Abstract

In the absence of special mechanisms, network interconnection using DOD or OSI Internet Protocols achieve full connectivity among internet components. However, independent administrative domains (ADs) should be able to interconnect without exposing their internal resources to unrestricted access. Moreover, ADs should be able to protect incoming and outgoing data by specifying or constraining the ADs to, and through, which the data travels. Given these requirements, what layer is most appropriate for the placement of access controls? In this paper we propose a framework for placement and design of access control mechanisms in an environment of interconnected ADs. To the extent network resources require protection, the highest relevant endpoint is the network router and associated packet forwarding and routing protocols. In this sense the end-to-end argument supports implementing these controls at the network layer. We describe the security services that are required by interconnected AD...

Citations