TOWARDS SECURITY ARCHITECTURE FOR FUTURE ACTIVE IP NETWORKS

Abstract

Active networks allow user-controlled network programmability. A security framework has to assure that an active networks infrastructure will behave as expected and will efficiently deal with malicious attacks, unathorized attempts to execute active code etc. We present here a security architecture that is designed within the FAIN project and aims at supporting multiple heterogeneous execution environments. We argue for the pros and cons as well as why we have selected the specific com-ponents and also take a look at their interworking in order to provide the security services to the execution environments our active network node hosts.