A Firewalling Scheme for Securing MPOA-Based Enterprise Networks

A well-known security problem with MPOA is that cutthrough connections generally bypasses firewall routers if there are any. None of the previously proposed approaches solved the problem properly. In this paper, we propose a novel firewalling scheme for MPOA that nicely fixes the security hole. Our firewalling scheme has three outstanding advantages that make it ideal for securing MPOA-based enterprise networks. First, based on our novel concept of "logical chokepoints", our firewalling scheme does not require the existence of physical chokepoints inside the network. Second, the scheme is nicely embedded into the MPOA protocol so that its cost, performance overhead, and protocol complexity are reduced to a minimum. Third, the scheme is centrally administrate-red so that it scales well to very large networks.

• Type: Conference
• Year: 1998
• Where: HASE
• Authors: Jun Xu, Mukesh Singhal
• Keywords: Control Systems, Firewalling Scheme, HASE 1998, MPOA, Well-known Security Problem