Differentially secure multicasting and its implementation methods

Stephanie Lee Holeman

doi:10.1016/S0167-4048(02)00814-3

2002-11-01

PRE

Stephanie Lee Holeman

Manimaran Govindarasu

James Davis

Anirban Chakrabarti

DOI：10.1016/S0167-4048(02)00814-3

原文链接

摘要

En 中文

Though the areas of secure multicast group architecture, key distribution and sender authentication are under scrutiny, one topic that has not been explored is how to integrate these with multi-level security. Multi-level security is the ability to distinguish subjects according to classification levels, which determines to what degree they can access confidential objects. In the case of groups, this means that some members can exchange messages at a higher sensitivity level than others. The Bell-La Padula model [BL76] outlines the rules of these multi-level accesses. In multicast groups that employ multi-level security, some of these rules are not desirable so a modified set of rules is developed in this paper and is termed differential security. Also, this paper proposes three methods to set up a differentially secure multicast group: (i) Naive approach, (h) multiple tree differential security (DiffSec) approach, mid (W) single DiffSec tree approach. In order to evaluate the performances (in terms of the number of links used per packet transmitted) of these approaches, extensive simulation experiments were conducted by varying the network connectivity and group size for both uniform and non,uniform. membership distribution across security levels. Our studies show that the multiple tree and single DiffSec tree approaches perform much better than the Naive approach. While the multiple tree approach could be implemented using current technology, this scheme consumes many times more addresses and network resources than the single DiffSec tree approach. From our studies, we conclude that the single DiffSec tree is a viable option for supporting multi-level security as it maximizes the resource utilization and is also scalable.