Virtual Private Network Service Research Articles

A Keypad-Based Mobile App Security Alert System with Virtual Private Network and Short Message Service Integration

In the digital age, mobile devices are integral to daily life, making robust security measures essential for protecting sensitive data. This paper presents the development of a mobile application aimed at enhancing personal security through a keypad-based authentication system, integrated with Short Message Service (SMS) and Virtual Private Network (VPN) functionalities. The intuitive interface of keypads allows users to swiftly send predefined emergency messages with a single keystroke, including their current location and urgency details. The application ensures encrypted and secure communication via a VPN and leverages SMS for reliable real-time notifications, even in areas with limited connectivity. A user-centered design approach, utilizing React JS for frontend development and Bootstrap for a responsive UI, ensures accessibility and ease of use for individuals with varying levels of technological proficiency. Rigorous testing validates the application's functionality and performance, demonstrating its potential to streamline emergency communication and enhance personal security in critical situations.

Safeguarding Transactional Data: A Comprehensive Investigation of VPN Integration in Point-of-Sale Systems for Enhanced Security and Connectivity

The integration of Virtual Private Network (VPN) technology into Point-of-Sale (POS) systems has emerged as a solution for securing transactional data in businesses. This study investigates the implementation of a VPN server to address security and connectivity challenges faced by the University of St. La Salle (USLS) Bookstore. The research delves into VPN policy frameworks, assessing the scope and binding, authentication methods, and VPN credentials and security protocols. The system design employs a combination of conceptual models and activity diagrams to illustrate the process of user authentication and data encryption. Furthermore, the study evaluates the system's performance in terms of scalability, efficiency, and effectiveness in ensuring authentication and security. The deployment of the VPN infrastructure involves the installation of requisite software and hardware components, along with rigorous testing procedures to assess system performance and reliability. The findings highlight the significance of VPN in safeguarding sensitive transaction data and enhancing the efficiency of POS operations. The study's outcomes offer valuable insights into the effective implementation and management of VPN technology for securing business operations.

Developing a Novel Hierarchical VPLS Architecture Using Q-in-Q Tunneling in Router and Switch Design

Virtual Private LAN Services (VPLS) is an ethernet-based Virtual Private Network (VPN) service that provides multipoint-to-multipoint Layer 2 VPN service, where each site is geographically dispersed across a Wide Area Network (WAN). The adaptability and scalability of VPLS are limited despite the fact that they provide a flexible solution for connecting geographically dispersed sites. Furthermore, the construction of tunnels connecting customer locations that are separated by great distances adds a substantial amount of latency to the user traffic transportation. To address these issues, a novel Hierarchical VPLS (H-VPLS) architecture has been developed using 802.1Q tunneling (also known as Q-in-Q) on high-speed and commodity routers to satisfy the additional requirements of new VPLS applications. The Vector Packet Processing (VPP) performs as the router’s data plane, and FRRouting (FRR), an open-source network routing software suite, acts as the router’s control plane. The router is designed to seamlessly forward VPLS packets using the Request For Comments (RFCs) 4762, 4446, 4447, 4448, and 4385 from The Internet Engineering Task Force (IETF) integrated with VPP. In addition, the Label Distribution Protocol (LDP) is used for Multi-Protocol Label Switching (MPLS) Pseudo-Wire (PW) signaling in FRR. The proposed mechanism has been implemented on a software-based router in the Linux environment and tested for its functionality, signaling, and control plane processes. The router is also implemented on commodity hardware for testing the functionality of VPLS in the real world. Finally, the analysis of the results verifies the efficiency of the proposed mechanism in terms of throughput, latency, and packet loss ratio.

The constitutionality of the new Indian CERT-In VPN rules

Abstract This article examines the constitutionality of the Cyber Security Directions released by Computer Emergency Response Team India (CERT-In). The new guidelines issued by CERT-In, the nodal agency of the Ministry of Electronics and Information Technology, have been in the news in India due to concerns being raised by various companies and privacy watchdogs like the Internet Freedom Foundation that the guidelines were affecting the fundamental right to privacy and personal autonomy of the individuals. The guidelines promulgated give CERT-In the authority to demand and retain various kinds of personally identifiable information for more than 5 years. The mandates related to virtual private network service providers are unreasonable and violative of user privacy, while the domain of information that is to be collected is ambiguous and unspecified for the purpose, thus increasing the chances of surveillance and potential censorship. The authors also give suggestions on how to overcome anomalies which are present in the guidelines issued by CERT-In.

