Patterns in network security: an analysis of architectural complexity in securing recursive inter-network architecture networks
OA Version
Citation
Abstract
Recursive Inter-Network Architecture (RINA) networks have a shorter protocol stack
than the current architecture (the Internet) and rely instead upon separation of mech-
anism from policy and recursive deployment to achieve large scale networks. Due
to this smaller protocol stack, fewer networking mechanisms, security or otherwise,
should be needed to secure RINA networks. This thesis examines the security proto-
cols included in the Internet Protocol Suite that are commonly deployed on existing
networks and shows that because of the design principles of the current architecture,
these protocols are forced to include many redundant non-security mechanisms and
that as a consequence, RINA networks can deliver the same security services with
substantially less complexity.