TY - GEN
T1 - A secured delegation of remote services on IPv6 home networks
AU - Preda, Stere
AU - Toutain, Laurent
AU - Garcia-Alfaro, Joaquin
PY - 2009/12/1
Y1 - 2009/12/1
N2 - IPv6 is an attractive technology for innovative services such as health care monitoring, alarm systems, peer to peer applications, virtual machine systems and so on. The generalization of end to end paradigm, possible due to the length of IPv6 addresses, eases the deployment of such services. Nevertheless end to end connection can be a threat since application can be easily accessible from outside and thus a compromised application may endanger others. In this paper, we study some of the advantages of using the IPv6 protocol in home networks but most particularly how to improve the security of home networks. We present an architecture allowing the definition of a partition between groups of applications and where communication between these groups is not permitted if there is no explicit delegation. We overview the key points of the current implementation and some initial results of our approach.
AB - IPv6 is an attractive technology for innovative services such as health care monitoring, alarm systems, peer to peer applications, virtual machine systems and so on. The generalization of end to end paradigm, possible due to the length of IPv6 addresses, eases the deployment of such services. Nevertheless end to end connection can be a threat since application can be easily accessible from outside and thus a compromised application may endanger others. In this paper, we study some of the advantages of using the IPv6 protocol in home networks but most particularly how to improve the security of home networks. We present an architecture allowing the definition of a partition between groups of applications and where communication between these groups is not permitted if there is no explicit delegation. We overview the key points of the current implementation and some initial results of our approach.
KW - Access control
KW - Home networking
KW - Ipv6
KW - Network security
U2 - 10.1109/CRISIS.2009.5411984
DO - 10.1109/CRISIS.2009.5411984
M3 - Conference contribution
AN - SCOPUS:77951438023
SN - 9781424444991
T3 - Post-Proceedings of the 4th International Conference on Risks and Security of Internet and Systems, CRiSIS 2009
SP - 12
EP - 18
BT - Post-Proceedings of the 4th International Conference on Risks and Security of Internet and Systems, CRiSIS 2009
T2 - 4th International Conference on Risks and Security of Internet and Systems, CRiSIS 2009
Y2 - 19 October 2009 through 22 October 2009
ER -