FMNISCF: Fine-Grained Multi-Domain Network Interconnection Security Control Framework
Source abstract
Abstract
The integrated air-ground multi-domain network provides users with a set of shared infrastructures. Security policies can be defined flexibly in the context of multi-domain network semantics. The packet filter module in the security gateway can run efficiently, which is an urgent requirement in this network environment. The framework combined with multi-domain network semantics implements the transformation into rules. It replaces the traditional manual method of configuring rules. The framework supports the whole life cycle management of rules from generation state and distribution state to execution state. In the aspect of security, the map security and semantic security are analyzed and optimized, respectively. Finally, through a series of experiments, compared with iptables/DPDK-IPFW/BSD-IPFW/BSD-pfsense, the high efficiency of the scheme is verified.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Software-Defined Networks and 5G · Network Packet Processing and Optimization · Mobile Agent-Based Network Management
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Key Laboratory of Trustworthy Distributed Computing and Service, Ministry of Education, Beijing University of Posts and Telecommunications (BUPT), Beijing 100876, China
The School of Cyberspace Security, Beijing University of Posts and Telecommunications (BUPT), Beijing 100876, China
The School of Information and Communication Engineering, Beijing University of Posts and Telecommunications (BUPT), Beijing 100876, China
Funding
BUPT Excellent Ph.D. Students Foundation · National Key R\&D Program of China
References (26)
Show source-provided references
1. Yang, Z., Xiao, B., and Chen, Y. (2015, January 12–14). Modeling and Verification of Space-Air-Ground Integrated Networks on Requirement Level Using STeC. Proceedings of the 2015 International Symposium on Theoretical Aspects of Software Engineering, Nanjing, China.10.1109/TASE.2015.8 ↗
2. Varasteh, A., Hofmann, S., Deric, N., He, M., Schupke, D., Kellerer, W., and Machuca, C.M. (2019). Mobility-Aware Joint Service Placement and Routing in Space-Air-Ground Integrated Networks. arXiv.10.1109/INFCOMW.2019.8845123 ↗
3. IoT Goes Nuclear: Creating a Zigbee Chain Reaction10.1109/MSP.2018.1331033 ↗
4. Wang, L., and Wang, X.V. (2018). Latest Advancement in CPS and IoT Applications. Cloud-Based Cyber-Physical Systems in Manufacturing, Springer International Publishing.10.1007/978-3-319-67693-7_2 ↗
5. Software-Defined WAN via Open APIs10.1109/ACCESS.2018.2833211 ↗
6. Hauser, F., Häberle, M., Schmidt, M., and Menth, M. (2019). P4-IPsec: Implementation of IPsec Gateways in P4 with SDN Control for Host-to-Site Scenarios. arXiv.
7. Hanemann, A., Boote, J., Boyd, E., Durand, J., Kudarimoti, L., Lapacz, R., Swany, M., Trocha, S., and Zurawski, J. (2005, January 12–15). PerfSONAR: A Service Oriented Architecture for Multi-domain Network Monitoring. Proceedings of the Third International Conference, Amsterdam, The Netherlands.10.1007/11596141_19 ↗
8. Gawanmeh, A. (2014, January 7–9). Automatic Verification of Security Policies in Firewalls with Dynamic Rule Sequence. Proceedings of the 2014 Eleventh International Conference on Information Technology: New Generations (ITNG), Las Vegas, NV, USA.10.1109/ITNG.2014.29 ↗
9. Wang, B., Lu, K., and Chang, P. (2016, January 23–25). Design and implementation of Linux firewall based on the frame of Netfilter/IPtable. Proceedings of the 2016 11th International Conference on Computer Science Education (ICCSE), Nagoya, Japan.10.1109/ICCSE.2016.7581711 ↗
10. Thomas, Y., Xylomenos, G., Tsilopoulos, C., and Polyzos, G.C. (2016, January 17–19). Multi-Flow Congestion Control with Network Assistance. Proceedings of the 2016 IFIP Networking Conference (IFIP Networking) and Workshops, Vienna, Austria.10.1109/IFIPNetworking.2016.7497200 ↗
11. Wang, H., He, D., and Wang, H. (2016, January 26–28). Comparison of high-performance packet processing frameworks on NUMA. Proceedings of the 2016 7th IEEE International Conference on Software Engineering and Service Science (ICSESS), Beijing, China.
12. A statistical and distributed packet filter against DDoS attacks in Cloud environment10.1007/s12046-018-0800-7 ↗
13. Joint flow routing-scheduling for energy efficient software defined data center networks: A prototype of energy-aware network management platform10.1016/j.jnca.2015.10.017 ↗
14. Sajjadi, D., Ruby, R., Tanha, M., and Pan, J. (2017, January 9–11). Fine-grained Access Provisioning via Joint Gateway Selection and Flow Routing on SDN-aware Wi-Fi Mesh Networks. Proceedings of the 2017 IEEE 13th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob), Rome, Italy.10.1109/WiMOB.2017.8115747 ↗
15. Fine-Grained Traffic Engineering on SDN-Aware Wi-Fi Mesh Networks10.1109/TVT.2018.2832010 ↗
16. Iizawa, Y., and Suzuki, K. (2016, January 20–24). Multi-layer and multi-domain network orchestration by ODENOS. Proceedings of the 2016 Optical Fiber Communications Conference and Exhibition (OFC), Anaheim, CA, USA.10.1364/OFC.2016.Th1A.3 ↗
17. Li, K., Ou, Q., Chen, H., and Zou, B. (2017, January 12–14). Controller Cluster-Based Interconnecting for Multi-domain SDN Networks. Proceedings of the 2017 International Conference on Cyber-Enabled Distributed Computing and Knowledge Discovery (CyberC), Nanjing, China.10.1109/CyberC.2017.41 ↗
18. Min, L.J., and Lu, H.H. (2017). A Policy Generation Method for Control Systems in an Open Environment. (CN106547248A).
19. RuleBender: Tree-based policy transformations for practical packet classification systems10.1016/j.comnet.2018.02.019 ↗
20. Brew: A Security Policy Analysis Framework for Distributed SDN-Based Cloud Environments10.1109/TDSC.2017.2726066 ↗
21. Khelf, R., and Ghoualmi, N. (2017, January 20–22). Intra and inter policy Conflicts Dynamic Detection Algorithm. Proceedings of the 2017 Seminar on Detection Systems Architectures and Technologies (DAT), Algiers, Algeria.10.1109/DAT.2017.7889181 ↗
22. Fine-Grained Two-Factor Access Control for Web-Based Cloud Computing Services10.1109/TIFS.2015.2493983 ↗
23. Fine-Grained Access Control via XACML Policy Optimization in Cloud Computing10.1142/S0218194015710047 ↗
24. A Fine-Grained Multi-Source Measurement Platform Correlating Routing Transitions with Packet Losses10.1016/j.comcom.2018.07.032 ↗
25. Bispo, J., Sourdis, I., M.P.Cardoso, J., and Vassiliadis, S. (2006, January 13–15). Regular expression matching for reconfigurable packet inspection. Proceedings of the 2006 IEEE International Conference on Field Programmable Technology, Bangkok, Thailand.10.1109/FPT.2006.270302 ↗
26. Kimura, B.Y.L., and Loureiro, A.A.F. (2018). MPTCP Linux Kernel Congestion Controls. arXiv.