Specification-based testing of IPsec
|
|
|
- Garry Parker
- 5 years ago
- Views:
Transcription
1 Specification-based testing of IPsec Institute for system Programming Russian Academy of Sciences Nickolay Pakoulin
2 Agenda Work Background Specification based testing in IPsec Discussion Future work
3 The work background RFBR Grant on Research in IP security and mobility Currently we are working on IPsec IPsec formalization AH and ESP Inbound / Outbound processing IKE v1 Focus on IPsec over IPv6 Implementations evaluation Free BSD OpenBSD 3.6
4 Project info Funded by the Russian Foundation for Basic Research Test suites would be available for free from The CTesK toolkit is available for free from Open for international collaboration in the field of IPsec R&D
5 IPsec research project : what it is NOT NOT Cryptanalysis of ciphers / message digest This goes beyond IPsec study anyway NOT Formal study of IPsec features, such as Protocol validation Attacks discovery for IPsec security features
6 IPsec research project: what it is Conformance test suite development Trial whether implementations really meet requirements Interoperability by conformance Reliability testing Formal specification of IPsec Formal specification of basic IPsec features Inbound / Outbound processing IKE v1 RFC as reference standard
7 How to use formal specs IPsec Formal Specification Specificationbased Testing What We Are STRONG With Protocol Analysis Protocol Analysis Study protocol correctness, reliability, etc. Study cryptographic services, etc. Specification-based testing Test whether implementations meet requirements of protocol specification
8 Agenda Work Background Specification based testing in IPsec Discussion Future work
9 Need for IPsec conformance testing Interoperability is crucial for IPsec deployment Interoperability by conformance IPsec is a solid protocol, two conforming implementations are expected to interoperate Reliability of implementations IPsec is a complex protocol
10 IPsec specification-based Testing Based on UniTesK technology Using CTesK toolkit Implementation of UniTesK for C programming languages
11 UniTesK specification-based testing technology Verdict is assigned by an oracle Oracle is generated from the formal specification Adaptive generation of test inputs Test inputs are generated from FSM-based test scenarios There is an adapter between abstract specification model and implementation Mediator
12 Test Suite Architecture Test Scenarios Test Input Generator Build test inputs Specification Oracles Validate SUT Mediators Mediators Transport of stimuli to the IUT and capture of IUT reactions IPsec implementation
13 Test suite: underlying technology Specification is developed in SeC ([sek]) Specification extension of C language Test scenarios SeC Mediators SeC and C + RPC
14 Test suite: technology support SeC development is supported by CTesK toolkit Requires Java and C compiler GCC or MS VC Windows, Linux, FreeBSD, Solaris Stable release is available for free Test report generator and test run visualization Requires Java Windows, Linux, FreeBSD, Solaris Stable release is available for free
15 Specification development Specification is based upon regulating documentation RFC 2401 (IPsec Architecture) and others Specification is implicit Specification imposes constraints on the properties of protocol implementation Pre- and post- conditions Constraints are written using specification extension of C language
16 Specification and coverage criteria Coverage Define criteria to split the space of inputs into equivalence classes More then one criteria can be defined Source of coverage criteria RFC define conditions that govern rules of processing Coverage is formal representation of those conditions
17 Example specification void receive_ahheader( AHHeader * ah_hdr ) { pre { /* Precondition */ } coverage SecAssoc { if ( NULL == find_sa(receiver_sad, ah_hdr)) { return { ah_no_sa, "No SA" }; } else { return { ah_sa_exists, "SA found" }; } } post { SA * sa = find_sa (receiver_sad, ah_hdr); if ( sa == NULL ) { return isdiscarded_header( ah_hdr ) && contains_log(/* Discard event */) ) && receiver_sad ) && receiver_spd ); } /* Further specification */
