Filters








3 Hits in 1.7 sec

SNAPP: Stateless Network-Authenticated Path Pinning

Bryan Parno, Adrian Perrig, David G. Andersen
2018
This paper examines a new building block for next-generation networks: SNAPP, or Stateless Network-Authenticated Path Pinning.  ...  SNAPP-enabled routers securely embed their routing decisions in the packet headers of a stream of traffic, effectively pinning a flow's path between sender and receiver.  ...  Like a packetswitched network, the path pinning mechanism we present does not require per-flow state in the network.  ... 
doi:10.1184/r1/6468068.v1 fatcat:mvbz7r6fpjgktnkbexmrtaf5qe

SNAPP

Bryan Parno, Adrian Perrig, Dave Andersen
2008 Proceedings of the 2008 ACM symposium on Information, computer and communications security - ASIACCS '08  
This paper examines a new building block for next-generation networks: SNAPP, or Stateless Network-Authenticated Path Pinning.  ...  In the next section, we review work related to SNAPP. In §3, we consider the design requirements for a path pinning system.  ...  The contribution of this work is a stateless, secure path-pinning building block that provides numerous benefits without the drawbacks of prior approaches.  ... 
doi:10.1145/1368310.1368336 dblp:conf/ccs/ParnoPA08 fatcat:mursrjngpneqhgw6fr5zep7jpm

Self-Routing Denial-of-Service Resistant Capabilities Using In-packet Bloom Filters

Christian Esteve Rothenberg, Petri Jokela, Pekka Nikander, Mikko Sarela, Jukka Ylitalo
2009 2009 European Conference on Computer Network Defense  
The approach is based on forwarding identifiers that act simultaneously as path designators, i.e. define which path the packet should take, and as capabilities, i.e. effectively allowing the forwarding  ...  nodes along the path to enforce a security policy where only explicitly authorized packets are forwarded.  ...  Our secure fast-path forwarding mechanism is close to the stateless path pinning service provided by SNAPP [13] , where IP forwarding decisions are cached into the flow into the flow initiating packets  ... 
doi:10.1109/ec2nd.2009.14 fatcat:npqrcmxnfnhbxnbviylee3w5cq