IPsec-based Virtual Private Networks Research Articles

Implementation and analysis ipsec-vpn on cisco asa firewall using gns3 network simulator

The Internet provides less guarantee of security in the process of information exchange. Virtual Private Network (VPN) IP Security(IPSec) based has been implemented to overcome this issues. This research builds a private network that provides quality and security in accessing the Internet. The entire set of systems were built in a virtual and simulated manner. It is built using GNS3 network simulator software and virtual Cisco ASA Firewall. The result shows that VPN network connectivity is strongly influenced by the hardware used as well as depend on Internet bandwidth provided by Internet Service Provider (ISP). In addition to the security testing result shows that IPSec-based VPN can provide security against Man in the Middle (MitM) attacks. However, the VPN still has weaknesses against network attacks such as Denial of Service (DoS) that causes the VPN server can no longer serve VPN client and become crashes.

Multi objective optimization of VPN design by linear programming with risks models

Optimal design of IPsec-based virtual private networks (VPN), in general, depends on multiple factors and parame- ters, such as the VPN's architectural model, hardware and software setups and the technical platform solutions, network topo- logy models, modes of the tunnel's operation, levels of the Open Systems Interconnection (OSI) model, encryption/decryption algorithms, modes of cipher operation, security protocols, security associations and key management techniques, connectivity modes, parameters of security algorithms, computer architectures, the number of tunnels in the VPN, and other factors. This paper presents an innovative approach to using methods of linear programming with risks to solve a multi objective optimiza- tion problem of VPN design. In particular, it describes the proposed conceptual VPN design model, VPN information security space, index of effectiveness for multi objective optimization, a new classification of scales, a system-based approach to risks and mathematical modeling of a risk, a hierarchy of scripts and a theorem of description of passwords, VPN design optimization process and particular procedures, sets of legal and illegal VPN design methods, and a VPN design optimization algorithm based on multi objective optimization by linear programming with risks models. The proposed and developed VPN design optimization algorithm was tested by developing specific VPN design methods for various types of VPN users.

Performance Analysis of IP Security VPN

Internet Protocol Security (IPSec) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a data stream. . IPSec architecture requires the host to provide confidentiality using Encapsulating Security Payload and data integrity using either Authentication Header or Encapsulating Security Payload and anti-replay protection. IPSec has become the most common network layer security control and, a widely deployed mechanism for implementing Virtual Private Networks (VPNs). This paper presents analysis of IPSec VPN for videoconference in real time traffic over a secure communication links by implementing an IPSec-based VPN technology. General Terms Security, Algorithms, Network.

Laboratory experiments for network security instruction

We describe a sequence of five experiments on network security that cast students successively in the roles of computer user, programmer, and system administrator. Unlike experiments described in several previous papers, these experiments avoid placing students in the role of attacker. Each experiment starts with an in-class demonstration of an attack by the instructor. Students then learn how to use open-source defense tools appropriate for the role they are playing and the attack at hand. Threats covered include eavesdropping, dictionary, man-in-the-middle, port scanning, and fingerprinting attacks. Defense skills gained by students include how to forward ports with OpenSSH, how to prevent weak passwords with CrackLib, how to salt passwords, how to set up a simple certifying authority, issue and verify certificates, and guarantee communication confidentiality and integrity using OpenSSL, and how to set up firewalls and IPsec-based virtual private networks. At two separate offerings, tests taken before and after each experiment showed that each has a statistically significant and large effect on students' learning. Moreover, surveys show that students finish the sequence of experiments with high interest in further studies and work in the area of security. These results suggest that the experiments are well-suited for introductory security or networking courses.

Policy-based dynamic provision of IP services in a secure VPN coalition scenario

This article describes a recent R&D result in supporting secure and dynamic coalition internetworking scenarios, where a number of military and civil subnetworks are combined using IPsec in a higher-level IP secure military network. It is part of the work undertaken in the VPN workshop initiative, where a set of national defense and research organizations are meeting together to align their vision and requirements on what an IPv4 or IPv6 secure and dynamic IPsec-based virtual private network should be, and how to deploy it in an international multidomain scenario.

Virtual private networks and their role in e-business

The idea of using a low-cost public network such as the Internet to build a private network is intriguing. In this article, we will focus on virtual private networks (VPNs), which leverage the Internet to provide cost-effective, secure communications. We will discuss the challenges of implementing VPNs based on the Internet Engineering Task Force (IETF) Internet protocol security (IPSec) standards. We will cover various aspects including encryption, authentication, Internet key exchange (IKE), and public key infrastructure (PKI) as they relate to IPSec-based VPNs. We will discuss the major issues facing enterprises, service providers, and end-users in implementing intranets, extranets, and remote access VPNs. We will elaborate by discussing how the Lucent VPN firewall handles the various issues and scenarios described here, and how customers in implementing robust VPNs, use it in practice. We also will touch on other VPN solutions and product architectures, and briefly mention other Lucent VPN products. In closing, we will discuss future VPN challenges, including the impact of Internet protocol version 6 (IPv6).3