18 Test bed deployment Upper-level agent Test System RPC (IPv4) IUT Data link agent IPsecprotected messages Link Upper-level agent uses API to affect IUT (add/remove SA/SP, etc) Data link agent captures outgoing IPv6 datagrams
19 Mediators development Mediator links specification and implementation Pass test inputs to target system Capture outputs of Implementation Under Test Translate conceptual data structures to concrete ones and vice versa
20 Test scenarios Test scenarios specify how to iterate parameters of test inputs depending on the state of the model The actual test inputs are built on the fly during test execution Coverage-driven iteration Do not iterate all possible inputs, only interesting ones that improve coverage
21 Current state Upper-level and data link agents for FreeBSD and OpenBSD ready Specification under development Inbound and outbound Manual key management Test scenarios under development
22 Agenda Work Background Specification based testing in IPsec Discussion Future work
23 CTesK applications API and message-based interfaces MSR IPv6 Basic IPv6 features Mobile IPv6 for Windows CE 4.1 Mobile IPv6, draft 13 Sensor networks (TinyOS) Embedded software
24 Discussion Strengths of the approach Strong modularity of Test Scenario Relatively easy way to model complex features of IPv6 Incremental design of Test Suite Weaknesses New paradigm (implicit specs / FSM test) Relatively long way to first tests
25 Alternatives Manual test suite development Project TAHI TTCN-based approaches Commercial test suites (presumably TTCN- 2) Work in progress in the EU TTCN-3, scheduled for 3 years, in the early beginning
26 Alternatives (2) All known industrial alternatives are test-case based Strengths Well known and established technologies (e.g. ISO 9646) Relatively quick way to first tests Weaknesses Intensive manual work Test purposes elicitation Test cases development Problems with IPsec output prediction (IPsec is VERY complex) Problems with maintenance and extensions Less thorough study of official specification
27 Agenda Work Background Specification based testing in IPsec Discussion Future work
28 Future work Full IPsec conformance test suite Inbound / Outbound traffic IKE v1 Mobile IPv6 conformance test suite development Mobile IPv6 security conformance testing Open for collaboration
29 Links UniTesK CTesK Institute for System Programming RAS Network research group Contact: Nickolay Pakoulin
30 END Questions?
Test suite development for conformance testing of protocols
Test suite development for conformance testing of email protocols Nikolay Pakulin ISP RAS npak@ispras.ru Anastasia Tugaenko ISP RAS tugaenko@ispras.ru Abstract The method for testing electronic mail protocols
CIS 6930/4930 Computer and Network Security. Topic 8.1 IPsec
CIS 6930/4930 Computer and Network Security Topic 8.1 IPsec 1 IPsec Objectives Why do we need IPsec? IP V4 has no authentication IP spoofing Payload could be changed without detection. IP V4 has no confidentiality
Lecture 13 Page 1. Lecture 13 Page 3
IPsec Network Security: IPsec CS 239 Computer Software March 2, 2005 Until recently, the IP protocol had no standards for how to apply security Encryption and authentication layered on top Or provided
Lecture 12 Page 1. Lecture 12 Page 3
IPsec Network Security: IPsec CS 239 Computer Software February 26, 2003 Until recently, the IP protocol had no standards for how to apply security Encryption and authentication layered on top Or provided
IP Security. Have a range of application specific security mechanisms
IP Security IP Security Have a range of application specific security mechanisms eg. S/MIME, PGP, Kerberos, SSL/HTTPS However there are security concerns that cut across protocol layers Would like security
Virtual Private Networks (VPN)
CYBR 230 Jeff Shafer University of the Pacific Virtual Private Networks (VPN) 2 Schedule This Week Mon September 4 Labor Day No class! Wed September 6 VPN Project 1 Work Fri September 8 IPv6? Project 1
The IPsec protocols. Overview
The IPsec protocols -- components and services -- modes of operation -- Security Associations -- Authenticated Header (AH) -- Encapsulated Security Payload () (c) Levente Buttyán (buttyan@crysys.hu) Overview
CSC 6575: Internet Security Fall 2017
