NDLI: Improving packet filters management through automatic and dynamic schemes

Content Provider	Springer Nature Link
Author	Paul, Olivier Laurent, Maryline
Copyright Year	2001
Abstract	The development of complex access control architectures raises the problem of their management. In this article, we describe an architecture providing packet filters automatic configuration in Internet based networks. Our architecture improves existing proposals in three different fields. It suppresses the security officer interactions with the management architecture when topology changes occur thus preventing temporary security holes. Moreover our architecture proposes three optimisations to provide the access control processes with efficient configurations. Simulations show that the complexity of these configurations is close to the complexity found in configurations created by hand. Finally we describe how the notion of access control integrity can be incorporated in our management architecture at a reasonable cost.Le développement ďarchitectures complexes de contrôle ďaccès soulève le problème de leur gestion. Dans cet article, nous décrivons une architecture assurant la configuration automatique de routeurs filtrants dans un réseau Internet. Notre proposition améliore les solutions existantes dans trois domaines. Elle supprime tout ďabord les interactions entre le responsable de sécurité et le système de gestion en cas de changements topologiques permettant de ce fait ďéviter des trous temporaires de sécurité. Elle se base sur trois optimisations permettant ďassurer une configuration efficace des routeurs. Nos simulations montrent que la complexité de ces configurations est proche de celle de configurations créées à la main. Enfin nous montrons comment notre architecture peut prendre en compte la notion ďintégrité du contrôle ďaccès à un coût raisonnable.
Starting Page	595
Ending Page	608
Page Count	14
File Format	PDF
ISSN	00034347
Journal	Annales Des Télécommunications
Volume Number	56
Issue Number	9-10
e-ISSN	19589395
Language	French
Publisher	Springer-Verlag
Publisher Date	2001-01-01
Publisher Place	Paris
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Réseau télécommunication Transmission par paquet Routeur réseau Filtrage Architecture réseau Internet Gestion réseau Système réparti Simulation Intégrité Communications Engineering, Networks Information Systems and Communication Service Signal, Image and Speech Processing Computer Communication Networks Information and Communication, Circuits R & D/Technology Policy
Content Type	Text
Resource Type	Article
Subject	Electrical and Electronic Engineering

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Network services and traffic engineering methods for supporting applications on the VTHD experimental gigabit network

One-time password-based high performance per-packet authentication for capsule networks

A countermeasure againstDDOS attacks using active networks technologies

Application level active network (alan) server management architecture

Tutorial on active networks and their management

Distributed soft policy enforcement by swarm intelligence; application to loadsharing and protection

Third generation mobile communication systems: overview and modelling considerations

Advanced reconfiguration framework based on game theoretical techniques in autonomic communication systems

Autonomous agents for autonomic networks

Improving packet filters management through automatic and dynamic schemes

Similar Documents

Network services and traffic engineering methods for supporting applications on the VTHD experimental gigabit network

One-time password-based high performance per-packet authentication for capsule networks

A countermeasure againstDDOS attacks using active networks technologies

Application level active network (alan) server management architecture

Tutorial on active networks and their management

Distributed soft policy enforcement by swarm intelligence; application to loadsharing and protection

Third generation mobile communication systems: overview and modelling considerations

Advanced reconfiguration framework based on game theoretical techniques in autonomic communication systems

Autonomous agents for autonomic networks

Improving packet filters management through automatic and dynamic schemes