A thesis submitted in partial fulfillment of the requirements for the degree of Master of Engineering, School of Advanced Technologies

Thesis (M.Eng.) - Asian Institute of Technology, 1998

A concept of active network extends today's conventional computer network by making the network programmable. Since active network enables its node to accept and execute active code embedded in an active packet, security services becomes a very important mechanism to protect active node from unauthorized users This thesis proposed a set of security services for active networks by providing functions of cryptographic algorithms. The thesis renders services of user authentication, data integrity, and data confidentiality for active networks. The services are provided by adding a new transfer unit and secure channel to active network. The transfer unit can transfer active code and data of active network as well as security-related information. Active node receives the transfer unit from the secure channel, perform security checks before passing authenticated information to actual active node environment. Users could specify security options for each transfer unit by providing security mode in the new security-enabled functions of an active code programming language. Experimental results of the security services implementation on PLAN active network demonstrates that each PLAN active node is protected and the PLAN network could be secured.