{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,7]],"date-time":"2025-08-07T09:15:34Z","timestamp":1754558134469,"version":"3.37.3"},"reference-count":64,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2022,9,1]],"date-time":"2022-09-01T00:00:00Z","timestamp":1661990400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,9,1]],"date-time":"2022-09-01T00:00:00Z","timestamp":1661990400000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,9,1]],"date-time":"2022-09-01T00:00:00Z","timestamp":1661990400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,9,1]],"date-time":"2022-09-01T00:00:00Z","timestamp":1661990400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100006754","name":"Combat Capabilities Development Command Army Research Laboratory","doi-asserted-by":"publisher","award":["W911NF-13-2-0045"],"award-info":[{"award-number":["W911NF-13-2-0045"]}],"id":[{"id":"10.13039\/100006754","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1946022"],"award-info":[{"award-number":["CNS-1946022"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Serv. Manage."],"published-print":{"date-parts":[[2022,9]]},"DOI":"10.1109\/tnsm.2022.3176820","type":"journal-article","created":{"date-parts":[[2022,5,23]],"date-time":"2022-05-23T20:36:48Z","timestamp":1653338208000},"page":"2349-2365","source":"Crossref","is-referenced-by-count":12,"title":["Enforcing Multilevel Security Policies in Unstable Networks"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1719-3112","authenticated-orcid":false,"given":"Quinn","family":"Burke","sequence":"first","affiliation":[{"name":"Department of Computer Science and Engineering, The Pennsylvania State University, University Park, PA, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9458-3256","authenticated-orcid":false,"given":"Fidan","family":"Mehmeti","sequence":"additional","affiliation":[{"name":"Chair of Communication Networks, Technical University of Munich, Munich, Germany"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6683-6164","authenticated-orcid":false,"given":"Rahul","family":"George","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Pennsylvania State University, University Park, PA, USA"}]},{"given":"Kyle","family":"Ostrowski","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Pennsylvania State University, University Park, PA, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4964-1170","authenticated-orcid":false,"given":"Trent","family":"Jaeger","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Pennsylvania State University, University Park, PA, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1295-4461","authenticated-orcid":false,"given":"Thomas F.","family":"La Porta","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Pennsylvania State University, University Park, PA, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2091-7484","authenticated-orcid":false,"given":"Patrick","family":"McDaniel","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Pennsylvania State University, University Park, PA, USA"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2017.2726066"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2829988.2787506"},{"key":"ref33","first-page":"223","article-title":"Design and implementation of a TCG-based integrity measurement architecture","author":"sailer","year":"2004","journal-title":"Proc 13th Usenix Security Symp"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2020.107706"},{"journal-title":"Gurobi","year":"2022","key":"ref31"},{"journal-title":"POX—Python based SDN Controller Framework","year":"2015","key":"ref30"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/HONET50430.2020.9322835"},{"key":"ref36","first-page":"99","article-title":"Real time network policy checking using header space analysis","author":"kazemian","year":"2013","journal-title":"Proc 10th USENIX Symp Netw Syst Design Implement (NSDI)"},{"key":"ref35","first-page":"1","article-title":"Traffic Morphing: An efficient defense against statistical traffic analysis","author":"wright","year":"2009","journal-title":"Proc NDSS"},{"journal-title":"TCG Guidance for Securing Network Equipment Using TCG Technology","year":"2022","key":"ref34"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/WCNCW.2017.7919082"},{"key":"ref62","first-page":"15","article-title":"Veriflow: Verifying network-wide invariants in real time","author":"khurshid","year":"2013","journal-title":"Proc 10th USENIX Symp Netw Syst Design Implement (NSDI)"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/NFV-SDN.2015.7387415"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2015.08.019"},{"journal-title":"SONiC Fast-Reboot (Fast-Reload) Design","year":"2022","key":"ref28"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.21"},{"journal-title":"Loading and Managing System Images Configuration Guide Cisco IOS Release 15S","year":"2022","key":"ref27"},{"journal-title":"Mininet—Realistic Virtual SDN Network Emulator","year":"2017","key":"ref29"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2005.1509968"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2015.2415794"},{"journal-title":"Opendaylight Sdn Controller","year":"2016","key":"ref20"},{"key":"ref22","first-page":"1","article-title":"Using link cuts to attack Internet routing","author":"bellovin","year":"2003","journal-title":"Proc 12th USENIX Security Symp"},{"journal-title":"The Frenetic Project","year":"2022","key":"ref21"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1402946.1402967"},{"key":"ref23","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-319-11008-0","author":"conforti","year":"2014","journal-title":"Integer Programming"},{"journal-title":"Openvswitch","year":"2022","key":"ref26"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2011.111002"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342458"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2012.144"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/EWSDN.2014.39"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3341302.3342088"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/2043164.2018470"},{"key":"ref56","first-page":"113","article-title":"Header space analysis: Static checking for networks","author":"kazemian","year":"2012","journal-title":"Proc 9th USENIX Symp Netw Syst Design Implement"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.1990.143753"},{"key":"ref54","article-title":"Security-enhanced linux","author":"loscocco","year":"2001","journal-title":"Proc Linux 2 5 Kernel Summit"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/69.591453"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/UCC.2015.16"},{"key":"ref10","first-page":"166","article-title":"The entity-relationship model for multilevel security","author":"pernul","year":"1993","journal-title":"Proc Int Conf Conceptual Model"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.78"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2018.2825026"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2006.34"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ASET.2017.7983668"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2020.3045998"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2868220"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2474118"},{"key":"ref17","article-title":"Survey and taxonomy of adversarial reconnaissance techniques","author":"roy","year":"2021","journal-title":"arXiv 2105 04749"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3050220.3050223"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2551203"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1186\/2192-113X-1-15"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/32.55093"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.5121\/csit.2013.3508"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2010.5680360"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.21236\/ADA023588"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2008.04.002"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382260"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/360051.360056"},{"key":"ref46","first-page":"15","article-title":"FIREMAN: A toolkit for firewall modeling and analysis","author":"yuan","year":"2006","journal-title":"Prof IEEE Symp Security and Privacy (SP)"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.3390\/electronics8060604"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.28"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2003.1254322"},{"key":"ref42","article-title":"An optimization-based approach for flow table capacity bottleneck mitigation in software-defined networks","author":"bauer","year":"2021","journal-title":"arXiv 2109 08482"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.11.004"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/1851275.1851224"},{"key":"ref43","first-page":"117","article-title":"The design and implementation of open vSwitch","author":"pfaff","year":"2015","journal-title":"Proc 12th USENIX Symp Netw Syst Design Implement (NSDI)"}],"container-title":["IEEE Transactions on Network and Service Management"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/4275028\/9917435\/9779867-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4275028\/9917435\/09779867.pdf?arnumber=9779867","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,2,6]],"date-time":"2023-02-06T00:11:01Z","timestamp":1675642261000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9779867\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,9]]},"references-count":64,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tnsm.2022.3176820","relation":{},"ISSN":["1932-4537","2373-7379"],"issn-type":[{"type":"electronic","value":"1932-4537"},{"type":"electronic","value":"2373-7379"}],"subject":[],"published":{"date-parts":[[2022,9]]}}}