Model-based configuration of VPNs

Lück, Ingo; Vogel, Steffen; Krumm, Heiko

doi:10.1109/noms.2002.1015610

Cited by 21 publications

(31 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Our modelling builds upon the Model-based Management approach [5] and employs a three-layered model whose structure is shown in Fig. 1.…”

Section: Modelling Techniquementioning

confidence: 99%

“…This expanded view encompasses objects that represent hosts, processes, protocols and network interfaces of the system (this detailed view is related to the level PH of the works on model-based management [5]) and supports the process of automated generation of configuration parameters (Sect. 4.4).…”

Section: Actorsmentioning

confidence: 99%

“…Kerberos, FreeS/WAN, Linux IP tables etc.). These back-end functions evaluate the ATPathPermissions and the expanded views of the ASs in order to automatically generate the adequate configuration files for each of the security mechanisms (an extensive explanation on the policy refinement process is beyond the scope of this paper and can be found in [9,5]). …”

Section: Policy Refinement and Configuration Generationmentioning

confidence: 99%

“…This editor incorporates the concept of focus & context-that originated from research on information visualisation-through the techniques of fisheye-view [11] and semantic zooming [3,7]. Furthermore, our work builds upon the policy hierarchy [6] and model-based management [5] approaches in order to assist the above-mentioned configuration management phases of deployment and maintenance. A system model organised in different abstraction layers thus affords a step-wise, tool-assisted system modelling, along with an automated policy refinement that culminates in the generation of low-level configuration parameters.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Improving the Configuration Management of Large Network Security Systems

et al. 2005

View full text Add to dashboard Cite

Abstract. The security mechanisms employed in today's networked environments are increasingly complex and their configuration management has an important role for the protection of these environments. Especially in large scale networks, security administrators are faced with the challenge of designing, deploying, maintaining, and monitoring a huge number of mechanisms, most of which have complicated and heterogeneous configuration syntaxes. This work offers an approach for improving the configuration management of network security systems in large-scale environments. We present a configuration process supported by a modelling technique that uniformly handles different mechanisms and by a graphical editor for the system design. The editor incorporates focus and context concepts for improving model visualisation and navigation.

show abstract

“…Our modelling builds upon the Model-based Management approach [5] and employs a three-layered model whose structure is shown in Fig. 1.…”

Section: Modelling Techniquementioning

confidence: 99%

Section: Actorsmentioning

confidence: 99%

Section: Policy Refinement and Configuration Generationmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Improving the Configuration Management of Large Network Security Systems

et al. 2005

View full text Add to dashboard Cite

show abstract

“…Several approaches for provisioning services such as service object-based approach [3], profile-based service provisioning [4] and model-based configuration [5] have been looked at. This work undertakes a comprehensive provisioning architecture for multiple IP services in the context of the current challenges faced by service providers.…”

Section: Introductionmentioning

confidence: 99%

An Architecture for Provisioning IP Services in an Operations Support System

John¹,

Sugla²,

Krishnan³

et al. 2003

Integrated Network Management VIII

View full text Add to dashboard Cite

Abstract:This paper discusses an architecture for a provisioning system that meets the challenges currently facing service providers in a service and subscriber-based OSS environment. The architecture makes a clear separation between a provisioning core, which is a general framework for provisioning services, and service definitions that model the provisioning view of a service. The architecture is distributed, scalable and extensible and is especially suited for scenarios where a large number of services is expected to be offered, deployed, and managed. The service definitions can be used by the other OSS components to correlate information to provide complete device-to-service-tosubscriber diagnostics for faults, performance degradations, and accounting. It is argued that this approach leads to natural, efficient and effective management solutions.

show abstract

Scalable model‐based configuration management of security services in complex enterprise networks

et al. 2010

View full text Add to dashboard Cite

Security administrators face the challenge of designing, deploying and maintaining a variety of configuration files related to security systems, especially in large‐scale networks. These files have heterogeneous syntaxes and follow differing semantic concepts. Nevertheless, they are interdependent due to security services having to cooperate and their configuration to be consistent with each other, so that global security policies are completely and correctly enforced. To tackle this problem, our approach supports a comfortable definition of an abstract high‐level security policy and provides an automated derivation of the desired configuration files. It is an extension of policy‐based management and policy hierarchies, combining model‐based management (MBM) with system modularization. MBM employs an object‐oriented model of the managed system to obtain the details needed for automated policy refinement. The modularization into abstract subsystems (ASs) segment the system—and the model—into units which more closely encapsulate related system components and provide focused abstract views. As a result, scalability is achieved and even comprehensive IT systems can be modelled in a unified manner. The associated tool MoBaSeC (Model‐Based‐Service‐Configuration) supports interactive graphical modelling, automated model analysis and policy refinement with the derivation of configuration files. We describe the MBM and AS approaches, outline the tool functions and exemplify their applications and results obtained. Copyright © 2010 John Wiley & Sons, Ltd.

show abstract

Model-based configuration of VPNs

Cited by 21 publications

References 12 publications

Improving the Configuration Management of Large Network Security Systems

Improving the Configuration Management of Large Network Security Systems

An Architecture for Provisioning IP Services in an Operations Support System

Scalable model‐based configuration management of security services in complex enterprise networks

Contact Info

Product

Resources

About