Application access control at network level

Authors:
Refik Molva;Erich Rütsche
Affiliations:
Institut EURECOM, 06904 Sophia-Antipolis, France;Institut EURECOM, 06904 Sophia-Antipolis, France
Venue:
CCS '94 Proceedings of the 2nd ACM Conference on Computer and communications security
Year:
1994

Citing 2
Cited 1

Multicast routing in datagram internetworks and extended LANs

ACM Transactions on Computer Systems (TOCS)
Message authentication with one-way hash functions

IEEE INFOCOM '92 Proceedings of the eleventh annual joint conference of the IEEE computer and communications societies on One world through communications (Vol. 3)

Counteracting DDoS attacks in WLAN

Proceedings of the 4th international conference on Security of information and networks

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper describes an access control mechanism that enforces at the network level an access control decision that is taken at the application level. The mechanism is based on the pre-computation of encrypted counters called tickets. An access enforcement device verifies the existence of a valid ticket in each packet that is subject to access control and kills unauthorized packets. Tickets are not computed as a function of the user data. Due to the timing constraints of shared media LANs the presence of a valid ticket in a packet proves that the operation implied by the user data has been authorized. The access control mechanism is elaborated for Internet protocols over Ethernet and we discuss its properties for internetworking and multicasting.