Designing an academic firewall: Policy, practice, and experience with SURF

Proceedings of Internet Society Symposium on Network and Distributed Systems Security, NDSS 1996

Volumn , Issue , 1996, Pages 79-92

  Greenwald, M ^a   Singhal, S K ^a   Stone, J R ^a   Cheriton, D R ^a  

^a Stanford University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SYSTEM FIREWALLS; WEB BROWSERS;

COMPUTING RESOURCE; CORPORATE NETWORKS; CORPORATE RESEARCH; NETWORK COMMUNICATIONS; RESEARCH ENVIRONMENT; SOFTWARE AND HARDWARES; STANFORD UNIVERSITY; TRADITIONAL MODELS;

NETWORK SECURITY;

EID: 85034527162     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NDSS.1996.492415     Document Type: Conference Paper

References (27)

1. Braden, Bob. "Extending TCP for Transactions." Internet RFC 1379, November 1992.
2. Cheriton, David R. "VMTP: A Transport Protocol for the Next Generation of Communication Systems." In Proceedings ofSIGCOMM 1986, Pages 406-415, Stowe, VT, August 1986. ACM SIGCOMM. Published as Computer Communications Review 16(3), October 1986.
3. Computer Emergency Response Team. "Sun Sendmail Vulnerability." CERT Advisory CA:90:01, January 1990.
4. Computer Emergency Response Team. "Sendmail Vulnerability." CERT Advisory CA:93:16, November 1993.
5. Computer Emergency Response Team. "Ongoing Network Monitoring Attacks." CERT Advisory CA-94:01, February 1994.
6. Computer Emergency Response Team. "Sendmail Vulnerabilities." CERT Advisory CA:94:12, July 1994.
7. Computer Emergency Response Team. "IP Spoofing Attacks and Hijacked Terminal Connections." CERT Advisory CA:95:01, January 1995.
8. Computer Emergency Response Team. "Sendmail v.5 Vulnerability." CERT Advisory CA:95:08, August 1995.
9. Computer Emergency Response Team. "Sendmail Vulnerabilities." CERT Advisory CA:95:05, February 1995.
10. Computer Emergency Response Team. "Sun Sendmail-oR Vulnerability." CERT Advisory CA:95:11, September 1995.
11. Computer Emergency Response Team. "Syslog Vulnerability-A Workaround for Sendmail." CERT Advisory CA:95:13, October 1995.
12. Crocker, David H. "Standard For the Format of ARPA Internet Text Messages." Internet RFC 822, August 1982.
13. Floyd, Sally, Van Jacobson, Charley Liu, Steven McCanne, and Lixia Zhang. "A Reliable Multicast Framework for Light-Weight Sessions and Application-Level Framing." In Proceedings of SIGCOMM 1995, Pages 342-356, Cambridge, MA, August 1995. ACM SIGCOMM. Published as Computer Communications Review 25(4), October 1995.
14. Ganesan, Ravi."BAfirewall: A Modern Firewall Design." In Proceedings of the Internet Society Symposium on Network and Distributed Systems Security, Pages 99-108, San Diego, CA, February 1994. Internet Society.
15. Germain, Ellen. "Guarding Against Internet Intruders." Science, 267:608-610, February 1995.
16. Haller, NeilM. "The S/Key One-Time Password System." In Proceedings of the Internet Society Symposium on Network and Distributed System Security, Pages 151-157, San Diego, CA, February 1994. Internet Society.
17. Information Sciences Institute. "Transmission Control Protocol." Internet RFC 793, September 1981.
18. Ioannidis, J., M. Blaze. "The Architecture and Implementation of Network-Layer Security Under Unix." In UNIX Security Symposium IV Proceedings, Pages 29-39, Santa Clara, CA, October 1993. USENIX Association.
19. Kohl, John and B. Clifford Neuman. "The Kerberos Network Authentication Service (V5)." Internet RFC 1510, September 1993.
20. Mills, David L. "Network Time Protocol (version 3) Specification, Implementation." Internet RFC 1304, March 1992.
21. Mockapetris, Paul V. "Domain Names-Implementation and Specification." Internet RFC 1035, November 1987.
22. Myers, John G., Marshall T. Rose. "Post Office Protocol-Version 3." Internet RFC 1725, November 1994.
23. Neuman, B.Clifford and Theodore Ts'o."Kerberos: AnAu-thentication Service for Computer Networks." IEEE Communications, 32(9):33-38, September 1994.
24. Scheifler, Robert W., James Gettys. "The X Window System." ACM Transactions on Graphics, 5(2):79-109, April 1986.
25. Sun Microsystems, Inc. "RPC: Remote Procedure Call Protocol Specification: Version 2." Internet RFC 1057, June 1988.
26. Sun Microsystems, Inc. "NFS: Network File System Specification." Internet RFC 1094, March 1989.
27. Violino, Bob. "Break-Ins Are Rife: Survey Suggests an Epidemic of Internet Hacking." Information Week, 268:98, 9 Oct 1995.