Implementations of the User Mobility Support over IPSec
نویسندگان
چکیده
IPSec, proposed by IETF, is a popular tunneling technology adopted for the Virtual Private Network. It provides the network layer additional security functionality to transform multiple segments of a private network into one. This paper exploits the extension of IPSec to have secured tunnels for users who might move around dynamically without carrying the same machine. We not only explore implementation issues of IPSec over popular operating systems, such as Windows and Linux, but also provide performance evaluation of of the proposed algorithms by a series of experiments.
منابع مشابه
The Performance Evaluation of a Dynamic Configuration Method over IPSEC
IPSEC provides the network layer additional security functionality to transform multiple segments of a private network into one. However, the setup of IPSEC-based secured tunnels tends to be static in the configuration and restricted in a machine-to-machine fashion. This paper is motivated by the needs of users in moving among working environments while maintaining a secured connection to its p...
متن کاملMobile Multilayer IPsec protocol
A mobile user moves around and switches between wireless cells, subnets and domains, it needs to maintain the session continuity. At the same time security of signaling and transport media should not be compromised. A multi-layer security framework involving user authentication, packet based encryption and access control mechanism can provide the desired level of security to the mobile users. S...
متن کاملSecurity testing of session initiation protocol implementations
The mechanisms which enable the vast majority of computer attacks are based on design and programming errors in networked applications. The growing use of voice over IP (VOIP) phone technology makes these phone applications potential targets. We present a tool to perform security testing of VOIP applications to identify security vulnerabilities which can be exploited by an attacker. Session Ini...
متن کاملIPsec-based end-to-end VPN deployment over UMTS
Next generation mobile users require flexible security mechanisms, which provide customized security services to data traffic, take into account end-user mobility and mobile network characteristics, and are available anywhere–anytime. An IPsecbased end-to-end Virtual Private Network (VPN) deployment scheme over the Universal Mobile Telecommunication System (UMTS) is proposed and analysed. The U...
متن کاملFast IPSec: A High-Performance IPsec Implementation
Fast IPsec is an implementation of the IPsec protocols [Kent & Atkinson, 1998a] for FreeBSD that was designed for high performance. In particular the protocols use the OpenBSD Cryptographic Framework, as ported to FreeBSD [Leffler, 2003], so any cryptographic hardware is automatically used to accelerate their operation. Fast IPsec, running on a uniprocessor system with a single Broadcom BCM5822...
متن کامل