Sizzle: A Standards-Based End-to-End Security Architecture for the Embedded Internet (Best Paper)

2005 ◽  
Author(s):  
V. Gupta ◽  
M. Millard ◽  
S. Fung ◽  
Yu Zhu ◽  
N. Gura ◽  
...  
Keyword(s):  
Security Architecture ◽  
Embedded Internet ◽  
End To End

Sizzle: A standards-based end-to-end security architecture for the embedded Internet

2005 ◽  
Vol 1 (4) ◽  
pp. 425-445 ◽  
Author(s):  
Vipul Gupta ◽  
Michael Wurm ◽  
Yu Zhu ◽  
Matthew Millard ◽  
Stephen Fung ◽  
...  
Keyword(s):  
Security Architecture ◽  
Embedded Internet ◽  
End To End

scholarly journals Proposing packet-key based end-to-end security architecture for the post-LTE networks

ICT Express ◽  
2019 ◽  
Vol 5 (2) ◽  
pp. 124-130
Author(s):  
Akanksha Saini ◽  
Enrique Festijo ◽  
Younchan Jung
Keyword(s):  
Security Architecture ◽  
Lte Networks ◽  
End To End

End-To-End Security Architecture for Federated Cloud and IoT Networks

2017 ◽  
Author(s):  
Philippe Massonet ◽  
Laurent Deru ◽  
Amel Achour ◽  
Sebastien Dupont ◽  
Anna Levin ◽  
...  
Keyword(s):  
Security Architecture ◽  
End To End

scholarly journals Resolving Network Defense Conflicts with Zero Trust Architectures and Other End-to-End Paradigms

2021 ◽  
Vol 13 (1) ◽  
pp. 1-20
Author(s):  
William R. Simpson ◽  
Kevin E. Foltz
Keyword(s):  
Distributed Computing ◽  
Software Tools ◽  
Security Architecture ◽  
Intended Target ◽  
Network Defense ◽  
Reporting Requirements ◽  
Enterprise Level ◽  
End To End ◽  
Data Theft ◽  
Encrypted Communication

Network defense implies a comprehensive set of software tools to preclude malicious entities from conducting activities such as exfiltration of data, theft of credentials, blocking of services and other nefarious activities. For most enterprises at this time, that defense builds upon a clear concept of the fortress approach. Many of the requirements are based on inspection and reporting prior to delivery of the communication to the intended target. These inspections require decryption of packets and this implies that the defensive suite either impersonates the requestor, or has access to the private cryptographic keysof the servers that are the target of communication. This is in contrast to an end-to-end paradigm where known good entities can communicate directly and no other entity has access to the content unless that content is provided to them. There are many new processes that require end-to-end encrypted communication, including distributed computing, endpoint architectures, and zero trust architectures and enterprise level security. In an end-to-end paradigm, the keys used for authentication, confidentiality, and integrity reside only with the endpoints. This paper examines a formulation that allows unbroken communication, while meeting the inspection and reporting requirements of a network defense. This work is part of a broader security architecture termed Enterprise Level Security (ELS)framework.

Sign in / Sign up

Export Citation Format

Share Document