Rethinking enterprise network control

IEEE/ACM Transactions on Networking

Volumn 17, Issue 4, 2009, Pages 1270-1283

  Casado, Martín ^a   Freedman, Michael J ^b   Pettit, Justin ^a   Luo, Jianying ^a   Gude, Natasha ^a   McKeown, Nick ^a   Shenker, Scott ^c  

^a STANFORD UNIVERSITY   (United States)

^b PRINCETON UNIVERSITY   (United States)

^c UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Architecture; Management; Network; Security

Indexed keywords

CHIP SETS; ENTERPRISE NETWORKS; ETHERNET SWITCHES; FAN-OUT; HARDWARE AND SOFTWARE; NETWORK; SECURITY; SINGLE NETWORKS; SMALL BUSINESS; STANFORD UNIVERSITY; WIRED AND WIRELESS;

ARCHITECTURAL DESIGN; ETHANE; NETWORK SECURITY; WIRELESS NETWORKS;

NETWORK MANAGEMENT;

EID: 69249218972     PISSN: 10636692     EISSN: None     Source Type: Journal    
DOI: 10.1109/TNET.2009.2026415     Document Type: Article

References (27)

1. D. Caldwell, A. Gilbert, J. Gottlieb, A. Greenberg, G. Hjalmtysson, and J. Rexford, "The cutting edge of IP router configuration," Comput. Commun. Rev., vol. 34, no. 1, pp. 21-26, 2004.
2. T. Roscoe, S. Hand, R. Isaacs, R. Mortier, and P. Jardetzky, "Predicate routing: Enabling controlled networking," Comput. Commun. Rev., vol. 33, no. 1, 2003.
3. G. Xie, J. Zhan, D. A. Maltz, H. Zhang, A. Greenberg, and G. Hjalmtysson, "Routing design in operational networks: A look from the inside," in Proc. SIGCOMM, Sep. 2004, pp. 27-40.
4. A. Wool, "The use and usability of direction-based filtering in firewalls," Comput. Security, vol. 26, no. 6, pp. 459-468, 2004.
5. A. Wool, "A quantitative study of firewall configuration errors," Computer, vol. 37, no. 6, pp. 62-67, 2004.
6. Z. Kerravala, "Configuration management delivers business resiliency," The Yankee Group, Nov. 2002.
7. "Alterpoint," [Online]. Available: http://www.alterpoint.com/
8. D. Caldwell, A. Gilbert, J. Gottlieb, A. Greenberg, G. Hjalmtysson, and J. Rexford, "The cutting edge of IP router configuration," Comput. Commun. Rev., vol. 34, no. 1, pp. 21-26, 2004.
9. A. Greenberg, G. Hjalmtysson, D. A. Maltz, A. Myers, J. Rexford, G. Xie, H. Yan, J. Zhan, and H. Zhang, "A clean slate 4D approach to network control and management," Comput. Commun. Rev., vol. 35, no. 5, pp. 41-54, Oct. 2005.
10. M. Casado, T. Garfinkel, A. Akella, M. J. Freedman, D. Boneh, N. McKeown, and S. Shenker, "ZANE: A protection architecture for enterprise networks," in Proc. USENIX Security Symp., Aug. 2006, vol. 15, Article No. 10.
11. T. Hinrichs, N. Gude, M. Casado, J. Mitchell, and S. Shenker, "Practical declarative network management," presented at the ACM Workshop: Res. Enterprise Netw., 2009.
12. C. Demetrescu and G. Italiano, "A new approach to dynamic all pairs shortest paths," in Proc. STOC, 2003, pp. 159-166.
13. L. Lamport, "The part-time parliament," Trans. Comput. Syst., vol. 16, no. 2, pp. 133-169, May 1998.
14. "NetFPGA," [Online]. Available: http://NetFPGA.org
15. "OpenWRT," [Online]. Available: http://openwrt.org/
16. "BerkeleyDB," [Online]. Available: http://www.oracle.com/database/berkeley-db.html
17. A. Z. Broder and M. Mitzenmacher, "Using multiple hash functions to improve IP lookups," in Proc. IEEE INFOCOM, Apr. 2001, pp. 1454-1463.
18. R. J. Perlman, "Rbridges: Transparent routing," in Proc. INFOCOM Mar. 2004, pp. 1211-1218.
19. A. Myers, E. Ng, and H. Zhang, "Rethinking the service model: Scaling Ethernet to a million nodes," presented at the HotNets, Nov. 2004.
20. J. Rexford, A. Greenberg, G. Hjalmtysson, D. A. Maltz, A. Myers, G. Xie, J. Zhan, and H. Zhang, "Network-wide decision making: Toward a wafer-thin control plane," presented at the HotNets, Nov. 2004.
21. P. Newman, T. L. Lyon, and G. Minshall, "Flow labelled IP: A connectionless approach to ATM," in Proc. INFOCOM, 1996, vol. 3, pp. 1251-1260.
22. S. Ioannidis, A. D. Keromytis, S. M. Bellovin, and J. M. Smith, "Implementing a distributed firewall," in Proc. ACM Conf. Comput. Commun. Security, 2000, pp. 190-199.
23. M. Casado, M. J. Freedman, J. Pettit, J. Luo, N. McKeown, and S. Shenker, "Ethane: Taking control of the enterprise," in Proc. SIGCOMM, Kyoto, Japan, Aug. 2007, pp. 1-12.
24. "Microsoft Network Access Protection," [Online]. Available: http://www.microsoft.com/technet/network/nap/default.mspx
25. "Cisco Network Admission Control," [Online]. Available: http://www.cisco.com/
26. "Consentry," [Online]. Available: http://www.consentry.com/
27. "Identity Engines," [Online]. Available: http:// www.idengines.com/