Design and implementation of cross-domain cooperative firewall

Proceedings - International Conference on Network Protocols, ICNP

Volumn , Issue , 2007, Pages 284-293

  Cheng, Jerry ^a   Yang, Hao ^b   Wong, Starsky H Y ^a   Zerfos, Petros ^c   Lu, Songwu ^a  

^a University of California   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

^c DEUTSCHE TELEKOM LABORATORIES   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SYSTEM FIREWALLS; INTERNET; INTERNET PROTOCOLS; LAWS AND LEGISLATION; LEAD; NETWORK PROTOCOLS; PERSONAL COMMUNICATION SYSTEMS; TUNNELS; WI-FI;

ADMINISTRATIVE DOMAINS; COLLABORATIVE NETWORKS; CROSS DOMAIN; CURRENT PRACTICES; ENCRYPTED TUNNELS; FIREWALL RULES; FOREIGN NETWORKS; HOME NETWORKS; INTERNATIONAL CONFERENCES; NETWORK DOMAINS; PRIVACY CONCERNS; ROAMING USERS; SECURITY AND PRIVACY; TRAFFIC FLOWING; VARIOUS ATTACKS; VIRTUAL PRIVATE NETWORKS (VPNS); VPN SERVER;

PUBLIC KEY CRYPTOGRAPHY;

EID: 48349089344     PISSN: 10921648     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICNP.2007.4375859     Document Type: Conference Paper

References (26)

1. A. Yao, "Protocols for secure computations," in Proc. FOCS, 1982.
2. D. Agrawal and C. Aggarwal, "On the design and quantification of privacy preserving data mining algorithms," in Proc. PODS, 2001.
3. R. Agrawal, A. Evfimievski, and R. Srikant, "Information sharing across private databases," in Proc. SIGMOD, 2003.
4. B. Gleeson, et. al, "A framework for IP based virtual private networks," February 2000, RFC 2764.
5. M. Bawa, R. Bayardo, and R. Agrawal, "Privacy-preserving indexing of documents on the network," in Proc. VLDB, 2003.
6. C. Cachin, "Efficient private bidding and auctions with an oblivious third party," in Proc. ACM CCS, 1999.
7. Cisco VPN Concentrator, http://www.cisco.com/en/US/products/hw/ vpndevc/ps2284/.
8. W. Diffie and M. Hellman, "New directions in cryptography," IEEE Trans. on Information Theory, vol. 22, no. 6, pp. 644-654, November 1976.
9. M. Fischlin, "A cost-effective pay-per-multiplication comparison method for millionaires," in Proc. Conference on Topics in Cryptology (CT-RSA), 2001.
10. G. Montenegro and V. Gupta, "Sun's SKIP Firewall Traversal for Mobile IP," RFC 2356, 1998.
11. Y. Gertner, Y. Ishai, E. Kushilevitz, and T. Malkin, "Protecting data privacy in private information retrieval schemes," in STOC '98, 1998, pp. 151-160. [Online]. Available: citeseer.ist.psu.edu/579393.html
12. GNU Multiple Precision Arithmetic Library, http:llwww.swox.com/gmp/.
13. M. G. Gouda and A. X. Liu, "A model of stateful firewalls and its properties," in Proceedings of the IEEE International Conference on Dependable Systems and Networks (DSN), June 2005, pp. 320-327. [Online]. Available: http://www.cse.msu.edu/~alexliu/publications/Stateful/stateful.pdf
14. P. Gupta and N. McKeown, "Algorithms for packet classification, " IEEE Network, vol. 15, no. 2, pp. 24-32, 2001.
15. B. Hore, S. Mehrotra, and G. Tsudik, "A privacy-preserving index for range queries," in Proc. VLDB, 2004.
16. Interface Masters: Niagara 2100B, http://www.interfacemasters.com/ products/nic/niagara2100b/.
17. S. Ioannidis, A. Keromytis, S. Bellovin, and J. Smith, "Implementing a distributed firewall," in Proc. ACM CCS, 2000.
18. J. Lee, J. Jeon, and K. Yoo, "A security scheme for protecting security policies in firewall," SIGOPS Operating System Review, vol. 38, no. 2, pp. 69-72, 2004.
19. G. Liang, "Privacy-preserving inter-database operations." [Online]. Available: citeseer.ist.psu.edu/660634.html
20. OpenVPN, http://openvpn.net/.
21. S. Pohlig and M. Hellman, "An improved algorithm for computing logarithms over GF(p) and its cryptographic significance," IEEE Transactions on Information Theory, vol. IT-24, pp. 106-110, 1978.
22. E. Shaer and H. Hamed, "Firewall policy advisor for anomaly detection and rule editing," in Proc. Integrated Management (IM), 2003.
23. E. Shaer and H. Hamed, "Discovery of policy anomalies in distributed firewalls," in Proc. IEEE INFOCOM, 2004.
24. E. Shaer and H. Hamed, "Modeling and management of firewall policies," IEEE Trans. Network and Service Management, vol. 1, no. 1, April 2004.
25. P. van Oorschot and M. Wiener, "On Diffie-Hellman key agreement with short exponents," in Proc. Eurocrypt, 1996.
26. A. Wool, "A quantitative study of firewall configuration errors," Computer, vol. 37, no. 6, pp. 62-67, 2004.