{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,27]],"date-time":"2026-10-27T17:49:49Z","timestamp":1793123389018,"version":"4.5.0"},"publisher-location":"Berlin, Heidelberg","reference-count":66,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540661306","type":"print"},{"value":"9783540487494","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[1999]]},"DOI":"10.1007\/3-540-48749-2_20","type":"book-chapter","created":{"date-parts":[[2007,10,19]],"date-time":"2007-10-19T08:22:57Z","timestamp":1192782177000},"page":"433-451","source":"Crossref","is-referenced-by-count":11,"title":["Security in Active Networks"],"prefix":"10.1007","author":[{"given":"D. Scott","family":"Alexander","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"William A.","family":"Arbaugh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Angelos D.","family":"Keromytis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jonathan M.","family":"Smith","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"20_CR1","unstructured":"D. S. Alexander. ALIEN: A Generalized Computing Model of Active Networks. PhD thesis, University of Pennsylvania, September 1998."},{"issue":"3","key":"20_CR2","doi-asserted-by":"crossref","first-page":"29","DOI":"10.1109\/65.690959","volume":"12","author":"D. S. Alexander","year":"1998","unstructured":"D. S. Alexander, W. A. Arbaugh, M. Hicks, P. Kakkar, A. D. Keromytis, J. T. Moore, C. A. Gunter, S. M. Nettles, and J. M. Smith. The Switch Ware Active Network Architecture. IEEE Network Magazine, special issue on Active and Programmable Networks, 12(3):29\u201336, 1998.","journal-title":"IEEE Network Magazine, special issue on Active and Programmable Networks"},{"issue":"3","key":"20_CR3","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1109\/65.690960","volume":"12","author":"D. S. Alexander","year":"1998","unstructured":"D. S. Alexander, W. A. Arbaugh, A. D. Keromytis, and J. M. Smith. A Secure Active Network Environment Architecture: Realization in SwitchWare. IEEE Network Magazine, special issue on Active and Programmable Networks, 12(3):37\u201345, 1998.","journal-title":"IEEE Network Magazine, special issue on Active and Programmable Networks"},{"issue":"10","key":"20_CR4","doi-asserted-by":"publisher","first-page":"84","DOI":"10.1109\/35.722141","volume":"36","author":"D. S. Alexander","year":"1998","unstructured":"D. Scott Alexander, William A. Arbaugh, Angelos D. Keromytis, and Jonathan M. Smith. Safety and Security of Programmable Network Infrastructures. IEEE Communications Magazine, 36(10):84\u201392, 1998.","journal-title":"IEEE Communications Magazine"},{"key":"20_CR5","doi-asserted-by":"crossref","unstructured":"W. A. Arbaugh, D. J. Farber, and J. M. Smith. A Secure and Reliable Bootstrap Architecture. In Proceedings 1997 IEEE Symposium on Security and Privacy, pages 65\u201371, May 1997.","DOI":"10.1109\/SECPRI.1997.601317"},{"key":"20_CR6","unstructured":"W. A. Arbaugh, A. D. Keromytis, D. J. Farber, and J. M. Smith. Automated Recovery in a Secure Bootstrap Process. In Proceedings of Network and Distributed System Security Symposium, pages 155\u2013167. Internet Society, March 1998."},{"key":"20_CR7","unstructured":"W. A. Arbaugh, A. D. Keromytis, and J. M. Smith. DHCP++: Applying an efficient implementation method for fail-stop cryptographic protocols. In Proceedings of Global Internet (GlobeCom)\u2019 98, November 1998."