NDLI: A flow-based approach to datagram security

Content Provider	ACM Digital Library
Author	Mittra, Suvo Woo, Thomas Y. C.
Abstract	Datagram services provide a simple, flexible, robust, and scalable communication abstraction; their usefulness has been well demonstrated by the success of IP, UDP, and RPC. Yet, the overwhelming majority of network security protocols that have been proposed are geared towards connection-oriented communications. The few that do cater to datagram communications tend to either rely on long term host-pair keying or impose a session-oriented (i.e., requiring connection setup) semantics.Separately, the concept of flows has received a great deal of attention recently, especially in the context of routing and QoS. A flow characterizes a sequence of datagrams sharing some pre-defined attributes. In this paper, we advocate the use of flows as a basis for structuring secure datagram communications. We support this by proposing a novel protocol for datagram security based on flows. Our protocol achieves zero-message keying, thus preserving the connectionless nature of datagram, and makes use of soft state, thus providing the per-packet processing efficiency of session-oriented schemes. We have implemented an instantiation for IP in the 4.4BSD kernel, and we provide a description of our implementation along with performance results.
Starting Page	221
Ending Page	234
Page Count	14
File Format	PDF
ISSN	01464833
DOI	10.1145/263109.263170
Journal	ACM SIGCOMM Computer Communication Review (CCRV)
Volume Number	27
Issue Number	4
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	1993-07-01
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A reliable datagram protocol on local area networks

USA position on datagram service

Datagram routing for internet multicasting

Adaptive feedback compensation for distributed load-based routing systems in datagram packet-switched communications networks

A high speed transport protocol for datagram/virtual circuit networks

Loss-load curves:support for rate-based congestion control in high-speed datagram networks

Further refinements to the proposed datagram interface [for X.25]

Host groups:a multicast extension for datagram internetworks

A language-based approach to protocol implementation

A flow-based approach to datagram security

Similar Documents

A reliable datagram protocol on local area networks

USA position on datagram service

Datagram routing for internet multicasting

Adaptive feedback compensation for distributed load-based routing systems in datagram packet-switched communications networks

A high speed transport protocol for datagram/virtual circuit networks

Loss-load curves:support for rate-based congestion control in high-speed datagram networks

Further refinements to the proposed datagram interface [for X.25]

Host groups:a multicast extension for datagram internetworks

A language-based approach to protocol implementation

A flow-based approach to datagram security