Can I read A Step Towards On-Path Security Function Outsourcing on EtoBox?

A Step Towards On-Path Security Function Outsourcing by Lee, Jehyun; Kang, Min Suk; Divakaran, Dinil Mon; Thet, Phyo May; Singhai, Videet; You, Jun Seung is a scholarly article available to read on EtoBox.

What is A Step Towards On-Path Security Function Outsourcing about?

Security function outsourcing has witnessed both research and deployment in the recent years. While most existing services take a straight-forward approach of cloud hosting, on-path transit networks (such as ISPs) are increasingly more interested in offering outsourced security services to end users. Recent proposals (such as SafeBricks and mbTLS) have made it possible to outsource sensitive security applications to untrusted, arbitrary networks, rendering on-path security function outsourcing more promising than ever. However, to provide on-path security function outsourcing, there is one crucial component that is still missing -- a practical end-to-end network protocol. Thus, the discovery and orchestration of multiple capable and willing transit networks for user-requested security functions have only been assumed in many studies without any practical solutions. In this work, we propose Opsec, an end-to-end security-outsourcing protocol that fills this gap and brings us closer to the vision of on-path security function outsourcing. Opsec automatically discovers one or more transit ISPs between a client and a server, and requests user-specified security functions efficiently. Whe

Author

Lee, Jehyun; Kang, Min Suk; Divakaran, Dinil Mon; Thet, Phyo May; Singhai, Videet; You, Jun Seung

Published

2021

Language

EN