BANDS: An inter-domain internet security policy management system for IPSEC/VPN

IFIP Advances in Information and Communication Technology

Volumn 118, Issue , 2003, Pages 231-244

  Yang, Yanyan ^a   Felix Wu, S ^a  

^a University of California Davis   (United States)

^b Judy)   (United States)

Author keywords

Inter domain Security Management; IPSecNPN; Security Policy Management

Indexed keywords

NETWORK ARCHITECTURE; SECURITY SYSTEMS; VIRTUAL PRIVATE NETWORKS;

DISTRIBUTED FRAMEWORK; DISTRIBUTED SECURITY; INTER-DOMAIN POLICIES; INTERNET SECURITY POLICY; IPSECNPN; SECURITY MANAGEMENT; SECURITY POLICY MANAGEMENT; SECURITY REQUIREMENTS;

NETWORK MANAGEMENT;

EID: 84904312147     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-0-387-35674-7     Document Type: Conference Paper

References (11)

1. Z. Fu and S. F. Wu, "Automatic Generation of IPSECNPN Policies in an Intra-Domain Environment, " 12th International Workshop on Distributed Systems: Operations & Management (DSOM 2001), October 15-17, 2001, Nancy, France.
2. M. Condell, G. Patz, R. Krishnan, C. Lynn, "MSME Architecture, " December 17, 2001, BBN Technologies.
3. C. Xu, F. Gong, I. Baldine, C. Sargor, F. Jou, S. F. Wu, Z. Fu, H. Huang, "Celestial Security Management System, " DARPA Information Survivability Conference and Exposition(DISCEX2000), IEEE Computer Society Press, Proceedings, pp. 162-172, vol. 1.
4. Moffett, I. D., "Requirements and Policies, " Position paper for Workshop on Policies in Distributed Systems, 15-17 November 1999, HP-Laboratories, Bristol, UK.
5. Moffett, J. D., Sloman, M. S., "Policy Hierarchies for Distributed Systems Management, " IEEE Journal on Selected Areas in Communication, 11(9), 1404-1414.
6. Z. Fu, "Automatic Generation of Security Policies, " Technical Report, http://shang. csc. ncsu. edulsecpolicy. pdf.
7. Z. Fu, S. F. Wu, H. Huang, K. Loh, F. Gong, "IPSecNPN Security Policy: Correctness, Conflict Detection and Resolution, " IEEE Policy 2001 Workshop, Jan. 2001.
8. S. Blake et al., "An architecture for differentiated service, " RFC 2475, Internet Engineering Task Force, Dec. 1998.
9. Dan Harkins et al., "Proposal for the IKEv2 Protocol, " Internet Draft, , April 2002.
10. S. Kent et al., "Security Architecture for the Internet Protocol, " RFC 2401, Internet Engineering Task Force, November 1998.
11. P. Pan, E, Hahne, and H. Schulzrinne, "BGRP: A Tree-Based Aggregation Protocol for Inter-domain Reservations, " Journal of Communications and Networks, Vol. 2, No. 2, June 2000, pp. 157-167.