DIPLOMA: Distributed policy enforcement architecture for MANETs

Proceedings - 2010 4th International Conference on Network and System Security, NSS 2010

Volumn , Issue , 2010, Pages 89-98

  Alicherry, Mansoor ^a   Keromytis, Angelos D ^a  

^a Columbia University ^*  (United States)

Author keywords

Capabilities; Distributed firewalls; MANETs

Indexed keywords

CAPABILITIES; COMPROMISED NODES; DISTRIBUTED FIREWALL; DISTRIBUTED POLICIES; DISTRIBUTED SECURITY; END-TO-END CONNECTIVITY; HOP BY HOP; INDOOR ENVIRONMENT; LOCAL COMMUNICATIONS; MANETS; MULTIHOP; NETWORK BANDWIDTH; NETWORK CAPABILITY; SIGNATURE OPTIMIZATION;

AD HOC NETWORKS; COMPUTER OPERATING SYSTEMS; COMPUTER SYSTEM FIREWALLS; COMPUTER VIRUSES; JITTER; NETWORK LAYERS; NETWORK SECURITY;

NETWORK ARCHITECTURE;

EID: 78650392147     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NSS.2010.27     Document Type: Conference Paper

References (16)

1. GloMoSim simulator. http://pcl.cs.ucla.edu/projects/glomosim/.
2. Nefilter/IPtables project home page. http://www.netfilter.org.
3. Orbit Lab Test-bed. http://www.orbit-lab.org.
4. Uppsala University AODV implementation. http://core.it.uu.se/core/index. php/AODV-UU.
5. R. Akbania, T. Korkmaz, and G. Raju. HEAP: A packet authentication scheme for mobile ad hoc networks. Communications and Networking Simulation Symposium, 2007.
6. M. Alicherry, A. D. Keromytis, and A. Stavrou. Deny-by-Default Distributed Security Policy Enforcement in Mobile Ad Hoc Networks. SecureComm, September 2009.
7. M. Alicherry, A. Stavrou, and A. D. Keromytis. Evaluating a Collaborative Defense Architecture for MANETs. IEEE Workshop on Collaborative Security Technologies (CoSec), December 2009.
8. T. Anderson, T. Roscoe, and D. Wetherall. Preventing Internet Denialof- Service with Capabilities. Proc. of Hotnets-II, 2003.
9. D. Estrin, J. C. Mogul, and G. Tsudik. Visa protocols for controlling interorganizational datagram flow. IEEE Journal on Selected Areas in Communications, May 1989.
10. S. Ioannidis, A. D. Keromytis, S. M. Bellovin, and J. M. Smith. Implementing a Distributed Firewall. In Proceedings of Computer and Communications Security (CCS), pages 190-199, November 2000.
11. J. Jaramillo and R. Srikant. Darwin: Distributed and adaptive reputation mechanism for wireless ad-hoc networks. MOBICOM, 2007.
12. S. Kaul, M. Gruteser, and I. Seskar. Creating Wireless Multi-hop Topologies on Space-Constrained Indoor Testbeds Through Noise Injection. IEEE Tridentcom, 2006.
13. R. Lee. Netware 4.x performance tuning and optimization: Part 3. http://support.novell.com/techcenter/articles/ana19931001.html, October 1993.
14. R. Russell and H. Welte. Linux netfilter hacking howto. http://www.netfilter.org/documentation/HOWTO/netfilter-hacking-HOWTO.html, 2002.
15. E. Wobber, M. Abadi, M. Burrows, and B. Lampson. Authentication in the Taos Operating System. ACM Trans. on Computer Systems, 12, February 1994.
16. X. Wu and D. K. Y. Yau. Mitigating Denial-of-Service Attacks in MANET by Distributed Packet Filtering: A Game-theoretic Approach. ASIACCS, March 2007.