SeRViTR: A framework, implementation, and a testbed for a trustworthy future Internet

详细信息    查看全文

• 作者：Shingo Ata^a ; ^{ata@info.eng.osaka-cu.ac.jp" class="auth_mail}Author Vitae ; Dijiang Huang^b ; ^{dijiang.huang@asu.edu" class="auth_mail}Author Vitae ; Xuan Liu^c ; ^{Xuan.Liu@umkc.edu" class="auth_mail}Author Vitae ; Akira Wada^a ; ^{wada@n.info.eng.osaka-cu.ac.jp" class="auth_mail}Author Vitae ; Tianyi Xing^a ; ^{tianyi.xing@asu.edu" class="auth_mail}Author Vitae ; Parikshit Juluri^c ; ^{pjuluri@mail.umkc.edu" class="auth_mail}Author Vitae ; Chun-Jen Chung^b ; ^{cchung20@asu.edu" class="auth_mail}Author Vitae ; Yasuhiro Sato^d ; ^{sato@jcga.ac.jp" class="auth_mail}Author Vitae ; Deep Medhi^c ; ^e ; ^{dmedhi@umkc.edu" class="auth_mail}Author Vitae
• 关键词：Future internet ; Internet trustworthiness ; Architecture ; Prototype ; Geo-distributed networks ; Network virtualization
• 刊名：Computer Networks
• 出版年：22 April, 2014
• 年：2014
• 卷：63
• 期：Complete
• 页码：128-146
• 全文大小：3155 K

文摘

A flexible, scalable, and robust framework that enables fine-grained flow control under fixed or dynamic policies while addressing trustworthiness as a built-in network level functionality is a desirable goal of the future Internet. Furthermore, the level of trustworthiness may possibly be different from one network to another. It is also desirable to provide user-centric or service-centric routing capabilities to achieve service-oriented traffic controls as well as trust and policy management for security. Addressing these aspects, we present the SeRViTR (Secure and Resilient Virtual Trust Routing) framework. In particular, we discuss the goal and scope of SeRViTR, its implementation details, and a testbed that enables us to demonstrate SeRViTR. We have designed protocols and mechanisms for policy and trust management for SeRViTR and show a validation on the functional implementation of several SeRViTR components to illustrate virtual domains and trust level changes between virtual domains that are achieved under SeRViTR protocols. Going from implementation to testbed, we demonstrate SeRViTR in a virtual network provisioning infrastructure called the Geo-distributed Programmable Layer-2 Networking Environment (G-PLaNE) that connects three institutions spanning the US and Japan.