Implementing Hop-by-Hop Security Prototype Frameworks in Active Networks

This paper focuses on implementing security of large scale Active Networks on the Abone platform. We set up hop-by-hop security prototype framework with packet authentication and integrity by integrating many non-active components and traditional secure functions. We put forward hierarchy-distributed key and security association policy, and extend KLIPS and alarm indications. Finally, we compare LKH with EK using experiments, and conclude that LKH is suitable for the multicast members' revocation.