IPSEC and the Internet
| dc.contributor.advisor | Baras, John S. | en_US |
| dc.contributor.author | Karir, Manish | en_US |
| dc.contributor.department | ISR | en_US |
| dc.contributor.department | CSHCN | en_US |
| dc.date.accessioned | 2007-05-23T10:08:51Z | |
| dc.date.available | 2007-05-23T10:08:51Z | |
| dc.date.issued | 1999 | en_US |
| dc.description.abstract | Secure and efficient communication between computers is becoming more essential as companies attempt to utilize the public network infrastructure for supporting communication between their various sites.<p>The IPSEC protocols have been proposed as a solution to balance the needs of security and networking between computers. The basic IPSEC protocols are based on the end-to-end security model and when used in the most secure mode do not allow any intermediate nodes in the network to access and obtain information from packet headers encrypted by the security end-points.<p>However, with the advent of smart applications in the middle of the network, which attempt to make it more efficient, a tradeoff is created between security and efficiency. This tradeoff is the result of the need for these intelligent applications to access packet header information which is not possible with secure IPSEC flows. <p>This thesis analyzes and evaluates several possible solutions to this problem and argues why they all involve an unacceptable loss in the level of security or are not practical in any real system. On the basis of these arguments it thenproposes the use of Layered IPSEC to solve the problem. Layered IPSEC adds flexibility to the current IPSEC protocols by providing the ability to use multiple encryption algorithms with separate encryption keys for different parts of a packet.<p>We also describe an experimental implementation of the concept and provide timing measurements from it. On the basis of our experience with the implementation and our experimental measurements we argue for the feasiblity and usefulness of this scheme. | en_US |
| dc.format.extent | 4666483 bytes | |
| dc.format.mimetype | application/pdf | |
| dc.identifier.uri | http://hdl.handle.net/1903/6108 | |
| dc.language.iso | en_US | en_US |
| dc.relation.ispartofseries | ISR; MS 1999-14 | en_US |
| dc.relation.ispartofseries | CSHCN; MS 1999-9 | en_US |
| dc.subject | IPSEC | en_US |
| dc.subject | layered IPSEC | en_US |
| dc.subject | security | en_US |
| dc.subject | Internet, | en_US |
| dc.title | IPSEC and the Internet | en_US |
| dc.type | Thesis | en_US |
Files
Original bundle
1 - 1 of 1