BIB-VERSION:: CS-TR-v2.0
ID:: ncstrl.dartmouthcs//TR2005-539
ENTRY:: May 05, 2005
ORGANIZATION:: Dartmouth College, Computer Science
TITLE:: Preventing Theft of Quality of Service on Open Platforms
TYPE:: Technical Report (paper)
REVISION:: 3
AUTHOR:: Baek, Kwang-Hyun
AUTHOR:: Smith, Sean W.
DATE:: May 2005
RETRIEVAL:: For a paper copy, email <reports@cs.dartmouth.edu>
RETRIEVAL:: For a paper copy, write to
       Technical Report Librarian
       Department of Computer Science
       Dartmouth College
       6211 Sudikoff Laboratory
       Hanover, NH 03755-3510
       USA
RETRIEVAL:: PDF at http://www.cs.dartmouth.edu/reports/TR2005-539.pdf
ABSTRACT:: 
	As multiple types of traffic converge onto one network (frequently wireless), enterprises face a tradeoff between effectiveness and security.  Some types of traffic, such as voice-over-IP (VoIP), require certain quality of service (QoS) guarantees to be effective.  The end client platform is in the best position to know which packets deserve this special handling. In many environments (such as universities), end users relish having control over their own machines.
However, if end users administer their own machines, nothing stops dishonest ones from marking undeserving traffic for high QoS.  How can an enterprise ensure that only appropriate traffic receives high QoS, while also allowing end users to retain control over their own machines?

	In this paper, we present the design and prototype of a solution, using SELinux, TCPA/TCG hardware, Diffserv, 802.1x, and EAP-TLS.
NOTE::
REVISION 1 of May 5, 2005.
END:: ncstrl.dartmouthcs//TR2005-539