{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,18]],"date-time":"2026-09-18T10:50:12Z","timestamp":1789728612406,"version":"4.0.1"},"publisher-location":"New York, NY, USA","reference-count":37,"publisher":"ACM","license":[{"start":{"date-parts":[[2016,6,6]],"date-time":"2016-06-06T00:00:00Z","timestamp":1465171200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Science Foundation","award":["NSF-IIS-1527421"],"award-info":[{"award-number":["NSF-IIS-1527421"]}]},{"name":"National Science Foundation","award":["NSF-CNS- 1531127"],"award-info":[{"award-number":["NSF-CNS- 1531127"]}]},{"name":"National Science Foundation","award":["NSF-CNS-1537924"],"award-info":[{"award-number":["NSF-CNS-1537924"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2016,6,6]]},"DOI":"10.1145\/2914642.2914643","type":"proceedings-article","created":{"date-parts":[[2016,6,10]],"date-time":"2016-06-10T13:09:57Z","timestamp":1465564197000},"page":"1-11","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["State-aware Network Access Management for Software-Defined Networks"],"prefix":"10.1145","author":[{"given":"Wonkyu","family":"Han","sequence":"first","affiliation":[{"name":"Arizona State University, Tempe, AZ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongxin","family":"Hu","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ziming","family":"Zhao","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, AZ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Adam","family":"Doup\u00e9","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, AZ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gail-Joon","family":"Ahn","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, AZ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kuang-Ching","family":"Wang","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Juan","family":"Deng","sequence":"additional","affiliation":[{"name":"Clemson University, Clemson, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2016,6,6]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Floodlight: Open SDN Controller. http:\/\/www.projectfloodlight.org.  Floodlight: Open SDN Controller. http:\/\/www.projectfloodlight.org."},{"key":"e_1_3_2_1_2_1","unstructured":"Iperf. https:\/\/iperf.fr\/.  Iperf. https:\/\/iperf.fr\/."},{"key":"e_1_3_2_1_3_1","unstructured":"Mininet: An Instant Virtual Network on Your Laptop. http:\/\/mininet.org.  Mininet: An Instant Virtual Network on Your Laptop. http:\/\/mininet.org."},{"key":"e_1_3_2_1_4_1","unstructured":"Public PCAP Files for download. http:\/\/www.netresec.com\/?page=PcapFiles.  Public PCAP Files for download. http:\/\/www.netresec.com\/?page=PcapFiles."},{"key":"e_1_3_2_1_5_1","unstructured":"Service Function Chaining (SFC) Architecture. https:\/\/tools.ietf.org\/html\/draft-ietf-sfc-architecture-02.  Service Function Chaining (SFC) Architecture. https:\/\/tools.ietf.org\/html\/draft-ietf-sfc-architecture-02."},{"key":"e_1_3_2_1_6_1","unstructured":"Stateful Connection Tracking & Stateful NAT. http:\/\/openvswitch.org\/support\/ovscon2014\/17\/1030-conntrack_nat.pdf.  Stateful Connection Tracking & Stateful NAT. http:\/\/openvswitch.org\/support\/ovscon2014\/17\/1030-conntrack_nat.pdf."},{"key":"e_1_3_2_1_7_1","unstructured":"The Internet Traffic Archive. http:\/\/ita.ee.lbl.gov\/.  The Internet Traffic Archive. http:\/\/ita.ee.lbl.gov\/."},{"key":"e_1_3_2_1_8_1","unstructured":"OpenFlow Switch Specification Version 1.5.1 (Protocol version 0x06) December 2014. https:\/\/www.opennetworking.org\/images\/stories\/downloads\/sdn-resources\/onf-specifications\/openflow\/openflow-switch-v1.5.1.pdf.  OpenFlow Switch Specification Version 1.5.1 (Protocol version 0x06) December 2014. https:\/\/www.opennetworking.org\/images\/stories\/downloads\/sdn-resources\/onf-specifications\/openflow\/openflow-switch-v1.5.1.pdf."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/2491185.2491222"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2602204.2602211"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/2656877.2656890"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1282380.1282382"},{"key":"e_1_3_2_1_13_1","volume-title":"Proceedings of the 15th conference on USENIX Security Symposium. USENIX Association","author":"Casado M.","year":"2006","unstructured":"M. Casado , T. Garfinkel , A. Akella , M. J. Freedman , D. Boneh , N. McKeown , and S. Shenker . Sane: a protection architecture for enterprise networks . In Proceedings of the 15th conference on USENIX Security Symposium. USENIX Association , 2006 . M. Casado, T. Garfinkel, A. Akella, M. J. Freedman, D. Boneh, N. McKeown, and S. Shenker. Sane: a protection architecture for enterprise networks. In Proceedings of the 15th conference on USENIX Security Symposium. USENIX Association, 2006."