Verifying and enforcing network paths with icing
Jad Naous, Michael Walfish, Antonio R. Nicolosi, David Mazières, Michael G. Miller, Arun Seehra · 2011
We describe a new networking primitive, called a Path Verification Mechanism (pvm). There has been much recent work about how senders and receivers express policies about the paths that their packets take. For instance, a company might want fine-grained control over which providers carry which traffic between its branch offices, or a receiver may want traffic sent to it to travel through an intrusion detection service.