CSC 6575: Internet Security Fall 2017 Network Security Devices IP Security Mohammad Ashiqur Rahman Department of Computer Science College of Engineering Tennessee Tech University 2 IPSec Agenda Architecture
VPN Overview. VPN Types
VPN Types A virtual private network (VPN) connection establishes a secure tunnel between endpoints over a public network such as the Internet. This chapter applies to Site-to-site VPNs on Firepower Threat
Implementation and Operation of Mobility in WIDE
Implementation and Operation of Mobility in WIDE The 14th Korea Internet Conference June 28, 2006 Keiichi Shima Internet Initiative Japan Inc. / WIDE project Contents Background Implementation
Mobile IPv6 in 6NET: An Overview. Chris Edwards, Lancaster University, UK
Mobile IPv6 in 6NET: An Overview Chris Edwards, Lancaster University, UK Summary Mobile IPv6 Overview Status of the Protocol Available Implementations Deployment in 6NET Trials and Testing MIPv6++ Related
VPN and IPsec. Network Administration Using Linux. Virtual Private Network and IPSec 04/2009
VPN and IPsec Network Administration Using Linux Virtual Private Network and IPSec 04/2009 What is VPN? VPN is an emulation of a private Wide Area Network (WAN) using shared or public IP facilities. A
Virtual Private Cloud. User Guide. Issue 03 Date
Issue 03 Date 2016-10-19 Change History Change History Release Date What's New 2016-10-19 This issue is the third official release. Modified the following content: Help Center URL 2016-07-15 This issue
CSCE 715: Network Systems Security
CSCE 715: Network Systems Security Chin-Tser Huang huangct@cse.sc.edu University of South Carolina Security in Network Layer Implementing security in application layer provides flexibility in security
SFO17-406: IPsec Full Offload Support in OpenDataPlane. Bill Fischofer
SFO17-406: IPsec Full Offload Support in OpenDataPlane Bill Fischofer Credits The work described in this session represents the collaborative contribution of the LNG ODP team, particularly: Petri Savolainen,
Manual Key Configuration for Two SonicWALLs
Manual Key Configuration for Two SonicWALLs VPN between two SonicWALLs allows users to securely access files and applications at remote locations. The first step to set up a VPN between two SonicWALLs
Integration of Functional and Timed Testing of Real-time and Concurrent Systems
Integration of Functional and Timed Testing of Real-time and Concurrent Systems Victor V. Kuliamin, Alexander K. Petrenko, Nick V. Pakoulin, Alexander S. Kossatchev, and Igor B. Bourdonov Institute for
CSE509: (Intro to) Systems Security
CSE509: (Intro to) Systems Security Fall 2012 Invited Lecture by Vyas Sekar IPSec 2005-12 parts by Matt Bishop, used with permission Security in Real Life: Motivation Site SF Company X $$$ Site NY Site
The ETSI Experience in supporting Standardization with methodologies
The ETSI Experience in supporting Standardization with methodologies Dieter Hogrefe ETSI TC MTS Chairman 6th December 2007 Terms of Reference for ETSI TC MTS (Methods for Testing and Specification) Methodology
Set Up a Remote Access Tunnel (Client to Gateway) for VPN Clients on RV016, RV042, RV042G and RV082 VPN Routers
Set Up a Remote Access Tunnel (Client to Gateway) for VPN Clients on RV016, RV042, RV042G and RV082 VPN Routers Objective A Virtual Private Network (VPN) is a private network that is used to virtually
IPSec Transform Set Configuration Mode Commands
IPSec Transform Set Configuration Mode Commands The IPSec Transform Set Configuration Mode is used to configure IPSec security parameters. There are two core protocols, the Authentication Header (AH) and
Automatic Testing with Formal Methods
November 30th, 2010 Testing is Inevitable Can be applied to the actual implementation Scales up Can be applied to the actual implementation No need to build a model of the system It is complex to build
CS 356 Internet Security Protocols. Fall 2013
CS 356 Internet Security Protocols Fall 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access Control Lists Chapter 5
Porting of Real-Time Publish-Subscribe Middleware to Android
M.Vajnar, M. Sojka, P. Píša Czech Technical University in Prague Porting of Real-Time Publish-Subscribe Middleware to Android RTLWS15, Lugano-Manno Distributed applications problems 2/23 Distributed applications
IPSec Transform Set Configuration Mode Commands
