{"id":"https://openalex.org/W2143448712","doi":"https://doi.org/10.1145/1592681.1592685","title":"Delegating network security with more information","display_name":"Delegating network security with more information","publication_year":2009,"publication_date":"2009-08-21","ids":{"openalex":"https://openalex.org/W2143448712","doi":"https://doi.org/10.1145/1592681.1592685","mag":"2143448712"},"language":"en","primary_location":{"id":"doi:10.1145/1592681.1592685","is_oa":true,"landing_page_url":"https://doi.org/10.1145/1592681.1592685","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/1592681.1592685","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st ACM workshop on Research on enterprise networking","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/1592681.1592685","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061379442","display_name":"Jad Naous","orcid":null},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Jad Naous","raw_affiliation_strings":["Stanford University, Stanford, CA, USA"],"affiliations":[{"raw_affiliation_string":"Stanford University, Stanford, CA, USA","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020086434","display_name":"Ryan Stutsman","orcid":"https://orcid.org/0000-0001-5446-9603"},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ryan Stutsman","raw_affiliation_strings":["Stanford University, Stanford, CA, USA"],"affiliations":[{"raw_affiliation_string":"Stanford University, Stanford, CA, USA","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085123747","display_name":"David Mazi\u00e8res","orcid":"https://orcid.org/0000-0002-1253-6449"},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Mazieres","raw_affiliation_strings":["Stanford University, Stanford, CA, USA"],"affiliations":[{"raw_affiliation_string":"Stanford University, Stanford, CA, USA","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035085176","display_name":"Nick McKeown","orcid":"https://orcid.org/0009-0000-3657-3933"},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nick McKeown","raw_affiliation_strings":["Stanford University, Stanford, CA, USA"],"affiliations":[{"raw_affiliation_string":"Stanford University, Stanford, CA, USA","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082808262","display_name":"Nickolai Zeldovich","orcid":"https://orcid.org/0000-0003-0238-2703"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nickolai Zeldovich","raw_affiliation_strings":["MIT CSAIL, Cambridge, MA, USA"],"affiliations":[{"raw_affiliation_string":"MIT CSAIL, Cambridge, MA, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5061379442"],"corresponding_institution_ids":["https://openalex.org/I97018004"],"apc_list":null,"apc_paid":null,"fwci":3.2629,"has_fulltext":true,"cited_by_count":34,"citation_normalized_percentile":{"value":0.92730247,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"19","last_page":"26"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/delegate","display_name":"Delegate","score":0.9004634618759155},{"id":"https://openalex.org/keywords/delegation","display_name":"Delegation","score":0.8465780019760132},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6744325160980225},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6694545149803162},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.666752815246582},{"id":"https://openalex.org/keywords/network-administrator","display_name":"Network administrator","score":0.6602198481559753},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.545470118522644},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4803568124771118},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.47884154319763184},{"id":"https://openalex.org/keywords/information-flow","display_name":"Information flow","score":0.47509610652923584},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.460789293050766},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.4603578448295593},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.341937780380249},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3270597457885742},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.309889018535614}],"concepts":[{"id":"https://openalex.org/C143273055","wikidata":"https://www.wikidata.org/wiki/Q2382794","display_name":"Delegate","level":2,"score":0.9004634618759155},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.8465780019760132},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6744325160980225},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6694545149803162},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.666752815246582},{"id":"https://openalex.org/C2779173999","wikidata":"https://www.wikidata.org/wiki/Q680296","display_name":"Network administrator","level":2,"score":0.6602198481559753},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.545470118522644},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4803568124771118},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.47884154319763184},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.47509610652923584},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.460789293050766},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.4603578448295593},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.341937780380249},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3270597457885742},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.309889018535614},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.0}],"mesh":[],"locations_count":6,"locations":[{"id":"doi:10.1145/1592681.1592685","is_oa":true,"landing_page_url":"https://doi.org/10.1145/1592681.1592685","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/1592681.1592685","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st ACM workshop on Research on enterprise networking","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.158.1749","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.158.1749","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.scs.stanford.edu/~dm/home/papers/naous:ident++.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.158.8379","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.158.8379","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://yuba.stanford.edu/~jnaous/papers/wren27-naous.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.211.6884","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.211.6884","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://conferences.sigcomm.org/sigcomm/2009/workshops/wren/papers/p19.