A Cluster-Based Secure Active Network Environment

摘要

We introduce a cluster-based secure active network environment (CSANE) which separates the processing of IP packets from that of active packets in active routers. In this environment, the active code authorized or trusted hy privileged users is executed in the secure execution environment (EE) of the active, router, while others are executed in the secure EE of the nodes in the distributed shared memory (DSM) cluster With the supports of a multi-process Java virtual machine and KcyNote, untrustcd active packets are controlled to securely consume resource. The DSM consistency management makes that active paekels can be parallelly processed in the DSM cluster as if they were processed one by one in ANTS (Active Nerwork Transport System). We demonstrate that GSANE has good security and scalability, hut imposing little changes on traditional routers.