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2491185.2491203"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.5555\/2616448.2616497"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/2619239.2626313"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2005.9"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1096536.1096541"},{"key":"e_1_3_2_1_19_1","volume-title":"SDN and OpenFlow World Congress","author":"Guerzoni R.","year":"2012","unstructured":"R. Guerzoni Network functions virtualisation: an introduction, benefits, enablers, challenges and call for action, introductory white paper . In SDN and OpenFlow World Congress , 2012 . R. Guerzoni et al. Network functions virtualisation: an introduction, benefits, enablers, challenges and call for action, introductory white paper. In SDN and OpenFlow World Congress, 2012."},{"key":"e_1_3_2_1_20_1","first-page":"171","volume-title":"USENIX Annual Technical Conference, FREENIX Track","author":"Hartmeier D.","year":"2002","unstructured":"D. Hartmeier and A. Systor . Design and Performance of the OpenBSD Stateful Packet Filter (pf) . In USENIX Annual Technical Conference, FREENIX Track , pages 171 -- 180 , 2002 . D. Hartmeier and A. Systor. Design and Performance of the OpenBSD Stateful Packet Filter (pf). In USENIX Annual Technical Conference, FREENIX Track, pages 171--180, 2002."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2620728.2620749"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2534169.2486019"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/2482626.2482638"},{"key":"e_1_3_2_1_24_1","volume-title":"Proceedings of the 9th USENIX conference on Networked Systems Design and Implementation. USENIX Association","author":"Kazemian P.","year":"2012","unstructured":"P. Kazemian , G. Varghese , and N. McKeown . Header space analysis: static checking for networks . In Proceedings of the 9th USENIX conference on Networked Systems Design and Implementation. USENIX Association , 2012 . P. Kazemian, G. Varghese, and N. McKeown. Header space analysis: static checking for networks. In Proceedings of the 9th USENIX conference on Networked Systems Design and Implementation. USENIX Association, 2012."},{"key":"e_1_3_2_1_25_1","first-page":"15","volume-title":"Proceedings of the 10th USENIX conference on Networked Systems Design and Implementation","author":"Khurshid A.","year":"2013","unstructured":"A. Khurshid , X. Zou , W. Zhou , M. Caesar , and P. B. Godfrey . Veriflow: verifying network-wide invariants in real time . In Proceedings of the 10th USENIX conference on Networked Systems Design and Implementation , pages 15 -- 28 . USENIX Association , 2013 . A. Khurshid, X. Zou, W. Zhou, M. Caesar, and P. B. Godfrey. Veriflow: verifying network-wide invariants in real time. In Proceedings of the 10th USENIX conference on Networked Systems Design and Implementation, pages 15--28. USENIX Association, 2013."},{"issue":"6","key":"e_1_3_2_1_26_1","first-page":"12","article-title":"Port knocking from the inside out","volume":"12","author":"Krzywinski M.","year":"2003","unstructured":"M. Krzywinski . Port knocking from the inside out . SysAdmin Magazine , 12 ( 6 ): 12 -- 17 , 2003 . M. Krzywinski. Port knocking from the inside out. SysAdmin Magazine, 12(6):12--17, 2003.","journal-title":"SysAdmin Magazine"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2018436.2018470"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1355734.1355746"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2620728.2620735"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2620728.2620729"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342466"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.29"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382258"},{"key":"e_1_3_2_1_34_1","volume-title":"Juniper Networks White Paper","author":"Roeckl C.","year":"2004","unstructured":"C. Roeckl and C. M. Director . Stateful inspection firewalls . Juniper Networks White Paper , 2004 . C. Roeckl and C. M. Director. Stateful inspection firewalls. Juniper Networks White Paper, 2004."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516684"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2716281.2836100"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2015.45"}],"event":{"name":"SACMAT 2016: The 21st ACM Symposium on Access Control Models and Technologies","location":"Shanghai China","acronym":"SACMAT 2016","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 21st ACM on Symposium on Access Control Models and Technologies"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2914642.2914643","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2914642.2914643","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:56:26Z","timestamp":1750222586000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2914642.2914643"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,6,6]]},"references-count":37,"alternative-id":["10.1145\/2914642.2914643","10.1145\/2914642"],"URL":"https:\/\/doi.org\/10.1145\/2914642.2914643","relation":{},"subject":[],"published":{"date-parts":[[2016,6,6]]},"assertion":[{"value":"2016-06-06","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}