Name
Abstract | ||
|---|---|---|
Providing real-time communication services to multimedia applications and subscription-based Internet access often requires sufficient network resources to be reserved for real-time traffic. However, the reserved network resource is susceptible to resource theft and abuse. Without a resource access control mechanism that can efficiently differentiate legitimate real-time traffic from attacking packets, the traffic conditioning and policing enforced at ISP (Internet Service Provider) edge routers cannot protect the reserved network resource from embezzlement. On the contrary, the traffic policing at edge routers aggravates their vulnerability to flooding attacks by blindly dropping packets. In this paper, we propose a fast and light-weighted IP network-edge resource access control mechanism, called IP Easy-pass, to prevent unauthorized access to reserved network resources at edge devices. We attach a unique pass to each legitimate real-time packet so that an ISP edge router can validate the legitimacy of an incoming IP packet very quickly and simply by checking its pass. We present the generation of Easy-pass, its embedding, and verification procedures. We implement the IP Easy-pass mechanism in the Linux kernel, analyze its effectiveness against packet forgery and resource embezzlement attempts. Finally, we measure the overhead incurred by Easy-pass. |
Year | DOI | Venue |
|---|---|---|
2004 | 10.1109/INFCOM.2004.1354678 | IEEE INFOCOM 2004: THE CONFERENCE ON COMPUTER COMMUNICATIONS, VOLS 1-4, PROCEEDINGS |
Keywords | Field | DocType |
kernel,internet,authorisation,access control,linux kernel,linux,internet access,real time,real time systems,ip network,telecommunication services | Internet Protocol,Computer science,Computer security,Network packet,Internet protocol suite,Computer network,Edge device,Access control,Internet access,Traffic policing,The Internet | Conference |
ISSN | Citations | PageRank |
0743-166X | 4 | 0.46 |
References | Authors | |
27 | 4 | |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Haining Wang | 1 | 2574 | 160.07 |
| Abhijit Bose | 2 | 219 | 20.83 |
| Mohamed El Gendy | 3 | 70 | 4.51 |
| Kang G. Shin | 4 | 14055 | 1487.46 |