Practical declarative network management

Computer Communication Review

Volumn , Issue , 2009, Pages 1-10

  Hinrichs, Timothy L ^a   Gude, Natasha S ^b   Casado, Martin ^b   Mitchell, John C ^b   Shenker, Scott ^c  

^a UNIVERSITY OF CHICAGO   (United States)

^b Stanford University   (United States)

^c UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Network; Performance; Policy; Security

Indexed keywords

ADMISSION CONTROL; CONFIGURATION MECHANISMS; ENTERPRISE NETWORKS; NETWORK; POLICY LANGUAGE;

LINGUISTICS;

EID: 77954334002     PISSN: 01464833     EISSN: 01464833     Source Type: Conference Proceeding    
DOI: 10.1145/1592681.1592683     Document Type: Conference Paper

References (20)

1. M. Abadi, M. Burrows, and B. Lampson. A calculus for access control in distributed systems. ACM Transactions on Programming Languages and Systems, 15(4), 1993.
2. Y. Bartal, A. Mayer, K. Nissim, and A. Wool. Firmato: A novel firewall management toolkit. ACM Trans. Comput. Syst., 22:381-420, 2004.
3. A. Barth, J. C. Mitchell, and J. Rosenstein. Conflict and combination in privacy policy languages. In Proc. of the ACM Workshop on Privacy in the Electronic Society, 2004.
4. E. Bertino, S. Jajodia, and P. Samarati. A flexible authorization mechanism for relational data management systems. ACM Transactions on Information Systems, 17(2), 1999.
5. P. A. Bonatti, S. D. di Vimercati, and P. Samarati. A modular approach to composing access control policies. In In ACM CCS, 2000.
6. K. D. Bowers, L. Bauer, D. Garg, F. Pfenning, and M. K. Reiter. Consumable credentials in logic-based access-control systems. In Proc. of the NDSS, 2007.
7. M. Casado, M. J. Freedman, J. Pettit, J. Luo, N. McKeown, and S. Shenker. Ethane: Taking control of the enterprise. In Proc. ACM SIGCOMM Conference, Kyoto, Japan, Aug. 2007.
8. L. Cranor, M. Langheinrich, M. Marchiori, M. Presler-Marshall, and J. Reagle. The platform for privacy preferences 1.0 (P3P1.0) specification, 2002.
9. S. Egelman, L. F. Cranor, and A. Chowdhury. An analysis of p3p-enabled web sites among top-20 search results. In ICEC '06: Proceedings of the 8th international conference on Electronic commerce, New York, NY, USA, 2006.
10. N. Gude, T. Koponen, J. Pettit, B. Pfaff, M. Casado, N. McKeown, and S. Shenker. NOX: Towards and operating system for networks. In ACM SIGCOMM Computer Communication Review, July 2008.
11. J. D. Guttman. Filtering postures: Local enforcement for global policies. In In Proceedings, 1997 IEEE Symposium on Security and Privacy, pages 120-129. IEEE Computer Society Press, 1997.
12. J. Y. Halpern and V. Weissman. Using first-order logic to reason about policies. In Proc. of the IEEE Computer Security Foundations Symposium, 2003.
13. T. Hinrichs, N. Gude, M. Casado, J. Mitchell, and S. Shenker. Expressing and enforcing flow-based network security policies. Technical report, University of Chicago, 2008.
14. S. Ioannidis, A. D. Keromytis, S. M. Bellovin, and J. M. Smith. Implementing a distributed firewall. In ACM Conference on Computer and Communications Security, 2000.
15. S. Jajodia, P. Samarati, and V. S. Subrahmanian. A logical language for expressing authorizations. In Proc. IEEE Symposium on Security and Privacy, 1997.
16. B. Parducci, H. Lockhart, R. Levinson, J. B. Clark, and M. McRae. eXtensible Access Control Markup Language (XACML) specification, 2005.
17. J. Ullman. Principles of Database and Knowledge-Base Systems. 1989.
18. D. Wijesekera and S. Jajodia. Policy algebras for access control - the predicate case. In Proc. ACM CCS, 2001.
19. G. Xie, J. Zhan, D. A. Maltz, H. Zhang, A. Greenberg, and G. Hjalmtysson. Routing design in operational networks: A look from the inside. In Proc. ACM SIGCOMM '04, New York, NY, USA, 2004.
20. L. Yuan and H. Chen. FIREMAN: A toolkit for firewall modeling and analysis. In Proc. of the IEEE Symposium on Security and Privacy, 2006.