A dynamic and flexible Access Control and Resource Monitoring Mechanism for Active Nodes

摘要: Active and programmable networks are new paradigms in computer networking. Network nodes have the ability to load execute special purpose programs called service modules (audio transcoder, traffic screening agent, etc.). The either stored on node itself or dynamically downloaded from a module repository installed network node. These designed implemented by provider third party as it is theoretically impossible construct generic algorithm determine what program does, introduction of quantitative access control mechanism seems be promising approach. Therefore, standard security mechanisms an operating system must enhanced. This paper presents administratively limit resources granted modules. discussed technique independent programming languages which services implemented. presented results, achieved with first prototype developed for active networking platform AMnet [4] (Active Multicast Network) very promising.