On the design of secure ATM networks

Authors:
V Varadharajan;R Shankaran;M Hitchens
Affiliations:
Distributed System and Network Security Research Unit, School of Computing and Information Technology, University of W. Sydney, Nepean, Australia;Distributed System and Network Security Research Unit, School of Computing and Information Technology, University of W. Sydney, Nepean, Australia;Distributed System and Network Security Research Unit, School of Computing and Information Technology, University of W. Sydney, Nepean, Australia
Venue:
Computer Communications
Year:
1999

Citing 5
Cited 0

Securing ATM networks

CCS '96 Proceedings of the 3rd ACM conference on Computer and communications security
Securing communications over ATM networks

SEC'97 Proceedings of the IFIP TC11 13 international conference on Information Security (SEC '97) on Information security in research and business
Security Mechanisms in High-Level Network Protocols

ACM Computing Surveys (CSUR)
Security services and public key infrastructure for ATM networks

LCN '97 Proceedings of the 22nd Annual IEEE Conference on Local Computer Networks
Asynchronous transfer mode security

IEEE Network: The Magazine of Global Internetworking

Quantified Score

Hi-index	0.24

Visualization

Abstract

Asynchronous Transfer Mode (ATM) is seen to be a technology that allows flexibility, efficiency and manageable bandwidth on demand to be achieved in high-speed networks. ATM is able to support a variety of applications including voice, video, image and data with different quality of service requirements. This paper addresses the design and implementation of security services and mechanisms in ATM networks. The paper examines the various design options for the placement of security services within the ATM protocol reference model and considers their advantages and disadvantages. The option of placing the security layer between the ATM Adaptation Layer (AAL) and the ATM layer is selected and the design of security services such as confidentiality, integrity and data origin authentication services in the user plane are described. The paper then presents an authentication scheme and key establishment protocol. This protocol is integrated with the existing ATM signaling protocols as part of the call setup procedures in the control plane. Then the paper discusses a public key infrastructure for the ATM environment and considers the design of public key management protocols between ATM nodes and Certification Authority for initializing, retrieving and distributing public key certificates. Finally, the paper considers the design of access control service for ATM networks and discusses the issues involved in the provision of access control mechanisms both at the connection setup phase and during the user data transfer phase. It seems that the developed security design can be transparently integrated to secure ATM networks.