Next-Generation Network Security

Principal Investigators: Carla Brodley, Kihong Park, Eugene Spafford

Research Assistants: G. Nalawade, L. Feinstein, P. Shah, M. Tripunitara

Sponsor: COAST Laboratory sponsors

The next generation of networks now being deployed and developed has some significant differences from today's common networks. This includes higher-bandwidth and transmission speeds, virtual circuit protocols, and provision for different qualities of service. However, those new technologies will also require security services to protect hosts using them.

This project is intended to design security services in support of these new technologies. The initial focus is on defining the characteristics of a firewall for such an environment. This includes investigation of end-to-end authentication mechanisms, particularly for high-speed networks such as ATM. Future research includes examination of how to enhance audit and monitoring to adequately support services such as misuse and intrusion detection.

1998
Annual Research Report

Department of
Computer Sciences