A Connection Oriented Internet Architecture for
Restricting Reachability · 2007
Toaidsecurity intheInternet, wepropose anew connection oriented architecture torestrict reachability inthe Internet toonlythoseendhoststhatexplicitly request it.We first describe thevarious components ofourarchitecture. Next, using qualitative arguments, andsomepreliminary computations, weshowthebenefits ofourarchitecture. We alsopresent viable strategies forminimizing connection state atrouters, anddiscuss relevant security issues.