A Credential-Based Data Path Architecture for Assurable Global Networking

Tilman Wolf
2007 MILCOM 2007 - IEEE Military Communications Conference  
The main limitation for achieving information assurance in current data networks lies in absence of security considerations in the original Internet architecture. This shortcoming leads to the need for a new approach to achieving information assurance in networks. We propose a network architecture that uses credentials in the data path to identify, validate, monitor, and control data flows within the network. The important aspect of this approach is that credentials are tracked on the data path
more » ... of the network, not just the end-systems, which implies that each and every packet can be audited. We present a credentials design that is based on Bloom filters and can achieve the desired properties to provide data path assurance.
doi:10.1109/milcom.2007.4454937 fatcat:csqomfzcljdqrn4hvyczg52y5y