IPSec Transform Set Configuration Mode Commands The IPSec Transform Set Configuration Mode is used to configure IPSec security parameters. There are two core protocols, the Authentication Header (AH) and
Internet security and privacy
Internet security and privacy IPsec 1 Layer 3 App. TCP/UDP IP L2 L1 2 Operating system layers App. TCP/UDP IP L2 L1 User process Kernel process Interface specific Socket API Device driver 3 IPsec Create
GIS Deployment Guide. Introducing GIS
GIS Deployment Guide Introducing GIS 7/13/2018 Contents 1 Introducing GIS 1.1 About the Genesys Integration Server 1.2 GIS Architecture 1.3 System Requirements 1.4 GIS Use-Case Scenario 1.5 Licensing 1.6
IPSec. Slides by Vitaly Shmatikov UT Austin. slide 1
IPSec Slides by Vitaly Shmatikov UT Austin slide 1 TCP/IP Example slide 2 IP Security Issues Eavesdropping Modification of packets in transit Identity spoofing (forged source IP addresses) Denial of service
Chapter 32 Security in the Internet: IPSec, SSL/TLS, PGP,
Chapter 32 Security in the Internet: IPSec, SSL/TLS, PGP, VPN, and Firewalls 32.1 Copyright The McGraw-Hill Companies, Inc. Permission required for reproduction or display. 32.2 Figure 32.1 Common structure
IPsec: IP security in opensource systems
Pavel äimerda pavlix@pavlix.net IPv6 Day 2012, Praha http://data.pavlix.net/ipv6day/2012/ Contents IP Security Overview Kernel IPsec implementation Comparison of Key Exchange Implementations IP Security
Chapter 11 The IPSec Security Architecture for the Internet Protocol
Chapter 11 The IPSec Security Architecture for the Internet Protocol IPSec Architecture Security Associations AH / ESP IKE [NetSec], WS 2008/2009 11.1 The TCP/IP Protocol Suite Application Protocol Internet
Network Working Group. Category: Standards Track NIST November 1998
Network Working Group Request for Comments: 2404 Category: Standards Track C. Madson Cisco Systems Inc. R. Glenn NIST November 1998 Status of this Memo The Use of HMAC-SHA-1-96 within ESP and AH This document
IPSec. Overview. Overview. Levente Buttyán
IPSec - brief overview - security associations (SAs) - Authentication Header (AH) protocol - Encapsulated Security Payload () protocol - combining SAs (examples) Overview Overview IPSec is an Internet
From test design to validation
From test design to validation (with the example of the IPv6 test bed) 4th e-infrastructure Concertation Sophia Antipolis, 5/6 Dec 2007 Sebastian Müller Centre for Testing and Interoperability ETSI 2007.
Network Security: IPsec. Tuomas Aura
Network Security: IPsec Tuomas Aura 3 IPsec architecture and protocols Internet protocol security (IPsec) Network-layer security protocol Protects IP packets between two hosts or gateways Transparent to
NIST SP : Guidelines for the Secure Deployment of IPv6
NIST SP 800-119: Guidelines for the Secure Deployment of IPv6 Sheila Frankel Computer Security Division NIST sheila.frankel@nist.gov US Government IPv6 Directives: Office of Management and Budget (OMB)
IPSec. Dr.Talal Alkharobi. IPsec (IP security)
IPSec IPsec (IP security) 2 A suite of protocols for securing Internet Protocol (IP) communications by authenticating and/or encrypting each IP packet in a data stream. IPsec also includes protocols for
The IPSec Security Architecture for the Internet Protocol
Chapter 11 The IPSec Security Architecture for the Internet Protocol [NetSec], WS 2005/2006 11.1 Overview Brief introduction to the Internet Protocol (IP) suite Security problems of IP and objectives of
Application of UniTESK Technology for Functional Testing of Infrastructural Grid Software
Application of UniTESK Technology for Functional Testing of Infrastructural Grid Software Sergey Smolov ISP RAS ssedai@ispras.ru Abstract In this article some questions of testing of infrastructural Grid
Automated Test Design with TTCN-3
Automated Test Design with TTCN-3 TTCN-3 User Conference Beijing, June 8th 2010 Conformiq Tutorial Copyright Conformiq Inc. and its subsidiaries. All rights reserved. Tuesday, May 11, 2010 1 Conformiq,
Lab - Configuring a Site-to-Site VPN Using Cisco IOS and CCP
CCNA Security Lab - Configuring a Site-to-Site VPN Using Cisco IOS and CCP Topology Note: ISR G2 devices use GigabitEthernet interfaces instead of FastEthernet Interfaces. 2015 Cisco and/or its affiliates.