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.212.9414","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.212.9414","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://people.csail.mit.edu/nickolai/papers/naous-ident.pdf","raw_type":"text"},{"id":"pmh:oai:dspace.mit.edu:1721.1/67004","is_oa":true,"landing_page_url":"http://hdl.handle.net/1721.1/67004","pdf_url":null,"source":{"id":"https://openalex.org/S4306400425","display_name":"DSpace@MIT (Massachusetts Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I63966007","host_organization_name":"Massachusetts Institute of Technology","host_organization_lineage":["https://openalex.org/I63966007"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"MIT web domain","raw_type":"http://purl.org/eprint/type/ConferencePaper"}],"best_oa_location":{"id":"doi:10.1145/1592681.1592685","is_oa":true,"landing_page_url":"https://doi.org/10.1145/1592681.1592685","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/1592681.1592685","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st ACM workshop on Research on enterprise networking","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.7099999785423279,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G3046505630","display_name":null,"funder_award_id":"DE-AC05-06OR23100","funder_id":"https://openalex.org/F4320332382","funder_display_name":"Oak Ridge Institute for Science and Education"},{"id":"https://openalex.org/G3392237599","display_name":null,"funder_award_id":"DE-AC05-06OR23100","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G4764068523","display_name":null,"funder_award_id":"-AC05-06OR23100","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G5454538265","display_name":null,"funder_award_id":"DE-AC05-06OR23100","funder_id":"https://openalex.org/F4320306110","funder_display_name":"U.S. Department of Homeland Security"},{"id":"https://openalex.org/G5785144067","display_name":null,"funder_award_id":"DE-AC05-06OR2310","funder_id":"https://openalex.org/F4320306110","funder_display_name":"U.S. Department of Homeland Security"},{"id":"https://openalex.org/G6508914734","display_name":null,"funder_award_id":"DE-AC05-06OR23100.","funder_id":"https://openalex.org/F4320332382","funder_display_name":"Oak Ridge Institute for Science and Education"},{"id":"https://openalex.org/G7825078552","display_name":null,"funder_award_id":"DE-AC05-06OR2310","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G7995982022","display_name":null,"funder_award_id":"DE-AC05","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G803281476","display_name":null,"funder_award_id":"DE-AC05-06OR23100","funder_id":"https://openalex.org/F4320308963","funder_display_name":"Oak Ridge Associated Universities"},{"id":"https://openalex.org/G8414908677","display_name":null,"funder_award_id":"DE-AC0","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G8808743353","display_name":null,"funder_award_id":"ORISE","funder_id":"https://openalex.org/F4320308963","funder_display_name":"Oak Ridge Associated Universities"},{"id":"https://openalex.org/G8820807475","display_name":null,"funder_award_id":"number DE-AC05-06OR23100","funder_id":"https://openalex.org/F4320332382","funder_display_name":"Oak Ridge Institute for Science and Education"}],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320306110","display_name":"U.S. Department of Homeland Security","ror":"https://ror.org/00jyr0d86"},{"id":"https://openalex.org/F4320308963","display_name":"Oak Ridge Associated Universities","ror":"https://ror.org/0526p1y61"},{"id":"https://openalex.org/F4320332382","display_name":"Oak Ridge Institute for Science and Education","ror":"https://ror.org/0526p1y61"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2143448712.pdf","grobid_xml":"https://content.openalex.org/works/W2143448712.grobid-xml"},"referenced_works_count":13,"referenced_works":["https://openalex.org/W1495495588","https://openalex.org/W1807098818","https://openalex.org/W2045555889","https://openalex.org/W2097905275","https://openalex.org/W2111038933","https://openalex.org/W2113740183","https://openalex.org/W2120900812","https://openalex.org/W2147118406","https://openalex.org/W2157576436","https://openalex.org/W2164284397","https://openalex.org/W2166975838","https://openalex.org/W2912111347","https://openalex.org/W4256438905"],"related_works":["https://openalex.org/W1519114293","https://openalex.org/W2375663084","https://openalex.org/W2095363643","https://openalex.org/W2173238669","https://openalex.org/W2130339907","https://openalex.org/W2114705216","https://openalex.org/W2391963552","https://openalex.org/W2397814493","https://openalex.org/W1829795994","https://openalex.org/W1993185027"],"abstract_inverted_index":{"Network":[0],"security":[1,22,111],"is":[2,52],"gravitating":[3],"towards":[4],"more":[5],"centralized":[6],"control.":[7],"Strong":[8],"centralization":[9],"places":[10],"a":[11,49,62,85,100],"heavy":[12],"burden":[13],"on":[14,96,127],"the":[15,37,97,117],"administrator":[16,38,118],"who":[17],"has":[18],"to":[19,27,29,35,40,45,67,74,88,107,124],"manage":[20],"complex":[21],"policies":[23],"and":[24,47,70,94,105,136,141,144],"be":[25,33,68,125],"able":[26,34],"adapt":[28],"users'":[30],"requests.":[31],"To":[32,78],"cope,":[36],"needs":[39,66],"delegate":[41],"some":[42],"control":[43],"back":[44],"end-hosts":[46,93,106],"users,":[48],"capability":[50],"that":[51,116],"missing":[53],"in":[54,109],"today's":[55],"networks.":[56],"Delegation":[57],"makes":[58],"administrators":[59],"less":[60],"of":[61,99],"bottleneck":[63],"when":[64],"policy":[65],"modified":[69],"allows":[71,103],"network":[72,110],"administration":[73],"follow":[75],"organizational":[76],"lines.":[77],"enable":[79],"delegation,":[80],"we":[81,133],"propose":[82],"ident++":[83,102,135],"-":[84],"simple":[86],"protocol":[87],"request":[89],"additional":[90],"information":[91,115],"from":[92],"networks":[95],"path":[98],"flow.":[101],"users":[104],"participate":[108],"enforcement":[112],"by":[113],"providing":[114],"might":[119],"not":[120],"have":[121],"or":[122],"rules":[123],"enforced":[126],"their":[128],"behalf.":[129],"In":[130],"this":[131],"paper":[132],"describe":[134],"how":[137],"it":[138],"provides":[139],"delegation":[140],"enables":[142],"flexible":[143],"powerful":[145],"policies.":[146]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":7},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":4},{"year":2012,"cited_by_count":3}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}