The STRONGMAN architecture

Proceedings - DARPA Information Survivability Conference and Exposition, DISCEX 2003

Volumn 1, Issue , 2003, Pages 178-188

  Keromytis, A D ^a   Ioannidis, S ^b   Greenwald, M B ^b   Smith, J M ^b  

^a CS Department Columbia University ^*  (United States)

^b UNIVERSITY OF PENNSYLVANIA   (United States)

Author keywords

Distributed control; Internet; Robustness; Scalability; Security

Indexed keywords

CLOSED LOOP CONTROL SYSTEMS; CONTROL THEORY; DISTRIBUTED PARAMETER CONTROL SYSTEMS; INTERNET; NETWORK SECURITY; ROBUSTNESS (CONTROL SYSTEMS); SCALABILITY; SECURITY SYSTEMS;

DESIGN PRINCIPLES; DISTRIBUTED CONTROL; DISTRIBUTED FIREWALL; END-TO-END SECURITY; GLOBAL ROBUSTNESS; MEASUREMENTS OF; SECURITY; SECURITY POLICY;

COMPUTER VIRUSES;

EID: 84942257511     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2003.1194883     Document Type: Conference Paper

References (21)

1. Y. Bartal, A. Mayer, K. Nissim, and A. Wool. Firmato: a novel firewall management toolkit. In Proceedings of the 1999 IEEE Symposium on Security and Privacy, pages 17-31, May 1999.
2. S. M. Bellovin. Distributed Firewalls. ;login: magazine, special issue on security, November 1999.
3. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. D. Keromytis. The KeyNote Trust Management System Version 2. Internet RFC 2704, September 1999.
4. P. Bonatti, S. D. C. di Vimercati, and P. Samarati. A Modular Approach to Composing Access Policies. In Proceedings of Computer and Communications Security (CCS), pages 164-173, November 2000.
5. W. R. Cheswick and S. M. Bellovin. Firewalls and Internet Security: Repelling the Wily Hacker. Addison-Wesley, 1994.
6. D. D. Clark. The Design Philosophy of the DARPA Internet Protocols. In Proc. SIGCOMM 1988, pages 106-114, 1988.
7. M. Greenwald, S. Singhal, J. Stone, and D. Cheriton. Designing an Academic Firewall. Policy, Practice and Experience with SURF. In Proc. of Network and Distributed System Security Symposium (NDSS), pages 79-91, February 1996.
8. J. D. Guttman. Filtering Postures: Local Enforcement for Global Policies. In IEEE Security and Privacy Conference, pages 120-129, May 1997.
9. J. Hale, P. Galiasso, M. Papa, and S. Shenoi. Security Policy Coordination for Heterogeneous Information Systems. In Proc. of the 15th Annual Computer Security Applications Conference (ACSAC), December 1999.
10. D. Hartmeier. Design and Performance of the OpenBSD Stateful Packet Filter (pf). In Proceedings of the USENIX Annual Technical Conference, Freenix Track, pages 171-180, June 2002.
11. R. Hayton, J. Bacon, and K. Moody. Access Control in an Open Distributed Environment. In IEEE Symposium on Security and Privacy, May 1998.
12. S. Hinrichs. Policy-Based Management: Bridging the Gap. In Proc. of the 15th Annual Computer Security Applications Conference (ACSAC), December 1999.
13. J. D. Howard. An Analysis Of Security On The Internet 1989-1995. PhD thesis, Carnegie Mellon University, April 1997.
14. S. Ioannidis, A. Keromytis, S. Bellovin, and J. Smith. Implementing a Distributed Firewall. In Proceedings of Computer and Communications Security (CCS), pages 190-199, November 2000.
15. A. Konstantinou, S. Bhatt, S. Rajagopalan, and Y. Yemini. Managing Security in Dynamic Networks. In Proceedings of the 13th USENIX Systems Administration Conference (LISA), November 1999.
16. B. McKenney, D. Woycke, and W. Lazear. A Network of Firewalls: An Implementation Example. In Proceedings of the 11th Anual Computer Security Applications Conference (ACSAC), pages 3-13, December 1995.
17. J. C. Mogul. Simple and flexible datagram access controls for UNIX-based gateways. In Proceedings of the USENIX Summer 1989 Conference, pages 203-221, 1989.
18. A. Molitor. An Architecture for Advanced Packet Filtering. In Proceedings of the 5th USEN1X UNIX Security Symposium, June 1995.
19. D. Nessett and P. Humenn. The Multilayer Firewall. In Proc. of Network and Distributed System Security Symposium (NDSS), pages 13-27, March 1998.
20. J. H. Saltzer, D. P. Reed, and D. D. Clark. End-to-end arguments in System Design. ACM Transactions on Computer Systems, 2(4):277-288, November 1984.
21. D. Sherman, D. Sterne, L. Badger, S. Murphy, K. Walker, and S. Haghighat. Controlling network communication with domain and type enforcement. In Proceedings of the 18th National Information Systems Security Conference, pages 211-220, October 1995.