Resonance: Dynamic access control for enterprise networks

Computer Communication Review

Volumn , Issue , 2009, Pages 11-18

  Nayak, Ankur ^a   Reimers, Alex ^a   Feamster, Nick ^a   Clark, Russ ^a  

^a Georgia Institute of Technology   (United States)

Author keywords

Access control; Enterprise networks; Programmable networks

Indexed keywords

DISTRIBUTED MONITORING; DYNAMIC ACCESS CONTROL; ENTERPRISE NETWORKS; FLOW-LEVEL; GEORGIA; HIGHER-LEVEL SECURITY; INFERENCE SYSTEMS; MIDDLEBOXES; NETWORK ACCESS CONTROL; NETWORK ELEMENT; PROGRAMMABLE NETWORK; PROGRAMMABLE NETWORKS; PROGRAMMABLE SWITCHES; RESEARCH QUESTIONS; SECURITY FUNCTIONS; SECURITY POLICY;

NETWORK LAYERS; NETWORK SECURITY; PROGRAMMED CONTROL SYSTEMS; RESEARCH; RESONANCE; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 77954339615     PISSN: 01464833     EISSN: 01464833     Source Type: Conference Proceeding    
DOI: 10.1145/1592681.1592684     Document Type: Conference Paper

References (19)

1. M. Casado, M. J. Freedman, J. Pettit, J. Luo, N. McKeown, and S. Shenker. Ethane : Taking control of the enterprise. In SIGCOMM '07, 2007.
2. M. Casado, T. Koponen, D. Moon, and S. Shenker. Rethinking packet forwarding hardware. In Proc. Seventh ACM SIGCOMM HotNets Workshop, Nov. 2008.
3. Cisco Application eXtension Platform Overview. http://www.cisco.com/en/ US/prod/collateral/routers/ps9701/white-paper-c11-459082.html.
4. D. E. Denning. A lattice model of secure information flow. Communications of the ACM, 19(5):236-243, May 1976.
5. N. Duffield. Simple Network Performance tomography. In Proc. ACM SIGCOMM Internet Measurement Conference, Miami, FL, Oct. 2003.
6. N. Feamster and H. Balakrishnan. Detecting BGP Configuration Faults with Static Analysis. In Proc. 2nd Symposium on Networked Systems Design and Implementation, Boston, MA, May 2005.
7. N. Feamster, H. Balakrishnan, J. Rexford, A. Shaikh, and K. van der Merwe. The case for separating routing from routers. In ACM SIGCOMM Workshop on Future Directions in Network Architecture, Portland, OR, Sept. 2004.
8. A. Greenberg, G. Hjalmtysson, D. A. Maltz, A. Myers, J. Rexford, G. Xie, H. Yan, J. Zhan, and H. Zhang. A clean slate 4D approach to network control and management. ACM Computer Communications Review, 35(5):41-54, 2005.
9. G. Gu, R. Perdisci, J. Zhang, and W. Lee. BotMiner: Clustering analysis of network traffic for protocol- and structure-independent botnet detection. In 17th USENIX Security Symposium, 2008.
10. N. Gude, T. Koponen, J. Pettit, B. Pfaff, M. Casado, N. McKeown, and S. Shenker. NOX: towards an operating system for networks. ACM SIGCOMM Computer Communication Review, 38(3):105-110, July 2008.
11. S. Hao, N. Syed, N. Feamster, A. Gray, and S. Krasser. Detecting Spammers with SNARE: Spatio-temporal Network-level Automatic Reputation Engine. http://www.cc.gatech.edu/~feamster/papers/snare-tr.pdf, Feb. 2009. In submission; Earlier version appeared as Georgia Tech Technical Report GT-CSE-08-102
12. T. Hinrichs, N. Gude, M. Casado, J. Mitchell, and S. Shenker. Expressing and enforcing flow-based network security policies. Technical report, Dec. 2008.
13. P. Newman, G. Minshall, and T. L. Lyon. IP Switching - ATM under IP. IEEE/ACM Trans. Netw., 6(2):117-129, 1998.
14. OpenFlow Switch Consortium. http://www.openflowswitch.org/, 2008.
15. A. Ramachandran, N. Feamster, and S. Vempala. Filtering spam with behavioral blacklisting. In Proc. 14th ACM Conference on Computer and Communications Security, Alexandria, VA, Oct. 2007.
16. Scanning Technology for Automated Registration, Repair and Response Tasks. https://start.gatech.edu/.
17. M. B. Tariq, M. Motiwala, and N. Feamster. NANO: Network Access Neutrality Observatory. In Proc. 7th ACM Workshop on Hot Topics in Networks (Hotnets-VII), Calgary, Alberta. Canada., Oct. 2008.
18. J. van der Merwe, S. Rooney, I. Leslie, and S. Crosby. The Tempest - A Practical Framework for Network Programmability. IEEE Network, 12(3):20-28, May 1998.
19. Configuring Dynamic Port VLAN Membership with VMPS. http://www.cisco.com/ univercd/cc/td/doc/product/lan/cat5000/rel-4-2/config/vmps.htm.