},{"key":"20_CR8","doi-asserted-by":"crossref","unstructured":"R. Atkinson. Security Architecture for the Internet Protocol. RFC 1825, August 1995.","DOI":"10.17487\/rfc1825"},{"key":"20_CR9","doi-asserted-by":"crossref","unstructured":"B. Bershad, S. Savage, P. Pardyak, E. G. Sirer, M. Fiuczynski, D. Becker, S. Eggers, and C. Chambers. Extensibility, safety and performance in the spin operating system. In Proc. 15th SOSP, pages 267\u2013284, December 1995.","DOI":"10.1145\/224056.224077"},{"key":"20_CR10","doi-asserted-by":"crossref","unstructured":"M. Blaze, J. Feigenbaum, J. Ioannidis, and A. Keromytis. The KeyNote Trust-Management System. Work in Progress, http:\/\/www.cis.upenn.edu\/~angelos\/keynote.html , June 1998.","DOI":"10.17487\/rfc2704"},{"key":"20_CR11","series-title":"Lect Notes Comput Sci","volume-title":"Secure Internet Programming: Security Issues for Mobile and Distributed Objects","author":"M. Blaze","year":"1999","unstructured":"M. Blaze, J. Feigenbaum, J. Ioannidis, and A. Keromytis. The role of trust management in distributed systems security. In Secure Internet Programming [60]."},{"key":"20_CR12","doi-asserted-by":"crossref","unstructured":"R. Braden, L. Zhang, S. Berson, S. Herzog, and S. Jamin. Resource ReSerVation Protocol (RSVP)-Version 1 Functional Specification. Internet RFC 2208, 1997.","DOI":"10.17487\/rfc2209"},{"key":"20_CR13","doi-asserted-by":"crossref","unstructured":"J. S. Chase, H. M. Levy, M. J. Feeley, and E. D. Lazowska. Sharing and Protection in a Single-Address-Space Operating System. In ACM Transactions on Computer systems, November 1994.","DOI":"10.1145\/195792.195795"},{"key":"20_CR14","unstructured":"Paul Christopher Clark. BITS: A Smartcard Protected Operating System. PhD thesis, George Washington University, 1994."},{"key":"20_CR15","volume-title":"X.509: The Directory Authentication Framework","author":"Consultation Committee","year":"1989","unstructured":"Consultation Committee. X.509: The Directory Authentication Framework. International Telephone and Telegraph, International Telecommunications Union, Geneva, 1989."},{"key":"20_CR16","unstructured":"Daemon9, Route, and Infinity. Project neptune. Phrack Magazine, 7(48), 1996."},{"key":"20_CR17","doi-asserted-by":"crossref","unstructured":"S. E. Deering. Host extensions for IP multicasting. Internet RFC 1112, 1989.","DOI":"10.17487\/rfc1112"},{"issue":"6","key":"20_CR18","doi-asserted-by":"publisher","first-page":"644","DOI":"10.1109\/TIT.1976.1055638","volume":"IT-22","author":"W. Diffie","year":"1976","unstructured":"W. Diffie and M.E. Hellman. New Directions in Cryptography. IEEE Transactions on Information Theory, IT-22(6):644\u2013654, Nov 1976.","journal-title":"IEEE Transactions on Information Theory"},{"key":"20_CR19","doi-asserted-by":"publisher","first-page":"107","DOI":"10.1007\/BF00124891","volume":"2","author":"W. Diffie","year":"1992","unstructured":"W. Diffie, P.C. van Oorschot, and M.J. Wiener. Authentication and Authenticated Key Exchanges. Designs, Codes and Cryptography, 2:107\u2013125, 1992.","journal-title":"Designs, Codes and Cryptography"},{"key":"20_CR20","unstructured":"DOD. Trusted Computer System Evaluation Criteria. Technical Report DOD 5200.28-STD, Department of Defense, December 1985."},{"key":"20_CR21","doi-asserted-by":"crossref","unstructured":"L. Gong. A Security Risk of Depending on Synchronized Clocks. ACM Operating Systems Review, 26(1), January 1992.","DOI":"10.1145\/130704.130709"},{"key":"20_CR22","unstructured":"L. Gong and R. Schemers. Implementing Protection Domains in the Java Development Kit 1.2. In Proc. of Network and Distributed System Security Symposium (NDSS), pages 125\u2013134, March 1998."},{"key":"20_CR23","volume-title":"The Java Language Specification","author":"J. Gosling","year":"1996","unstructured":"James Gosling, Bill Joy, and Guy Steele. The Java Language Specification. Addison Wesley, Reading, 1996."