Abstract:As a new programmable network architecture, the active network supports the development, verification and deployment of new network protocols and services. It is not used widely as we expected. The main reason is that its security has not been resolved. We introduce an active network security prototype designed by a pluggable module. It implements three aspects of security, including cryptography and digital signatures; authentication and authorization; revocation; etc. Especially, cryptography solves the integrity and confidentiality of active codes, and the decode mode implements cryptography's replacement and extensibility. Our system is dual nonrepudiation on both. Nonrepudiation on both is that the sender cannot deny that he sends the message; dual nonrepudiation means that nonrepudiation has been done in digital signature authentication and authorization authentication. The section of revocation designed according to the active network guarantees the validity of active code's execution. We measured latency and throughput of the experimental active network on two services: a prototype for active networks, a prototype of security for active networks. In fact, the security techniques applied in our system have little influence on the latency and throughput of active networks.

Study on Secure Active Network Service Loader Based on Java

Research on security extensions based on Java 2 security architecture

Study of Scalable Security for Active Network

An Agent-Oriented Network Worm Defense System based on Optimized Path

Research of the Packet Authentication and Code Authorization Mechanism for Active Networks

A Prototype of Security for Active Networks

Study of Certificate in Secure Active Networks

Design and Develop of Communication Platform for Active Network

The Research on Security Architecture for Active Networks and Security Mechanism for Active Nodes

Load Inspecting System in Java Parallel Computing Environment

The Open Router Of Active Network And Security

A Cluster-Based Secure Active Network Environment

LoadLord: Loading on the Fly to Defend Against Code-Reuse Attacks

Dynamic Defense Security Model for Network Perimeter

Research of Component-based Security Mechanism for Active Networks

NetSecu: A Collaborative Network Security Platform for In-network Security

An Active Cooperation Defense Model for Large Scale Network

Universal Security Mechanism for Active Network

ON IMPROVED STRATEGY OF ACTIVE RESTRAINT ALGORITHM FOR NETWORK WORMS

Design of Java-based Security MANET Application Framework

Stateless Filtering Based on Enhanced Capabilities