Details
| Original language | English |
|---|---|
| Title of host publication | Proceedings of the 5th International Conference on Networking and Services, ICNS 2009 |
| Pages | 481-486 |
| Number of pages | 6 |
| Publication status | Published - 2009 |
| Event | 5th International Conference on Networking and Services, ICNS 2009 - Valencia, Spain Duration: 20 Apr 2009 → 25 Apr 2009 |
Publication series
| Name | Proceedings of the 5th International Conference on Networking and Services, ICNS 2009 |
|---|
Abstract
Grid computing provides users with transparent access to substantial compute and storage resources. Up to now the main focus lay in the development of Grid infrastructures and the development of services providing access to Grid resources. This leads to a negligence of security aspects, which, for example, leads to the recommendation of open wide port ranges on firewalls protecting the Grid resources. In this paper we present an approach for a dynamic firewall operation facilitated by a strong inline authentication for every TCP connection. The presented approach, which is based on X.509 certificates and public-key encryption uses TCP segments exchanged during the TCP three-way handshake between the client and the server to transport user authentication information. Firewalls on the path use this authentication information to authorize the connection. To distinguish the authentication information in the TCP segments from application data a new TCP option tcpauthn is introduced.
ASJC Scopus subject areas
- Computer Science(all)
- Computer Networks and Communications
- Engineering(all)
- Electrical and Electronic Engineering
Cite this
- Standard
- Harvard
- Apa
- Vancouver
- BibTeX
- RIS
Proceedings of the 5th International Conference on Networking and Services, ICNS 2009. 2009. p. 481-486 4976806 (Proceedings of the 5th International Conference on Networking and Services, ICNS 2009).
Research output: Chapter in book/report/conference proceeding › Conference contribution › Research › peer review
}
TY - GEN
T1 - TCP-AuthN
T2 - 5th International Conference on Networking and Services, ICNS 2009
AU - Wiebelitz, Jan
AU - Kunz, Christopher
AU - Piger, Stefan
AU - Grimm, Christian
PY - 2009
Y1 - 2009
N2 - Grid computing provides users with transparent access to substantial compute and storage resources. Up to now the main focus lay in the development of Grid infrastructures and the development of services providing access to Grid resources. This leads to a negligence of security aspects, which, for example, leads to the recommendation of open wide port ranges on firewalls protecting the Grid resources. In this paper we present an approach for a dynamic firewall operation facilitated by a strong inline authentication for every TCP connection. The presented approach, which is based on X.509 certificates and public-key encryption uses TCP segments exchanged during the TCP three-way handshake between the client and the server to transport user authentication information. Firewalls on the path use this authentication information to authorize the connection. To distinguish the authentication information in the TCP segments from application data a new TCP option tcpauthn is introduced.
AB - Grid computing provides users with transparent access to substantial compute and storage resources. Up to now the main focus lay in the development of Grid infrastructures and the development of services providing access to Grid resources. This leads to a negligence of security aspects, which, for example, leads to the recommendation of open wide port ranges on firewalls protecting the Grid resources. In this paper we present an approach for a dynamic firewall operation facilitated by a strong inline authentication for every TCP connection. The presented approach, which is based on X.509 certificates and public-key encryption uses TCP segments exchanged during the TCP three-way handshake between the client and the server to transport user authentication information. Firewalls on the path use this authentication information to authorize the connection. To distinguish the authentication information in the TCP segments from application data a new TCP option tcpauthn is introduced.
UR - http://www.scopus.com/inward/record.url?scp=67650675834&partnerID=8YFLogxK
U2 - 10.1109/ICNS.2009.35
DO - 10.1109/ICNS.2009.35
M3 - Conference contribution
AN - SCOPUS:67650675834
SN - 9780769535869
T3 - Proceedings of the 5th International Conference on Networking and Services, ICNS 2009
SP - 481
EP - 486
BT - Proceedings of the 5th International Conference on Networking and Services, ICNS 2009
Y2 - 20 April 2009 through 25 April 2009
ER -