iii PPTP... 7 L2TP/IPsec... 7 Pre-shared keys (L2TP/IPsec)... 8 X.509 certificates (L2TP/IPsec)... 8 IPsec Architecture... 11
iii PPTP................................................................................ 7 L2TP/IPsec........................................................................... 7 Pre-shared keys (L2TP/IPsec)............................................................
Lehrstuhl für Netzarchitekturen und Netzdienste Fakultät für Informatik Technische Universität München. ilab. Lab 8 SSL/TLS and IPSec
Lehrstuhl für Netzarchitekturen und Netzdienste Fakultät für Informatik Technische Universität München ilab Lab 8 SSL/TLS and IPSec Outlook: On Layer 4: Goal: Provide security for one specific port SSL
DPX8000 Series Deep Service Switching Gateway User Configuration Guide Firewall Service Board Module v1.0
DPX8000 Series Deep Service Switching Gateway User Configuration Guide Firewall Service Board Module v1.0 i Hangzhou DPtech Technologies Co., Ltd. provides full- range technical support. If you need any
IPSec Site-to-Site VPN (SVTI)
13 CHAPTER Resource Summary for IPSec VPN IKE Crypto Key Ring Resource IKE Keyring Collection Resource IKE Policy Resource IKE Policy Collection Resource IPSec Policy Resource IPSec Policy Collection Resource
Lecture 33. Firewalls. Firewall Locations in the Network. Castle and Moat Analogy. Firewall Types. Firewall: Illustration. Security April 15, 2005
Firewalls Lecture 33 Security April 15, 2005 Idea: separate local network from the Internet Trusted hosts and networks Intranet Firewall DMZ Router Demilitarized Zone: publicly accessible servers and networks
SOFTWARE LIFE-CYCLE MODELS 2.1
SOFTWARE LIFE-CYCLE MODELS 2.1 Outline Software development in theory and practice Software life-cycle models Comparison of life-cycle models 2.2 Software Development in Theory Ideally, software is developed
review of the potential methods
Mandatory iscsi Security review of the potential methods IPS Interim Meeting Nashua NH, May 01 2001 Ofer Biran Thanks to: IBM Research Lab in Haifa Bernard Aboba, David Black, Julian Satran, Steve Senum
Chapter 8 Lab Configuring a Site-to-Site VPN Using Cisco IOS
Chapter 8 Lab Configuring a Site-to-Site VPN Using Cisco IOS Topology Note: ISR G1 devices use FastEthernet interfaces instead of GigabitEthernet interfaces. 2017 Cisco and/or its affiliates. All rights
IPv6 Task Force Comment on Opinion 2/2002 Art. 29 Data Protection Working Party. February 25 th 2003 Brussels
IPv6 Task Force Comment on Opinion 2/2002 Art. 29 Data Protection Working Party February 25 th 2003 Brussels 1 Who is the IPv6 Task Force? The issue The IPv6 Task Force Position 2 3 IPv6 Task Force initiated
SonicWALL Addendum. A Supplement to the SonicWALL Internet Security Appliance User's Guide
SonicWALL 6.2.0.0 Addendum A Supplement to the SonicWALL Internet Security Appliance User's Guide Contents SonicWALL Addendum 6.2.0.0... 3 New Network Features... 3 NAT with L2TP Client... 3 New Tools
Application Layer. Presentation Layer. Session Layer. Transport Layer. Network Layer. Data Link Layer. Physical Layer
ISO/OSI Model SSL: Security at Transport Layer Application Layer Peer-to-peer Application Layer Network Security Assurance Presentation Layer Session Layer Transport Layer Presentation Layer Session Layer
Network Working Group Request for Comments: Nokia Research Center F. Dupont GET/ENST Bretagne June 2004
Network Working Group Request for Comments: 3776 Category: Standards Track J. Arkko Ericsson V. Devarapalli Nokia Research Center F. Dupont GET/ENST Bretagne June 2004 Using IPsec to Protect Mobile IPv6
Protocols, Technologies and Standards Secure network protocols for the OSI stack P2.1 WLAN Security WPA, WPA2, IEEE i, IEEE 802.1X P2.
