Secure overlay networks for federated service provision and management

Authors:
Gregorio Martínez Pérez;Félix J. García Clemente;Manuel Gil Pérez;Antonio F. Gómez Skarmeta
Affiliations:
Departamento de Ingeniería de la Información y las Comunicaciones, University of Murcia, Campus de Espinardo, s/n 30.071 Murcia, Spain;Departamento de Ingeniería de la Información y las Comunicaciones, University of Murcia, Campus de Espinardo, s/n 30.071 Murcia, Spain;Departamento de Ingeniería de la Información y las Comunicaciones, University of Murcia, Campus de Espinardo, s/n 30.071 Murcia, Spain;Departamento de Ingeniería de la Información y las Comunicaciones, University of Murcia, Campus de Espinardo, s/n 30.071 Murcia, Spain
Venue:
Computers and Electrical Engineering
Year:
2008

Citing 5
Cited 2

PKI Services for IPv6

IEEE Internet Computing
WebSOS: an overlay-based system for protecting web servers from denial of service attacks

Computer Networks: The International Journal of Computer and Telecommunications Networking - Web security
Policy-Based Network Management: Solutions for the Next Generation (The Morgan Kaufmann Series in Networking)

Policy-Based Network Management: Solutions for the Next Generation (The Morgan Kaufmann Series in Networking)
Policy-based dynamic provision of IP services in a secure VPN coalition scenario

IEEE Communications Magazine
SOS: an architecture for mitigating DDoS attacks

IEEE Journal on Selected Areas in Communications

Maximizing energy utilization routing scheme in wireless sensor networks based on minimum hops algorithm

Computers and Electrical Engineering
Building a reputation-based bootstrapping mechanism for newcomers in collaborative alert systems

Journal of Computer and System Sciences

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper presents the components and formal information model enabling the dynamic creation and management of secure overlay networks. Special attention will be paid to the solution provided to two important open issues: the definition of a certificate path building and validation algorithm (to ease the trust establishment and negotiation processes) and the definition and negotiation of SLAs in inter-domain secure overlay scenarios. Given a set of already existing domains with certain trust relationships, each overlay network allows the secure sharing of some (or all) of its services. For this, the administrator of each administrative domain will define using a formal information model which services he wants to share with any other domain, and which ones is he expecting from these other domains. Time and other networking conditions can also be indicated allowing secure overlay networks to be dynamically and automatically established and managed.