NDLI: DIPLOMA: Distributed Policy Enforcement Architecture for MANETs

Content Provider	IEEE Xplore Digital Library
Author	Alicherry, M. Keromytis, A.D.
Copyright Year	2010
Abstract	Lack of well-defined defense perimeter in MANETs prevents the use traditional firewalls, and requires the security to be implemented in a distributed manner. We recently introduced a novel deny-by-default distributed security policy enforcement architecture for MANETs by harnessing and extending the concept of {\it network capabilities}. The {\it deny-by-default} principle allows compromised nodes to access only authorized services, limiting their ability to disrupt or even interfere with end-to-end connectivity and nodes beyond their local communication radius. The enforcement of policies is done hop-by-hop, in a distributed manner. In this paper, we present the implementation of this architecture, called DIPLOMA, on Linux. Our implementation works at the network layer, and does not require any changes to existing applications. We identify the bottlenecks of the original architecture and propose improvements, including a signature optimization, so that it works well in practice. We present the results of evaluating the architecture in a realistic MANET testbed Orbit. The results show that the architecture incurs minimal overhead in throughput, latency and jitter. We also show that the system protects network bandwidth and the end-hosts in the presence of attackers. To that end, we identify ways of creating multi-hop topologies in indoor environments so that a bad node cannot interfere with every other node. We also show that existing applications are not impacted by the new architecture, achieving good performance.
Starting Page	89
Ending Page	98
File Size	381195
Page Count	10
File Format	PDF
ISBN	9781424484843
DOI	10.1109/NSS.2010.27
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-09-01
Publisher Place	Australia
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Protocols Capabilities Bandwidth MANETs Distributed firewalls Ad hoc networks Topology Kernel Engines Mobile computing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

High Performance Firewalls in MANETs

Evaluating a collaborative defense architecture for MANETs

Bandwidth allocation and routing information for wireless mobile Ad-Hoc networks

A reputation-based mechanism to enforce cooperation in MANETs

Topology Stability-Aware Multicast Protocol for MANETs

Comparative analysis of CBRP, AODV, DSDV routing protocols in mobile Ad-hoc networks

A cooperation-enforcement protocol for a new hybrid routing protocol for MANETS

Distributed chat in dynamic networks

Optimizing Topology Update Interval in Mobile Ad-Hoc Networks

DIPLOMA: Distributed Policy Enforcement Architecture for MANETs

Similar Documents

High Performance Firewalls in MANETs

Evaluating a collaborative defense architecture for MANETs

Bandwidth allocation and routing information for wireless mobile Ad-Hoc networks

A reputation-based mechanism to enforce cooperation in MANETs

Topology Stability-Aware Multicast Protocol for MANETs

Comparative analysis of CBRP, AODV, DSDV routing protocols in mobile Ad-hoc networks

A cooperation-enforcement protocol for a new hybrid routing protocol for MANETS

Distributed chat in dynamic networks

Optimizing Topology Update Interval in Mobile Ad-Hoc Networks

DIPLOMA: Distributed Policy Enforcement Architecture for MANETs