P2 Protocols, Technologies and Standards Secure network protocols for the OSI stack P2.1 WLAN Security WPA, WPA2, IEEE 802.11i, IEEE 802.1X P2.2 IP Security IPsec transport mode (host-to-host), ESP and
Recent Advances in IPv6 Security. Fernando Gont
Recent Advances in IPv6 Security Fernando Gont About... Security researcher and consultant for SI6 Networks Have worked on security assessment on communications protocols for: UK NISCC (National Infrastructure
Java-based test system development with open source components
Java-based test system development with open source components Presented by Zhang LinLin Go4IT China Coordinator Telecommunication Metrology Center of CATR of MIIT Authors Telecommunication Metrology Center
SIP Conformance Testing Based on TTCN-2 *
TSINGHUA SCIENCE AND TECHNOLOGY ISSN 1007-0214 40/49 pp223-228 Volume 12, Number S1, July 2007 SIP Conformance Testing Based on TTCN-2 * LI Tian ( 李天 ), WANG Zhiliang ( 王之梁 ), YIN Xia ( 尹霞 ) ** Department
V&V: Model-based testing
V&V: Model-based testing Systems Engineering BSc Course Budapest University of Technology and Economics Department of Measurement and Information Systems Traceability Platform-based systems design Verification
Cryptography and Network Security Chapter 16. Fourth Edition by William Stallings
Cryptography and Network Security Chapter 16 Fourth Edition by William Stallings Chapter 16 IP Security If a secret piece of news is divulged by a spy before the time is ripe, he must be put to death,
INF3510 Information Security University of Oslo Spring Lecture 9 Communication Security. Audun Jøsang
INF3510 Information Security University of Oslo Spring 2011 Lecture 9 Communication Security Audun Jøsang Outline Network security concepts Communication security Perimeter security Protocol architecture
Network Security 2. Module 4 Configure Site-to-Site VPN Using Pre-Shared Keys
1 1 Network Security 2 Module 4 Configure Site-to-Site VPN Using Pre-Shared Keys 2 Learning Objectives 4.1 Prepare a Router for Site-to-Site VPN using Pre-shared Keys 4.2 Configure a Router for IKE Using
Virtual Private Network
VPN and IPsec Virtual Private Network Creates a secure tunnel over a public network Client to firewall Router to router Firewall to firewall Uses the Internet as the public backbone to access a secure
ETSI TS V1.2.0 ( ) Technical Specification
TS 102 594 V1.2.0 (2008-04) Technical Specification Methods for Testing and Specification (MTS); Internet Protocol Testing (IPT): IPv6 Security; Conformance Abstract Test Suite (ATS) and partial Protocol
IPV6 SIMPLE SECURITY CAPABILITIES.
