@inbook{b75d49d50b7e4ca49913bb085d02670c,
title = "Secure name service: A framework for protecting critical internet resources",
abstract = "We propose a novel Secure Name Service (SNS) framework for protecting critical Internet resources from unauthorized accesses, denial of service (DoS) and other attacks. The key idea is to enforce packet-origin authentication through resource virtualization and utilize dynamic name binding for protecting servers under attacks and improving service availability. Different from static network-level security schemes such as IPsec and VPN, SNS is able to dynamically bind the names of critical resources at the service level, which allows us to actively protect the service resources through a distributed filtering mechanism built on authenticated packet forwarding paths. Our prototype implementation of authenticated packet forwarding components on Pentium 4 Linux machines demonstrates that regular Linux platforms are sufficient to support SNS authenticated packet forwarding on 100Mbps or 1Gbps LANs.",
author = "Yingfei Dong and Changho Choi and Zhang, {Zhi Li}",
year = "2004",
doi = "10.1007/978-3-540-24693-0_64",
language = "English (US)",
isbn = "9783540246930",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "783--794",
editor = "Nikolas Mitrou and Kimon Kontovasilis and Rouskas, {George N.} and Ilias lliadis and Lazaros Merakos",
booktitle = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
}