Name
Title | ||
|---|---|---|
xRAC: Execution and Access Control for Restricted Application Containers on Managed Hosts |
Abstract | ||
|---|---|---|
We propose xRAC to permit users to run special applications on managed hosts and to grant them access to protected network resources. We use restricted application containers (RACs) for that purpose. A RAC is a virtualization container with only a selected set of applications. Authentication verifies the RAC user’s identity and the integrity of the RAC image. If the user is permitted to use the RAC on a managed host, launching the RAC is authorized and access to protected network resources may be given, e.g., to internal networks, servers, or the Internet. xRAC simplifies traffic control as the traffic of a RAC has a unique IPv6 address so that it can be easily identified in the network. The architecture of xRAC reuses standard technologies, protocols, and infrastructure. Those are the Docker virtualization platform and 802.1X including EAP-over-UDP and RADIUS. Thus, xRAC improves network security without modifying core parts of applications, hosts, and infrastructure. In this paper, we review the technological background of xRAC, explain its architecture, discuss selected use cases, and investigate on the performance. To demonstrate the feasibility of xRAC, we implement it based on standard components with only a few modifications. Finally, we validate xRAC through experiments. We publish the testbed setup guide and prototypical implementation on GitHub [1]. |
Year | DOI | Venue |
|---|---|---|
2020 | 10.1109/NOMS47738.2020.9110380 | NOMS 2020 - 2020 IEEE/IFIP Network Operations and Management Symposium |
Keywords | DocType | ISSN |
xRAC,access control,restricted application containers,managed host,special applications,protected network resources,virtualization container,RAC user,RAC image,network security,Docker virtualization platform,802.1X,EAP-over-UDP,RADIUS,technological background,testbed setup guide,prototypical implementation,GitHub | Conference | 1542-1201 |
ISBN | Citations | PageRank |
978-1-7281-4974-5 | 0 | 0.34 |
References | Authors | |
2 | 3 | |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Hauser Frederik | 1 | 0 | 0.34 |
| Schmidt Mark | 2 | 0 | 0.34 |
| Michael Menth | 3 | 567 | 72.74 |