A Machine-Learning-Based Cyberattack Detector for a Cloud-Based SDN Controller

The rapid evolution of network infrastructure through the softwarization of network elements has led to an exponential increase in the attack surface, thereby increasing the complexity of threat protection. In light of this pressing concern, European Telecommunications Standards Institute (ETSI) TeraFlowSDN (TFS), an open-source microservice-based cloud-native Software-Defined Networking (SDN) controller, integrates robust Machine-Learning components to safeguard its network and infrastructure against potential malicious actors. This work presents a comprehensive study of the integration of these Machine-Learning components in a distributed scenario to provide secure end-to-end protection against cyber threats occurring at the packet level of the telecom operator’s Virtual Private Network (VPN) services configured with that feature. To illustrate the effectiveness of this integration, a real-world emerging attack vector (the cryptomining malware attack) is used as a demonstration. Furthermore, to address the pressing challenge of energy consumption in the telecom industry, we harness the full potential of state-of-the-art Green Artificial Intelligence techniques to optimize the size and complexity of Machine-Learning models in order to reduce their energy usage while maintaining their ability to accurately detect potential cyber threats. Additionally, to enhance the integrity and security of TeraFlowSDN’s cybersecurity components, Machine-Learning models are safeguarded from sophisticated adversarial attacks that attempt to deceive them by subtly perturbing input data. To accomplish this goal, Machine-Learning models are retrained with high-quality adversarial examples generated using a Generative Adversarial Network.

ANALYSIS OF BRUTE FORCE ATTACK LOGS TOWARD NGINX WEB SERVER ON DASHBOARD IMPROVED LOG LOGGING SYSTEM USING FORENSIC INVESTIGATION METHOD

Since it was first launched in 1990, the Web Server is still in use today. No exception, almost all companies entering industry 4.0 use Web Servers to show the existence of the company's website and its products. Starting from the websites provided for free by WordPress and Blogspot to independent websites created by their respective companies. The web server itself is available in several types, ranging from apache, nginx, litespeed, etc. Of course, the use of a Web Server for websites cannot be separated from internet crimes or cyber crimes. One of the crimes committed is the hacker's attempt to login to the website Administrator page. The loophole used by hackers is brute force or forced entry by trying every combination of existing Administrator User and Password. This research focuses on building and updating a website monitoring dashboard system with Wazuh technology. The method used in this study is the Quantitative Forensic Investigation Method by examining the logs generated by the System Dashboard using Digital Forensic procedures. This monitoring process aims to detect brute force threats on managed websites by showing the website Administrator login activity log. The results of the metadata log shown by the optimized dashboard show the number of brute force attacks on managed websites. The number of attacks recorded was 259646 attacks on the first cluster and 288676 attacks on the second cluster. In addition, the results of the metadata log can be investigated further to find the location of the Hacker. The location of the hackers found was only limited to the VPN (Virtual Private Network) server used. One of the VPN servers used in this case is Amazon Data Center.

INFORMATION SECURITY POLICIES AND STRATEGIES AND PRACTICES ADOPTED IN IT: THE IMPORTANCE OF CONSULTANCY IN SMALL AND MEDIUM-SIZED COMPANIES

Objective: Companies in the cybersecurity consulting market are expanding their services in periodic training to business stakeholders and enforcement of security policies. The objective of this work is to demonstrate the importance of consulting in information security policies aimed at small and medium-sized companies. Methods: It is characterized as a narrative literature review with a qualitative approach, which does not use explicit and systematic criteria for the search and critical analysis of the selected literature. Results: Tools needed for cybersecurity include endpoint detection and response (EDR), antivirus software, next-generation firewalls, Domain Name System (DNS) protection, email gateway security, intrusion detection and prevention, logging and log monitoring, endpoint protection, authentication and virtual private network (VPN) services, cloud-based security, web application firewalls (WAFs), software-defined wide area networks (SD-WAN), enterprise password management , privileged access management (GAP), vulnerability and threat management, and threat detection. Conclusions: In summary, SMBs seem to implement some of the basic cybersecurity measures only as part of their overall IT implementation. However, it appears that unless cybersecurity controls are included as part of an IT solution, many SMBs do not realize the resulting potential risks to their business.