},{"key":"20_CR24","series-title":"Lect Notes Comput Sci","volume-title":"Secure Internet Programming: Security Issues for Mobile and Distributed Objects","author":"R. Grimm","year":"1999","unstructured":"R. Grimm and B. Bershad. Providing policy neutral and transparent access control in extensible systems. In Secure Internet Programming [60]."},{"issue":"1","key":"20_CR25","first-page":"5","volume":"2","author":"H. H\u00e4rtig","year":"1993","unstructured":"Hermann H\u00e4rtig, Oliver Kowalski, and Winfried K\u00fchnhauser. The Birlix security architecture. Journal of Computer Security, 2(1):5\u201321, 1993.","journal-title":"Journal of Computer Security"},{"key":"20_CR26","unstructured":"C. Hawblitzel, C. Chang, and G. Czajkowski. Implementing Multiple Protection Domains in Java. In Proc. of the 1998 USENIX Annual Technical Conference, pages 259\u2013270, June 1998."},{"key":"20_CR27","doi-asserted-by":"crossref","unstructured":"M. Hicks, P. Kakkar, J. T. Moore, C. A. Gunter, and S. Nettles. PLAN: A Programming Language for Active Networks. Technical Report MS-CIS-98-25, Department of Computer and Information Science, University of Pennsylvania, February 1998.","DOI":"10.1145\/289423.289431"},{"key":"20_CR28","unstructured":"Mike W. Hicks and Jonathan T. Moore. PLAN Web Page. http:\/\/www.cis.upenn.edu\/~switchware\/PLAN\/ ."},{"issue":"8","key":"20_CR29","doi-asserted-by":"publisher","first-page":"666","DOI":"10.1145\/359576.359585","volume":"21","author":"C. A. R. Hoare","year":"1978","unstructured":"C. A. R. Hoare. Communicating Sequential Processes. Communications of the ACM, 21(8):666\u2013677, August 1978.","journal-title":"Communications of the ACM"},{"key":"20_CR30","doi-asserted-by":"crossref","unstructured":"C.A.R. Hoare. Communicating Sequential Processes. Prentice-Hall, 1984.","DOI":"10.1007\/978-3-662-09507-2_19"},{"key":"20_CR31","unstructured":"B. Lampson and R. Rivest. Cryptography and Information Security Group Research Project: A Simple Distributed Security Infrastructure. Technical report, MIT, 1997."},{"key":"20_CR32","doi-asserted-by":"publisher","first-page":"265","DOI":"10.1145\/138873.138874","volume":"10","author":"B. Lampson","year":"1992","unstructured":"Butler Lampson, Martin Abadi, and Michael Burrows. Authentication in Distributed Systems: Theory and Practice. ACM Transactions on Computer Systems, v10:265\u2013310, November 1992.","journal-title":"ACM Transactions on Computer Systems"},{"key":"20_CR33","series-title":"Lect Notes Comput Sci","volume-title":"Secure Internet Programming: Security Issues for Mobile and Distributed Objects","author":"X. Leroy","year":"1999","unstructured":"X. Leroy and F. Rouaix. Security properties of typed applets. In Secure Internet Programming [60]."},{"key":"20_CR34","unstructured":"Xavier Leroy. The Caml Special Light System (Release 1.10). http:\/\/pauillac.inria.fr\/ocaml."},{"issue":"7","key":"20_CR35","doi-asserted-by":"publisher","first-page":"1280","DOI":"10.1109\/49.536480","volume":"14","author":"I. M. Leslie","year":"1996","unstructured":"I. M. Leslie, D. McAuley, R. Black, T. Roscoe, P. Barham, D. Evers, R. Fair-bairns, and E. Hyden. The Design and Implementation of an Operating System to Support Distributed Multimedia Applications. IEEE Journal on Selected Areas in Communications, 14(7):1280\u20131297, September 1996.","journal-title":"IEEE Journal on Selected Areas in Communications"},{"key":"20_CR36","doi-asserted-by":"crossref","unstructured":"J. Y. Levy, J. K. Ousterhout, and B. B. Welch. The Safe-Tcl Security Model. In Proc. of the 1998 USENIX Annual Technical Conference, pages 271\u2013282, June 1998.","DOI":"10.1007\/3-540-68671-1_12"},{"key":"20_CR37","unstructured":"Fran\u00e7ois Louaix. A Web Navigator with Applets in Caml. In Fifth WWW Conference, 1996."