TY - JOUR T1 - The SwitchWare active network architecture JF - IEEE Network Y1 - 1998 A1 - Alexander,D. S A1 - Arbaugh, William A. A1 - Hicks, Michael W. A1 - Kakkar,P. A1 - Keromytis,A. D A1 - Moore,J. T A1 - Gunter,C. A A1 - Nettles,S. M A1 - Smith,J. M KW - active extensions KW - active packets KW - Authentication KW - Computer languages KW - Computer networks KW - cryptography KW - cryptography-based authentication KW - high-integrity base KW - integrity checking KW - IP networks KW - LAN interconnection KW - mobile programs KW - network operating systems KW - packet switching KW - programmable network infrastructure KW - programming languages KW - Protocols KW - Safety KW - safety requirements KW - scalability KW - secure active router infrastructure KW - Security KW - security requirements KW - services KW - strong type checking KW - Switches KW - SwitchWare active network architecture KW - telecommunication network routing KW - Tin KW - usability KW - verification techniques AB - Active networks must balance the flexibility of a programmable network infrastructure against the safety and security requirements inherent in sharing that infrastructure. Furthermore, this balance must be achieved while maintaining the usability of the network. The SwitchWare active network architecture is a novel approach to achieving this balance using three layers: active packets, which contain mobile programs that replace traditional packets; active extensions, which provide services on the network elements and can be dynamically loaded; and a secure active router infrastructure, which forms a high-integrity base on which the security of the other layers depends. In addition to integrity checking and cryptography-based authentication, security in our architecture depends heavily on verification techniques from programming languages, such as strong type checking VL - 12 SN - 0890-8044 CP - 3 M3 - 10.1109/65.690959 ER -