Home networking has come in wider use, thus appealing to an increasing need for security. Emerging social concepts such as telecommutation brought a new kind of security threats to the home environment. Besides, low-capacity devices in the home domain may need a central entity dedicated to security enforcement. As SSL-based VPN solutions don’t provide end-to-end tunnels, we have extended TLS protocol to delegate trust establishment between a home network server and an external client to a security gateway, acting as a reverse proxy. Moreover, we formally validated it using automatic protocol analyzer AVISPA.

In a DiffServ domain, several marking mechanisms for packets have been proposed. They make it possible to downgrade or to remove the packets from flows which are not in conformity with the traffic contract. However, all these mechanisms are adapted to operate in intra-domain rather than in multi-domain marking. We propose a mechanism called multi-domain marker (MDM) for flows crossing one or more DiffServ domains in order to reduce the impact of losses on packets which have significant semantic value. The marking is carried out at the entrance to the DiffServ domain and at the exit where the initial priority of the downgraded packets is restored. Simulation results show a reduction in the losses of significant packets. We compare this mechanism to already existing mechanisms by measurements of QoS parameters (delay, jitter, packet losses) of the various real-time flows.

Directory systems have become a field of interest within the context of open systems. This is due to the various requirements raised by the scale of currently interconnected networks. The paper addresses several issues related to applying the X.500 directory service to network management. These include a comparison between the management information base (MIB) for management systems and the directory information base (DIB) for the directory services, a specification of how certain management information is incorporated into the underlying data model of the directory and an information exchange model for ensuring information accessibility to management activities. Some interesting benefits can be realized through integrating the X.500 directory into management systems. A concrete example of using a distributed directory service (DDS) in management illustrates the proposal.>

The quality of service (QoS) concept for broadband ISDN (B-ISN) is studied. The QoS parameters in the asynchronous transfer mode (ATM) layer and the AAL (ATM adaptation layer) are defined. The focus is on the translation of QoS parameters between layers, particularly from the AAL to the ATM layer, because the AAL must be designed to be service dependent and specific. The QoS parameters at the ATM layer resulting from the translation will be the performance requirements on a connection basis for the ATM network. The impact of QoS parameter translation on guaranteeing QoS in the ATM network is discussed.>