SafeSearch: Obfuscated VPN Server using Raspberry Pi for Secure Network

Virtual Private Network (VPN) is a private network that uses public network to tunnel the connection from the users’ end to the VPN server. VPN allows users to create a secure connection to another network over the public Internet. VPNs can be used to shield users’ browsing activity and encrypts data transmitted over the network to prevent sniffing attack. Nowadays, users can either pay a premium price for a good VPN service or risk their privacy using free browser-based VPN. Thus, SafeSearch is developed to address these issues in mind. With SafeSearch, users will not need to fork out a lot of money for premium VPN subscription services or expose themselves to targeted advertising when utilising free browser-based VPN. In this study, open VPN protocol was used to create the VPN server on a microcomputer called Raspberry Pi. The software used was mostly open-source except for the VPN client. Obfuscation technique was used to hide VPN traffic by disguising it as just another normal Internet traffic against Deep Packet Inspection when passing through firewall. After the VPN server was established, tests were carried out to evaluate the functionality and reliability of the VPN server in “real-world” environment. The tests conducted were network restriction penetration assessment, network performance and user acceptance test. Penetration assessment result showed that SafeSearch is capable of bypassing web filtering and deep packet inspection. Network performance during SafeSearch connection has slight latency and bandwidth decline, although it is not overly affected. The outcome of the user acceptance test was positive as the majority of participants of the study were confident that SafeSearch can secure their connection and protect their privacy when browsing the web. To conclude, both objectives of this project were fully achieved and the scope of study was followed thoroughly.

Enhancing Security and Privacy in Local Area Network (LAN) with TORVPN Using Raspberry Pi as Access Point: A Design and Implementation

Network security is designed to protect the integrity, confidentiality and accessibility of computer networks and data using both software and hardware technologies. Every person, including organization requires a degree of network security solutions in place to protect it from the ever-growing landscape of cyber threats in the wild today. This paper aims to design and implement TorVPN as an access point using Raspberry Pi in enhancing security and privacy in Local Area Network (LAN). This access point was implemented by using the combination of The Onion Router (Tor) and Virtual Private Network (VPN) services. Then, the graphical user interface application was developed to assist and facilitate the user to access the network securely without having the difficulties to configure and install any software. To determine the effectiveness of the proposed work, there were two experiments involved in this study. Firstly, the confidentiality test which to verify its privacy in keeping the information securely. Secondly, the performance test of the Internet connectivity in terms of ping, download and upload speed. The encourage results was expected as the confidentiality tested on the TorVPN access point network has shown the positive outcome by securing client’s Internet data packet. While, the Internet connectivity is not stable enough, when the client’s IP address changed in the network. Hence, the combination VPN and Tor service using Raspberry Pi as an access point inside the LAN is suitable and secure the information in the network, but do not suggest for user who wants a good Internet connectivity.

BUILDING A LINUX-BASED VPN SERVER USING POINT TO POINT TUNNELING PROTOCOL (PPTP)

Virtual Private Network (VPN) technology has an important role in today's world of communication, VPNs are able to create local networks using facilities. Because a corporate VPN can make connecting information easy and secure. But nowadays, VPNs are gaining popularity for personal use due to the increasing number of interactions that require users to surf the web. On a VPN system that uses the Point to Point Tunneling Tradition (PPTP) method that we created, we use a server from Linux that will connect to Windows as a user. So that clients or windows can connect to the web using a VPN server from linux.
 

VPN: Overview and Security Risks

Virtual Private Networks (VPN) gives anonymity and online security whilst using the web by creating a private network from our public internet connection. VPNs cloak Internet Protocol addresses such that our online activities cannot be traced. Initially, VPNs were only being utilized by huge corporate organizations, which could bear its cost, to safely and privately share records between workplaces situated in various parts of the world. Currently in 2020, now over a quarter of the world's population uses VPN to access the internet anonymously. This paper presents an introduction to VPN technology, its working, its types, some of the VPN Protocols, comparison between free and paid VPN services, and security issues associated with VPN use.

