Network Information Flow Control: Proof of Concept

In this paper we present a concept for controlling the way information flows in a network by labeling packets and controlling the way they flow inside the network. We introduce the security model which is a simple Distributed Information Flow Control (DIFC) model enabling the definition of security classes for the labels and the security policy. We provide a proof of concept of the proposed Network Information Flow Control using an implementation based on labeling mechanisms that are readily available for Quality of Service (QoS) of VLAN network management devices.