},{"key":"20_CR38","doi-asserted-by":"crossref","unstructured":"D.D. Clark M.D. Schroeder and J.H. Saltzer. The MULTICS Kernel Design Project. In Sixth ACM Symposium on Operating Systems Principles, pages 43\u201356, 1977.","DOI":"10.1145\/1067625.806546"},{"key":"20_CR39","unstructured":"R. Milner, M. Tofte, and R. Harper. The Definition of Standard ML. MIT Press, 1990."},{"key":"20_CR40","unstructured":"A. B. Montz, D. Mosberger, S. W. O\u2019Malley, L. L. Peterson, T. A. Proebsting, and J. H. Hartman. Scout: A communications-oriented operating system. Technical report, Department of Computer Science, University of Arizona, June 1994."},{"key":"20_CR41","unstructured":"J. Moore. Mobile Code Security Techniques. Technical Report MS-CIS-98-28, University of Pennsylvania, May 1998."},{"key":"20_CR42","doi-asserted-by":"crossref","unstructured":"G. Morrisett, D. Walker, K. Crary, and N. Glew. From System F to Typed Assembly Language. In Proc. of the 25th ACM Symposium on Principles of Programming Languages, January 1998.","DOI":"10.1145\/268946.268954"},{"key":"20_CR43","unstructured":"Data Encryption Standard, January 1977."},{"key":"20_CR44","doi-asserted-by":"publisher","first-page":"106","DOI":"10.1145\/263699.263712","volume-title":"Proceedings of the 24th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)","author":"G. C. Necula","year":"1997","unstructured":"George C. Necula. Proof-Carrying Code. In Proceedings of the 24th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL), pages 106\u2013119. ACM Press, New York, January 1997."},{"key":"20_CR45","doi-asserted-by":"crossref","unstructured":"George C. Necula and Peter Lee. Safe Kernel Extensions Without Run-Time Checking. In Second Symposium on Operating System Design and Implementation (OSDI), pages 229\u2013243. Usenix, Seattle, 1996.","DOI":"10.1145\/248155.238781"},{"key":"20_CR46","unstructured":"Peter G. Neumann. Architectures and Formal Representations for Secure Systems. Final Report. SRI Project 6401 A002, SRI International, October 1995."},{"key":"20_CR47","series-title":"Lect Notes Comput Sci","volume-title":"Secure Internet Programming: Security Issues for Mobile and Distributed Objects","author":"R. Nicola De","year":"1999","unstructured":"R. De Nicola, G. L. Ferrari, and R. Pugliese. Types as specifications of access policies. In Secure. Internet Programming [60]."},{"key":"20_CR48","unstructured":"Digital Signature Standard, May 1994."},{"key":"20_CR49","unstructured":"Secure Hash Standard, April 1995. Also known as: 59 Fed Reg 35317 (1994)."},{"key":"20_CR50","unstructured":"Cracker Attack Paralyzes PANIX. RISKS Digest. Volume 18. Issue 45., September 1996."},{"key":"20_CR51","unstructured":"C. Partridge and A. Jackson. Smart Packets. Technical report, BBN, 1996. http:\/\/www.net-tech.bbn.com-\/smtpkts\/smtpkts-index.html ."},{"key":"20_CR52","doi-asserted-by":"crossref","unstructured":"Jon Postel. User Datagram Protocol. Internet RFC 768, 1980.","DOI":"10.17487\/rfc0768"},{"key":"20_CR53","doi-asserted-by":"crossref","unstructured":"Jon Postel. Internet Protocol. Internet RFC 791, 1981.","DOI":"10.17487\/rfc0791"},{"key":"20_CR54","doi-asserted-by":"crossref","unstructured":"J. H. Saltzer. Protection and the Control of Information Sharing in Multics. In Communications of the ACM, pages 388\u2013402, July 1974.","DOI":"10.1145\/361011.361067"},{"key":"20_CR55","unstructured":"M. D. Schroeder. Cooperation of Mutually Suspicious Subsystems in a Computer Utility. PhD thesis, MIT, September 1972."