Delegating network security with more information

Computer Communication Review

Volumn , Issue , 2009, Pages 19-26

  Naous, Jad ^a   Stutsman, Ryan ^a   Mazières, David ^a   McKeown, Nick ^a   Zeldovich, Nickolai ^b  

^a STANFORD UNIVERSITY   (United States)

^b MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

Firewall; Ident; Management; Network security; Policy

Indexed keywords

CENTRALIZED CONTROL; IN-NETWORK; MANAGEMENT NETWORKS; NETWORK ADMINISTRATION; SECURITY ENFORCEMENT; SECURITY POLICY; SIMPLE PROTOCOL;

NETWORK PROTOCOLS;

NETWORK SECURITY;

EID: 77954334703     PISSN: 01464833     EISSN: 01464833     Source Type: Conference Proceeding    
DOI: 10.1145/1592681.1592685     Document Type: Conference Paper

References (15)

1. Aruba networks. http://www.arubanetworks.com. Last accessed on 3/18/2009.
2. PF: The OpenBSD Packet Filter, Jan. 2008. http://www.openbsd.org/faq/pf/.
3. Virus alert about the win32/conficker.b worm. http://support.microsoft. com/kb/962007, Mar. 2009.
4. J. P. Anderson. A unification of computer and network security concepts. In Proceedings of the IEEE Symposium on Security and Privacy, pages 77-87, Oakland, CA, 1985.
5. M. Casado, M. J. Freedman, J. Pettit, J. Luo, N. McKeown, and S. Shenker. Ethane: taking control of the enterprise. ACM SIGCOMM Computer Communications Review (CCR), 37(4):1-12, 2007.
6. M. Casado, T. Garfinkel, A. Akella, M. J. Freedman, D. Boneh, N. McKeown, and S. Shenker. SANE: a protection architecture for enterprise networks. In USENIX-SS'06: Proceedings of the 15th conference on USENIX Security Symposium, Berkeley, CA, USA, 2006. USENIX Association.
7. D. Estrin. Non-discretionary controls for inter-organization networks. In Proceedings of the IEEE Symposium on Security and Privacy, pages 56-61, Oakland, CA, 1985.
8. A. Greenberg, G. Hjalmtysson, D. A. Maltz, A. Myers, J. Rexford, G. Xie, H. Yan, J. Zhan, and H. Zhang. A clean slate 4d approach to network control and management. ACM SIGCOMM Computer Communications Review (CCR), 35(5):41-54, 2005.
9. S. Ioannidis, A. D. Keromytis, S. M. Bellovin, and J. M. Smith. Implementing a distributed firewall. In CCS '00: Proceedings of the 7th ACM conference on Computer and communications security, pages 190-199, New York, NY, USA, 2000. ACM.
10. D. A. Joseph, A. Tavakoli, and I. Stoica. A policy-aware switching layer for data centers. ACM SIGCOMM Computer Communications Review (CCR), 38(4):51-62, 2008.
11. J. McHugh and A. P. Moore. A security policy and formal top-level specification for a multi-level secure local area network. In Proceedings of the IEEE Symposium on Security and Privacy, pages 34-39, Oakland, CA, 1986.
12. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner. OpenFlow: Enabling innovation in campus networks. ACM SIGCOMM Computer Communications Review (CCR), 38(2):69-74, 2008.
13. D. P. Sidhu and M. Gasser. A multilevel secure local area network. In Proceedings of the IEEE Symposium on Security and Privacy, pages 137-143, Oakland, CA, 1982.
14. M. C. St. Johns. Identification protocol. RFC 1413, Network Working Group, February 1993.
15. N. Zeldovich, S. Boyd-Wickizer, and D. Mazières. Securing distributed systems with information flow control. In Proceedings of the 5th Symposium on Networked Systems Design and Implementation, pages 293-308, San Francisco, CA, April 2008.