A Survey of Virtual Private LAN Services (VPLS): Past, Present and Future

Virtual Private LAN services (VPLS) is a Layer 2 Virtual Private Network (L2VPN) service that has gained immense popularity due to a number of its features, such as protocol independence, multipoint-to-multipoint mesh connectivity, robust security, low operational cost (in terms of optimal resource utilization), and high scalability. In addition to the traditional VPLS architectures, novel VPLS solutions have been designed leveraging new emerging paradigms, such as Software Defined Networking (SDN) and Network Function Virtualization (NFV), to keep up with the increasing demand. These emerging solutions help in enhancing scalability, strengthening security, and optimizing resource utilization. This paper aims to conduct an in-depth survey of various VPLS architectures and highlight different characteristics through insightful comparisons. Moreover, the article discusses numerous technical aspects such as security, scalability, compatibility, tunnel management, operational issues, and complexity, along with the lessons learned. Finally, the paper outlines future research directions related to VPLS. To the best of our knowledge, this paper is the first to furnish a detailed survey of VPLS.

ИСПОЛЬЗОВАНИЕ ТЕХНОЛОГИИ ВИРТУАЛЬНЫХ ЧАСТНЫХ СЕТЕЙ VPN (VIRTUAL PRIVATE NETWORK) ДЛЯ ПЕРЕДАЧИ СИГНАЛОВ В КОРПОРАТИВНЫХ СЕТЯХ

This paper discusses some modes of signal transmission for corporate systems using the technology of virtual private networks VPN. A very important property of tunnels is the ability to differentiate different types of traffic and assign them the necessary service priorities. In this work, research has been carried out and comparative characteristics of signal transmission modes using virtual networks have been obtained to identify the effectiveness of the network in various modes of organizing a virtual network, and to optimize a virtual network in order to identify an effective method for organizing a VPN. Also, the work analyzes the specifics of the work of corporate information systems and networks intended for their maintenance, showed that for building a corporate network it is advisable to use virtual private network (VPN) technology, which makes it possible to ensure the fulfillment of the basic requirements for the security and quality of customer service and applications and the current state and direction of development of VPN technology when creating new generation corporate networks, while highlighting the main tasks that need to be addressed when creating a network. Some features of setting up an IPSec VPN server for corporate networks are considered.

Securing Online Payment Using Virtual Private Network (VPN)

In the present advanced time, innovation plays a vital part inside the improvement of business, E-commerce, and Finance. In present days Network security become a significant thought. Internet gives a great facility to everyone like internet banking, Online shopping, Communications, organizations or associations. Therefore, the online exchange of cash requires the most extreme security of secret information put away or move over the Internet. The security of these exchanges has made it more important because of the high impact of Cybercrimes on a Digital Money. Because of the high-speed advancement of computerized devices and their appearance to the Internet made insecure client’s information. Now a days, security and privacy threats has become increasingly more complex which enhance the necessity for a modernized ensured medium to get the significant information into the internet. In this paper, presented Virtual Private Network (VPN) is an excellent method to secure devices and data from the hackers. VPN is a private network which works over a public network transit the encrypted data so that hackers are not able to use it. The reason for VPN is to give the different security model like Authenticity, Confidentiality and Integrity of data that is the reason these are getting trendy, low in budget and simple to utilize. VPN services are accessible for smart phones, PCs and tablets. It is a rising innovation which assumes a significant part in WLAN by giving secure information transmission over Internet.

Harnessing HPC resources for CMS jobs using a Virtual Private Network

The processing needs for the High Luminosity (HL) upgrade for the LHC require the CMS collaboration to harness the computational power available on non-CMS resources, such as High-Performance Computing centers (HPCs). These sites often limit the external network connectivity of their computational nodes. In this paper we describe a strategy in which all network connections of CMS jobs inside a facility are routed to a single point of external network connectivity using a Virtual Private Network (VPN) server by creating virtual network interfaces in the computational nodes. We show that when the computational nodes and the host running the VPN server have the namespaces capability enabled, the setup can run entirely on user space with no other root permissions required. The VPN server host may be a privileged node inside the facility configured for outside network access, or an external service that the nodes are allowed to contact. When namespaces are not enabled at the client side, then the setup falls back to using a SOCKS server instead of virtual network interfaces. We demonstrate the strategy by executing CMS Monte Carlo production requests on opportunistic non-CMS resources at the University of Notre Dame. For these jobs, cvmfs support is tested via fusermount (cvmfsexec), and the native fuse module.

