Abstract
While IP Virtual Private Network (VPN), especially its branch IPsec (IP Security), turns out to be a practical solution for secure data exchange through the Internet, it is suffering from the tedious deployment procedure due to the shortage of centralized network management capabilities, and this can easily causes safety outages. This paper proposes to use mobile agents to automate this deployment procedure so as to reach the final goal of real-time data securing across the Internet. The intelligence of mobile agents comes from rules guiding the management of IPsec as proposed by IETF Policy-based Network Management method. An object-oriented policy information model for IPsec is presented. A case study of inter-domain IPsec provisioning, a typical mechanism coping with data security across multiple domains, demonstrates the design and implementation of this data securing mechanism.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Herscovitz, E.: Secure virtual private networks: the future of data communications. International Journal of Network Management 9(4), 213–220 (1999)
IETF IP Security Protocol (IPsec) Workgroup, http://www.ietf.org/html.charters/ipseccharter.html
Yang, K., Galis, A., Mota, T., Michalas, A.: Mobile Agent Security Facility for Safe Configuration of IP Networks. In: Proc. of 2nd Int. Workshop on Security of Mobile Multiagent Systems, Italy, July 2002, pp. 72–77 (2002)
Papavassiliou, S., Puliafito, A., Tomarchio, O., Ye, J.: Mobile agent-based approach for efficient network management and resource allocation: framework and applications. IEEE Journal on Selected Areas in Communications 20(4), 858–872 (2002)
Sloman, M.: Policy Driven Management For Distributed Systems. Journal of Network and System Management 2(4), 333–360 (1994)
IETF Policy workgroup group web page: http://www.ietf.org/html.charters/policycharter.html
Grasshopper website: http://www.grasshopper.de
FreeS/WAN website: http://www.freeswan.org/
Kent, S.: Security Architecture for the Internet Protocol. IETF RFC 2401 (November 1998), Available at: http://www.ietf.org/rfc/rfc2401.txt
Strassner, J., Ellesson, E., Moore, B.: Policy Framework Core Information Model. Internet Draft (May 1999), Available at: http://search.ietf.org/internet-drafts/draft-ietfpolicycore-schema-03.txt
Moore, B.: Policy Core Information Model Extensions. IETF-Draft, IETF Policy Framework Working Group (2002), Available at: http://www.ietf.org/internet-drafts/draftietf-policy-pcim-ext-08.txt
Jason, J.: IPsec Configuration Policy Model. IETF draft (August 2002), Available at: http://www.ietf.org/internet-drafts/draft-ietf-ipsp-config-policy-model-06.txt
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2003 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Yang, K., Guo, X., Zhong, S., Zhou, D., Wang, W. (2003). Data Securing through Rule-Driven Mobile Agents and IPsec. In: Dong, G., Tang, C., Wang, W. (eds) Advances in Web-Age Information Management. WAIM 2003. Lecture Notes in Computer Science, vol 2762. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-45160-0_32
Download citation
DOI: https://doi.org/10.1007/978-3-540-45160-0_32
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-40715-7
Online ISBN: 978-3-540-45160-0
eBook Packages: Springer Book Archive