IPV6 SIMPLE SECURITY CAPABILITIES. 50 issues from RFC 6092 edited by J. Woodyatt, Apple Presentation by Olle E. Johansson, Edvina AB. ABSTRACT The RFC which this presentation is based upon is focused on
The Bizarre Truth! Automating the Automation. Complicated & Confusing taxonomy of Model Based Testing approach A CONFORMIQ WHITEPAPER
The Bizarre Truth! Complicated & Confusing taxonomy of Model Based Testing approach A CONFORMIQ WHITEPAPER By Kimmo Nupponen 1 TABLE OF CONTENTS 1. The context Introduction 2. The approach Know the difference
UniTESK: Component Model Based Testing
UniTESK: Component Model Based Testing Alexander K. Petrenko 1, Victor Kuliamin 1 and Andrey Maksimov 1 1 Institute for System Programming of Russian Academy of Sciences (petrenko, kuliamin, andrew)@ispras.ru
Network Encryption 3 4/20/17
The Network Layer Network Encryption 3 CSC362, Information Security most of the security mechanisms we have surveyed were developed for application- specific needs electronic mail: PGP, S/MIME client/server
Anjay LwM2M SDK. Enabling lightweight device management in the Internet of Things ecosystems
Anjay LwM2M SDK Enabling lightweight device management in the Internet of Things ecosystems Introduction In the era of the Internet of Things, the challenge that device manufacturers truly need to face
Recent Advances in IPv6 Security. Fernando Gont
Recent Advances in IPv6 Security Fernando Gont About... Security researcher and consultant at SI6 Networks Have worked on security assessment on communications protocols for: UK NISCC (National Infrastructure
NFC Forum Compliance Program. Matt Ronning Compliance Committee Chairman NFC Forum September 2009
NFC Forum Compliance Program Matt Ronning Compliance Committee Chairman NFC Forum September 2009 NFC Forum Compliance Program Objectives Develop a means of establishing compliance and interoperability
IMS Bench SIPp. Introduction. Table of contents
Introduction by David Verbeiren (Intel), Philippe Lecluse (Intel), Xavier Simonart (Intel) Table of contents 1 Overview... 2 2 Getting IMS Bench SIPp...3 3 Tested Platforms...3 4 Design Objectives...3
SHISA: The Mobile IPv6/NEMO BS Stack Implementation Current Status
SHISA: The Mobile IPv6/NEMO BS Stack Implementation Current Status Asia BSD Conference 2007 11th March 2007 @ Tokyo, Japan Keiichi Shima 1, Koshiro Mitsuya 2, Ryuji Wakikawa 2, Tsuyoshi Momose 3 and Keisuke
IPSec VPN Setup with IKE Preshared Key and Manual Key on WRVS4400N Router
IPSec VPN Setup with IKE Preshared Key and Manual Key on WRVS4400N Router Objective Internet Protocol Security (IPSec) is used to protect communications through the encryption of IP packets during a communication
Configuring Security for VPNs with IPsec
This module describes how to configure basic IPsec VPNs. IPsec is a framework of open standards developed by the IETF. It provides security for the transmission of sensitive information over unprotected
A ULE Security Approach for Satellite Networks on PLATINE Test Bed
A ULE Security Approach for Satellite Networks on PLATINE Test Bed L. Liang, L. Fan, H. Cruickshank, and Z. Sun Centre of Communication System Research, University of Surrey, Guildford, Surrey, UK C. Baudoin
Cryptography and Network Security
Cryptography and Network Security Third Edition by William Stallings Lecture slides by Lawrie Brown Chapter 15 Electronic Mail Security Despite the refusal of VADM Poindexter and LtCol North to appear,
New Features and Functionality
This section describes the new and updated features and functionality included in Version 6.2.1. Note that only the Firepower 2100 series devices support Version 6.2.1, so new features deployed to devices
CSC 4900 Computer Networks: Security Protocols (2)
CSC 4900 Computer Networks: Security Protocols (2) Professor Henry Carter Fall 2017 Chapter 8 roadmap 8.1 What is network security? 8.2 Principles of cryptography 8.3 Message Integrity 8.4 End point Authentication
Continuous auditing certification
State of the Art in cloud service certification Cloud computing has emerged as the de-facto-standard when it comes to IT delivery. It comes with many benefits, such as flexibility, cost-efficiency and
Configuring IPSec tunnels on Vocality units
Configuring IPSec tunnels on Vocality units Application Note AN141 Revision v1.4 September 2015 AN141 Configuring IPSec tunnels IPSec requires the Security software (RTUSEC) at VOS07_44.01 or later and
