01988nas a2200133   4500008004100000245006000041210005800101260001500159300001300174520150800187100002101695700001901716856011901735       2011                        eng d00aSecurity issues for multi - domain resource reservation0 aSecurity issues for multi domain resource reservation  bIGI Global  a 38 - 503 a<p>In this chapter, we deal with the issue of security regarding components that are responsible for provisioning multi-domain network services, either automatically or through some form of administrator interaction. It is evident that a malicious compromise of such a component would have far-reaching implications for the stability of the network. Furthermore, trust between cooperating domains is a delicate issue and each partner in the multi-domain federation has to have some guarantees that peers in the service are not going to be security compromised. We enumerate some of the related dangers and propose ways to limit the attack surface, reduce the intrusion possibilities, and guarantee the quick resolution of any successful violations. The issue of security is studied in two main parts: Inter-domain security, for the communication between domains and the successful negotiation of resource reservations and intra-domain security, for the internal communications within a domain for the initiation of a resource reservation and its actual realization in the network devices. Resource reservation is studied both on the level of IP services based on Differentiated Services architectures, and on the level of dynamic circuit reservation based on Layer 2 technologies. The chapter is completed with a case study on the authentication and authorization framework designed in the context of a pan-european network resource reservation service, in the Geant academic and research network.</p>
1 aBouras, Christos1 aStamos, Kostas  uhttp://telematics.upatras.gr/telematics/publications/security-issues-multi-domain-resource-reservation?language=en