Building Security-Aware Applications on Celestial Network Security Management Infrastructure

Heterogeneous and distributed nature of the Internet makes it very diicult to customize security protocols and policies in order to satisfy the security needs of applications. Celestial network security management project addresses this issue through building an infrastructure that can dynamically set up inter-domain secure communication channels upon the requests of applications. Celestial System conng-ures security mechanisms across protocol layers and across domains, based on the application's security requirement, security capabilities along the communication path and the security policies of diierent domains. This paper brieey describes the Celestial infrastructure and demonstrates how to build security-aware applications using Celestial network security management infrastructure. We do so by describing how two public domain Internet applications are made secure based on our prototype system.