VPN Services between a Rock and a Hard Place: The Freedome Case

Providers of commercial Virtual Private Network services are expected to protect the privacy of their customers, but also to co-operate with law enforcement in legitimate criminal investigations in accordance with the law. In a case concerning a commercial VPN service, the seizure of VPN user logs was challenged in court by the service provider, a Finnish cybersecurity company. Drawing on this case and the reasoning adopted by the national courts, this paper explores the dual role of VPN service providers and the fine line between subscriber data and traffic data in Finnish law and on the European level. Ultimately, it is argued that uncontrolled and unlimited law enforcement access to VPN user logs would jeopardize privacy rights and the business interests of legitimate VPN providers, and that it might additionally lead to undesirable consequences for law enforcement interests.

Copyright issues related to reproduction rights arising from streaming

AbstractWith the rapid development of streaming media technology, more and more people have begun to watch films on streaming websites. However, it has been noted that some of them are streaming unauthorized content, which has posed a major challenge to the entertainment sector's traditional business model. Against this background, legal issues arising from the streaming of media online is an area of huge current interest, one issue being the exact liability of providers and users of streaming services and whether they are infringing on the reproduction right of the copyright holders. Since the liability of platforms has been extensively discussed in the academic literature, in this article we mainly focus on the liability of users who stream unauthorized works. To this end, the article analyses the reproduction act of streaming platform users under the UK and European Union approaches and examines Article 5(1) of the Information Society Directive in the context of streaming. In addition, we explore the liability of users who stream unauthorized content via virtual private network services.

VPNs as boundary objects of the internet: (mis)trust in the translation(s)

Through empirical methods that walkthrough a typical user experience for acquiring virtual private network (VPN) services, this paper attempts to answer the question of how we come to trust, use and govern VPNs.

Smart Hybrid SDN Approach for MPLS VPN Management and Adaptive Multipath Optimal Routing

The Virtual Private Network (VPN) service offered by the Multi-Protocol Label Switching Protocol (MPLS) is more and more solicited by clients thanks to its various advantages that it can offer especially concerning the security, the quality of service, and the flexibility. MPLS VPN relies on multiple protocols to function correctly and can be represented according to different architectures, each of which requires its own configuration. Besides, this technology is often used to interconnect a high number of sites which makes it challenging to deploy, manage, and supervise. Software Defined Network (SDN) is a paradigm, which, thanks to a centralized point (controller) can manage the MPLS VPN tunnels in an automatic, dynamic, and on-demand way between all the clients’ equipment. To manage the equipment by an SDN controller, they must be of the new generation supporting the OpenFlow protocol. The hybrid SDN paradigm allows Legacy equipment to be included in the orchestration as well, reducing OPEX and CAPEX costs. By the present work, we propose a new approach (SH-SDN) SDN Hybrid for the management of different architectures MPLS VPN based on a new graphical interface. The proposed approach allows not only to manage the MPLS VPN tunnels but also to ensure a reasonable quality of service level by performing an adaptive and an optimal load balancing across the multiple paths. The approach has been implemented and tested in a virtual test network consisting of different manufacturers (Cisco, Juniper, and HP). The results show that the SH-SDN approach offers a remarkable reduction in the MPLS VPN tunnel establishment time in a large network and a reasonable quality of service level of the transported applications through the multipath routing improved process.

The Vital Role of Virtual Private Network (VPN) in Making Secure Connection Over Internet World

Network security becomes a major consideration of the current era. Internet provides an enormous ease in almost all the regions like online banking, online shopping, communications, businesses or organisations. Thus, the communication network requires the security of the confidential data stored or transfer over the internet. Due to the quick development of computerized gadgets and their entrance to the internet caused insecurity to user data. Now a days, security and privacy threats has become more and more complicated which amplify the requirement for a modernized protected medium to secure the valuable data into the internet. In this paper, introduced Virtual Private Network (VPN) is a great way to protect devices and information from the hackers. VPN is a private network which operates over a public network transit the encrypted information so that attackers are not able to use it. The purpose of VPN is to provide the different security elements such as authenticity, confidentiality and data integrity that’s why these are becoming trendy, low-priced and easy to use. VPN services are available for smart phones, computers and tablets. This paper also concerns about the development, protocols, tunnelling and security of VPN. It is a rising technology which plays a major role in WLAN by providing secure data transmission over Internet.