},{"key":"20_CR56","doi-asserted-by":"crossref","unstructured":"M.D. Schroeder. Engineering a Security Kernel for MULTICS. In Fifth Symposium on Operating Systems Principles, pages 125\u2013132, November 1975.","DOI":"10.1145\/800213.806518"},{"key":"20_CR57","unstructured":"J. M. Smith, D. J. Farber, C. A. Gunter, S. M Nettles, D. C. Feldmeier, and W. D. Sincoskie. Switch Ware: Accelerating Network Evolution. Technical Report MS-CIS-96-38, CIS Dept. University of Pennsylvania, 1996."},{"key":"20_CR58","doi-asserted-by":"crossref","unstructured":"P. Syverson. A Taxonomy of Replay Attacks. In Proceedings of the Computer Security Foundations Workshop VII (CSFW7), June 1994.","DOI":"10.21236\/ADA463948"},{"key":"20_CR59","unstructured":"J.D. Tygar and Bennet Yee. DYAD: A System for Using Physically Secure Coprocessors. Technical Report CMU-CS-91-140R, Carnegie Mellon University, May 1991."},{"key":"20_CR60","series-title":"Lect Notes Comput Sci","doi-asserted-by":"crossref","DOI":"10.1007\/3-540-48749-2","volume-title":"Secure Internet Programming: Security Issues for Mobile and Distributed Objects","author":"J. Vitek","year":"1999","unstructured":"Jan Vitek and Christian Jensen. Secure Internet Programming: Security Issues for Mobile and Distributed Objects. Lecture Notes in Computer Science. Springer-Verlag Inc., New York, NY, USA, 1999."},{"key":"20_CR61","series-title":"Lect Notes Comput Sci","volume-title":"Secure Internet Programming: Security Issues for Mobile and Distributed Objects","author":"T. Eicken von","year":"1999","unstructured":"T. von Eicken. J-kernel a capability based operating system for java. In Secure Internet Programming [60]."},{"key":"20_CR62","doi-asserted-by":"crossref","unstructured":"R. Wahbe, S. Lucco, T. E. Anderson, and S. L. Graham. Efficient Software-based Fault Isolation. In Proc. of the 14th Symposium on Operating System Principles, pages 203\u2013216, December 1993.","DOI":"10.1145\/168619.168635"},{"key":"20_CR63","unstructured":"Ian Wakeman, Alan Jeffrey, Rory Graves, and Tim Owen. Designing a Programming Language for Active Networks, submitted to Hipparch special issue of Network and ISDN Systems, June 1998. http:\/\/www.cogs.susx.ac.uk\/projects\/-safetynet\/papers\/isdn.ps.gz ."},{"key":"20_CR64","volume-title":"IEEE OpenArch Proceedings","author":"D. J. Wetherall","year":"1998","unstructured":"David J. Wetherall, John Guttag, and David L. Tennenhouse. Ants: A toolkit for building and dynamically deploying network protocols. In IEEE OpenArch Proceedings. IEEE Computer Society Press, Los Alamitos, April 1998."},{"key":"20_CR65","unstructured":"Bennet Yee. Using Secure Coprocessors. PhD thesis, Carnegie Mellon University, 1994."},{"key":"20_CR66","unstructured":"P. Zimmerman. PGP User\u2019s Manual, 1995."}],"container-title":["Lecture Notes in Computer Science","Secure Internet Programming"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/3-540-48749-2_20","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,3]],"date-time":"2019-05-03T17:37:46Z","timestamp":1556905066000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/3-540-48749-2_20"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[1999]]},"ISBN":["9783540661306","9783540487494"],"references-count":66,"URL":"https:\/\/doi.org\/10.1007\/3-540-48749-2_20","relation":{},"ISSN":["0302-9743"],"issn-type":[{"value":"0302-9743","type":"print"}],"subject":[],"published":{"date-parts":[[1999]]}}}