Securing distributed adaptation

2001 IEEE Open Architectures and Network Programming Proceedings, OPENARCH 2001

Volumn , Issue , 2001, Pages 71-82

  Li, Jun ^a   Yarvis, M ^a   Reiher, P ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

distributed adaptation; open architecture; security

Indexed keywords

COMPUTER ARCHITECTURE; NETWORK SECURITY;

ADAPTATION FRAMEWORK; APPLICATION DATA; DISTRIBUTED ADAPTATION; FINE-GRAINED CONTROL; OPEN ARCHITECTURE; SECURITY; SECURITY REQUIREMENTS; UNAUTHORIZED ACCESS;

NETWORK ARCHITECTURE;

EID: 84962166024     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/OPNARC.2001.916840     Document Type: Conference Paper

References (28)

1. D. S. Alexander, W. A. Arbaugh, A. D. Keromytis, and J. M. Smith, "A secure active network environment architecture: realization in SwitchWare," IEEE Network, Vol.12, No.3, May-June 1998.
2. D. Balfanz and E. W. Felten, "A Java filter," Technical Report 567-97, Dept of Computer Science, Princeton University, September 1997.
3. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. Keromytis. "The KeyNote trust-management system version 2," RFC 2704, September 1999.
4. R. H. Campbell, Z. Liu, M. D. Mickunas, P. Naldurg, and S. Yi, "Seraphim: dynamic interoperable security architecture for active networks," IEEE OPENARCH 2000, Tel-Aviv, Israel, March 2000.
5. M. Clifford, C. Lavine, and M. Bishop, "The solar trust model: authentication without limitation," 14th Annual Computer Security Applications Conference, December 1998, Phoenix, AZ.
6. The Cryptix cryptographic library. http://www.cryptix.org.
7. R. Dandekar and S. Schwab, "A new hop-hop integrity model for active nets," AMP Project, NAI Labs, May 2000.
8. D. C. Feldmeier, A. J. McAuley, J. M. Smith, D. S. Bakin, W. S. Marcus, and T. M. Raleigh. "Protocol Boosters," IEEE Journal on Selected Areas in Communication (Special Issue on Protocol Architectures for 21st Century Applications) Vol. 16, No. 3, April 1998.
9. D. Harkins and D. Carrel, "The Internet key exchange (IKE)," RFC 2409, November 1998.
10. International Telecommunication Union. "Information technology - open systems interconnection - the directory: authentication framework," ITU-T Recommendation X.509, 1995.
11. A. W. Jackson, "Security issues for stateless programmable networks," panel session on security issues in programmable networks, IEEE OPENARCH 1999, New York, NY, March 1999.
12. Java™ Cryptography Architecture. http://java.sun.com/security.
13. IBM JDK 1.1.8. Available at http://www.ibm.com/java/jdk.
14. S. Kent, "Privacy enhancement for Internet electronic mail: part II: certificate-based key management," RFC 1422, BBN, February 1993.
15. S. Kent and R. Atkinson, "Security architecture for the Internet protocol," RFC 2401, November 1998.
16. D. Maughan, M. Schertler, M. Schneider, and J. Turner, "Internet security association and key management protocol (ISAKMP)," RFC 2408, November 1998.
17. P. McDaniel, A. Prakash, and P. Honeyman, "Antigone: a flexible framework for secure group communication," Proceedings of the 8th USENIX Security Symposium, August 1999
18. G. McGraw and E. W. Felten, Securing Java: Getting Down to Business with Mobile Code, John Wiley & Sons, Inc, 1999. Also available at http://www.securingjava.com/.
19. S. Murphy, "Secure active network prototypes," NAI Labs, Network Associates, July 1997. Available at http://www.darpa.mil/ito/psum1999/G796-0.html.
20. S. Murphy, "Design issues affecting security for active networks," panel session on security issues in programmable networks, IEEE OPENARCH 1999, New York, NY, March 1999.
21. NIST (National Institute of Standards and Technology). "Secure hash standard," FIPS Publication, 180-1, April 1995. Also available at http://www.itl.nist.gov/fipspubs/fip180-1.htm.
22. Panda project home page. Available at http://fmgwww.cs.ucla.edu/Panda.
23. P. Reiher, R. Guy, M. Yarvis, and A. Rudenko, "Automated planning for open architectures," short paper presented at IEEE OPENARCH 2000, Tel-Aviv, Israel, March 2000.
24. R. Rivest, A. Shamir, and L. Adleman, "A method for obtaining digital signature and public key cryptosystems," Communications of the ACM, Vol. 21, No. 2, 1978.
25. A. D. Rubin and D. E. Geer, "Mobile code security," IEEE Internet Computing, November 1998.
26. J. Steiner, C. Neuman, and J. Schiller, "Kerberos: an authentication service for open network systems," Proceedings of Usenix Winter Conference, pages 191-202, Dallas, TX, February 1988.
27. V. Varadharajan, R. Shankaran, and M. Hitchens, "Active networks and security," Proceedings 22nd National Information Systems Security Conference, Vol.1, Arlington, VA, October 1999.
28. M. Yarvis, A. Wang, A. Rudenko, P. Reiher, and G. Popek. "Conductor: distributed adaptation for complex networks," UCLA Tech Report, CSD-TR-990042, August 1999. Available at: http://fmg-www.cs.ucla.edu/Conductor/CSD-TR-90042.ps.