题名 |
Authenticated Access to Reserved Network Resources |
DOI |
10.6633/IJNS.200607.3(1).09 |
作者 |
Kenneth L. Calvert;Srinivasan Venkatraman;James N. Griffioen |
关键词 |
Denial-of-service ; integrated services ; packet authentication ; RSVP |
期刊名称 |
International Journal of Network Security |
卷期/出版年月 |
3卷1期(2006 / 07 / 01) |
页次 |
54 - 64 |
内容语文 |
英文 |
英文摘要 |
Enhanced network services often involve preferential allocation of resources such as transmission capacity (”band- width”) and buffer space to packets belonging to certain flows or traffic classes. Such services are vulnerable to denial-of-service attacks if access to those resources is granted based on information that can be forged, such as source and destination addresses and port numbers. Traditional message authentication codes (MACs) are not de- signed to solve this problem and have high per-packet processing costs. In this paper we propose a packet authentication algorithm specifically designed to solve the problem of protecting access to reserved network resources. We present measurements from a prototype implementation, and argue that our approach is a better solution for this problem than traditional MACs. |
主题分类 |
基礎與應用科學 >
資訊科學 |
被引用次数 |