool. Architecting the Lumeta Firewall Analyzer. In Proceedings of the 10th USENIX Security Symposium, pages 85-97, August 2001.