{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,24]],"date-time":"2025-08-24T00:01:24Z","timestamp":1755993684891,"version":"3.44.0"},"reference-count":37,"publisher":"IEEE","license":[{"start":{"date-parts":[[2015,5,1]],"date-time":"2015-05-01T00:00:00Z","timestamp":1430438400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2015,5,1]],"date-time":"2015-05-01T00:00:00Z","timestamp":1430438400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015,5]]},"DOI":"10.1109\/inm.2015.7140279","type":"proceedings-article","created":{"date-parts":[[2015,7,6]],"date-time":"2015-07-06T17:19:27Z","timestamp":1436203167000},"page":"80-88","source":"Crossref","is-referenced-by-count":20,"title":["EnforSDN: Network policies enforcement with SDN"],"prefix":"10.1109","author":[{"given":"Yaniv","family":"Ben-Itzhak","sequence":"first","affiliation":[{"name":"IBM Research Lab, Haifa, Israel"}]},{"given":"Katherine","family":"Barabash","sequence":"additional","affiliation":[{"name":"IBM Research Lab, Haifa, Israel"}]},{"given":"Rami","family":"Cohen","sequence":"additional","affiliation":[{"name":"Empow Networks"}]},{"given":"Anna","family":"Levin","sequence":"additional","affiliation":[{"name":"IBM Research Lab, Haifa, Israel"}]},{"given":"Eran","family":"Raichstein","sequence":"additional","affiliation":[{"name":"IBM Research Lab, Haifa, Israel"}]}],"member":"263","reference":[{"key":"ref33","article-title":"Enforcing network-wide policies in the presence of dynamic middlebox actions using flowtags","author":"fayazbakhsh","year":"2014","journal-title":"Proceedings of the 11th USENIX Conference on Networked Systems Design and Implementation"},{"journal-title":"ETSI NFVISG","article-title":"Network functions virtualisation. introductory white paper","year":"0","key":"ref32"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2390231.2390233"},{"key":"ref30","article-title":"Stratos: A network-aware orchestration layer for middleboxes in the cloud","author":"gember","year":"2013","journal-title":"CoRR"},{"key":"ref37","article-title":"System and method for dynamic security insertion in network virtualization","author":"sun","year":"2013","journal-title":"13\/861 220"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2619239.2626313"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2620728.2620749"},{"key":"ref34","doi-asserted-by":"crossref","first-page":"279","DOI":"10.1145\/2034574.2034812","article-title":"Frenetic: A network programming language","volume":"46","author":"foster","year":"2011","journal-title":"ACM SIGPLAN Notices"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/IPDPS.2007.370482"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/IPDPS.2004.1302913"},{"key":"ref12","article-title":"Optimized infinibandtm fat-tree routing for shift all-to-all communication patterns","author":"zahavi","year":"2010","journal-title":"Concurrency and Computation Practice and Experience"},{"key":"ref13","article-title":"Data center tcp (dctcp)","author":"alizadeh","year":"2011","journal-title":"ACM SIGCOMM"},{"journal-title":"Netfilter Project","year":"2005","key":"ref14"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1592681.1592693"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2486001.2486026"},{"key":"ref17","first-page":"561","article-title":"NCP: Service replication in data centers through software defined networking","author":"mann","year":"2013","journal-title":"2013 IFIP\/IEEE International Symposium on Integrated Network Management (IM 2013) IM"},{"key":"ref18","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9781139058940","author":"andrade","year":"2014","journal-title":"Fundamentals of Stream Processing Application Design Systems and Analytics"},{"journal-title":"Building three-tier architectures with security groups","year":"2010","key":"ref19"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2535828.2535831"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2377677.2377680"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2486001.2486022"},{"key":"ref3","article-title":"Design and implementation of a consolidated middlebox architecture","author":"sekar","year":"2012","journal-title":"Proc NSDI"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1868447.1868466"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342457"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2070562.2070583"},{"year":"2014","key":"ref8","article-title":"EnforSDN evaluation code"},{"key":"ref7","article-title":"Extending networking into the virtualization layer","author":"pfaff","year":"2009","journal-title":"HotNets"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504737"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/1402958.1402967"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1402946.1402966"},{"article-title":"Stateful connection tracking & stateful nat","year":"2014","author":"pettit","key":"ref20"},{"key":"ref22","article-title":"Distributed firewalls","author":"bellovin","year":"1999","journal-title":"Journal of Login"},{"key":"ref21","article-title":"Middleboxes: Taxonomy and issues","author":"carpenter","year":"2002","journal-title":"RFC 3234 February"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1851275.1851262"},{"key":"ref23","first-page":"190","article-title":"Implementing a distributed firewall","author":"ioannidis","year":"2000","journal-title":"Proceedings of the 7th ACM conference on computer and communications security"},{"key":"ref26","article-title":"Middleboxes no longer considered harmful","volume":"6","author":"walfish","year":"2004","journal-title":"Proceedings of the 6th conference on Symposium on Opearting Systems Design & Implementation"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/1282427.1282403"}],"event":{"name":"2015 IFIP\/IEEE International Symposium on Integrated Network Management (IM)","start":{"date-parts":[[2015,5,11]]},"location":"Ottawa, ON, Canada","end":{"date-parts":[[2015,5,15]]}},"container-title":["2015 IFIP\/IEEE International Symposium on Integrated Network Management (IM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7121095\/7140257\/07140279.pdf?arnumber=7140279","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T00:25:47Z","timestamp":1755908747000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7140279\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,5]]},"references-count":37,"URL":"https:\/\/doi.org\/10.1109\/inm.2015.7140279","relation":{},"subject":[],"published":{"date-parts":[[2015,5]]}}}