Por favor, use este identificador para citar o enlazar este ítem:
https://doi.org/10.1007/s10922-021-09640-6
Twittear
Título: | A Framework for Dynamic Configuration of TLS Connections Based on Standards |
Fecha de publicación: | 20-ene-2022 |
Editorial: | Springer |
Cita bibliográfica: | Journal of Network and Systems Management, Volume 30, article number 24, 2022 |
ISSN: | 1573-7705 1064-7570 |
Palabras clave: | TLS Management SDN YANG |
Resumen: | The Transport Layer Security (TLS) protocol is widely used for protecting end-to-end communications between network peers (applications or nodes). However, the administrators usually have to configure parameters (e.g., cryptography algorithms or authentication credentials) to establish TLS connections manually. However, this way of managing security connections becomes infeasible when the number of network peers is high. This paper proposes a TLS management framework that configures and manages TLS connections in a dynamic and autonomous manner. The solution is based on well-known standardized protocols and models that allow providing the necessary configuration parameters to establish a TLS connection between two network nodes. Nowadays, this is required in several application scenarios such as virtual private networks, virtualized network functions, or service function chains. Our framework is based on standard elements of the Software Defined Networking paradigm, widely adopted to provide flexibility to network management, such as for the scenarios aforementioned. The proposed framework has been implemented in a proof of concept to validate the suitability of the proposed solution to manage the dynamic configuration of TLS connections. The experimental results confirm that the implementation of this framework enables an operable and flexible procedure to manage TLS connections between network nodes in different scenarios. |
Autor/es principal/es: | Pastor-Galindo, Javier López-Millán, Gabriel Marín-López, Rafael Pereñíguez-García, Fernando Cánovas, Óscar |
Facultad/Departamentos/Servicios: | Facultades, Departamentos, Servicios y Escuelas::Departamentos de la UMU::Ingeniería de la Información y las Comunicaciones |
Forma parte de: | FPU18/00304 |
Versión del editor: | https://link.springer.com/article/10.1007/s10922-021-09640-6 |
URI: | http://hdl.handle.net/10201/137868 |
DOI: | https://doi.org/10.1007/s10922-021-09640-6 |
Tipo de documento: | info:eu-repo/semantics/article |
Número páginas / Extensión: | 27 |
Derechos: | info:eu-repo/semantics/openAccess Attribution-NonCommercial-NoDerivatives 4.0 Internacional |
Descripción: | ©2022. This manuscript version is made available under the CC-BY-NC-ND 4.0 license http://creativecommons.org/licenses/by-nc-nd/4.0/ This document is the Accepted, version of a Published Work that appeared in final form in Journal of Network and Systems Management. To access the final edited and published work see https://doi.org/10.1007/s10922-021-09640-6 |
Aparece en las colecciones: | Artículos: Ingeniería y Tecnología de Computadores |
Ficheros en este ítem:
Fichero | Descripción | Tamaño | Formato | |
---|---|---|---|---|
SDN_TLS.pdf | 676,08 kB | Adobe PDF | Visualizar/Abrir |
Este ítem está sujeto a una licencia Creative Commons Licencia Creative Commons