DT-ICT : Big data solutions for energy
DT-ICT-11-2019: Big data solutions for energy info day Stefano Bertolo, DG CONNECT Mario Dionisio, DG ENER Scientific Programme Officers Who we are DG CONNECT, Unit G1 Data Policy and Innovation DG ENERGY,
Communication Systems DHCP
Communication Systems DHCP Computer Science Copyright Warning This lecture is already stolen If you copy it please ask the author Prof. Dr. Gerhard Schneider like I did 2 Internet Protocol the Universal
Recent Advances in IPv6 Security. Fernando Gont
Recent Advances in IPv6 Security Fernando Gont About... Security researcher and consultant for SI6 Networks Have worked on security assessment on communications protocols for: UK NISCC (National Infrastructure
Host Identity Protocol
Presentation outline Host Identity Protocol Slides by: Pekka Nikander Ericsson Research Nomadiclab and Helsinki Institute for Information Technology http://www.hip4inter.net 2 What is HIP? Motivation HIP
No Source Code. EEC 521: Software Engineering. Specification-Based Testing. Advantages
No Source Code : Software Testing Black-Box Testing Test-Driven Development No access to source code So test cases don t worry about structure Emphasis is only on ensuring that the contract is met Specification-Based
SysAid Technical Presentation. Phone (Toll-Free US): Phone: +972 (3)
SysAid Technical Presentation www.sysaid.com sales@sysaid.com Phone (Toll-Free US): 1-800-686-7047 Phone: +972 (3) 533-3675 SysAid Overview A Global ITSM Solution Provider Technology Built for You Customer-Driven
Technical Report Intelligent Transport Systems (ITS); Testing; Part 5: IPv6 over GeoNetworking validation report
TR 103 061-5 V1.1.1 (2012-11) Technical Report Intelligent Transport Systems (ITS); Testing; Part 5: IPv6 over GeoNetworking validation report 2 TR 103 061-5 V1.1.1 (2012-11) Reference DTR/ITS-0030018
RFC 430x IPsec Support
The includes features Phase 1 and RFC430x IPsec Support Phase 2 that implement Internet Key Exchange (IKE) and IPsec behavior as specified in RFC 4301. Finding Feature Information, page 1 Information About,
HIP Host Identity Protocol. October 2007 Patrik Salmela Ericsson
HIP Host Identity Protocol October 2007 Patrik Salmela Ericsson Agenda What is the Host Identity Protocol (HIP) What does HIP try to solve HIP basics Architecture The HIP base exchange HIP basic features
Module 9. Configuring IPsec. Contents:
Configuring IPsec 9-1 Module 9 Configuring IPsec Contents: Lesson 1: Overview of IPsec 9-3 Lesson 2: Configuring Connection Security Rules 9-11 Lesson 3: Configuring IPsec NAP Enforcement 9-21 Lab: Configuring
Host Identity Protocol (HIP): Connectivity, Mobility, Multi-Homing, Security, and Privacy over IPv4 and IPv6
Host Identity Protocol (HIP): Connectivity, Mobility, Multi-Homing, Security, and Privacy over IPv4 and IPv6 by Pekka Nikander, Andrei Gurtov, and Thomas R. Henderson Johannes Bachhuber Jacobs University
Signavio Process Manager. Collaborative process design for the entire organization
Signavio Process Manager Collaborative process design for the entire organization www.signavio.com Signavio Content 01 02 03 04 05 06 07 08 09 10 QuickModel BPMN 2.0 Team Collaboration Modeling Conventions
Sharing IPsec with Tunnel Protection
The feature allows sharing an IPsec security association database (SADB) between two or more generic routing encapsulation (GRE) tunnel interfaces when tunnel protection is used. Shared tunnel interfaces
Hillstone IPSec VPN Solution
1. Introduction With the explosion of Internet, more and more companies move their network infrastructure from private lease line to internet. Internet provides a significant cost advantage over private
Sample excerpt. Virtual Private Networks. Contents
Contents Overview...................................................... 7-3.................................................... 7-5 Overview of...................................... 7-5 IPsec Headers...........................................
Elmic Systems: From IPv4 to MoonV6. The most fluent way to speak Internet
Elmic Systems: From IPv4 to MoonV6 The most fluent way to speak Internet Agenda Elmic Systems development of IPv6 How Elmic IPv4 became Elmic IPv6 dual stack Lessons learned Elmic Systems and MoonV6 Elmic
Test Architect A Key Role defined by Siemens
Test Architect A Key Role defined by Siemens Siemens Munich, Germany January 30 February 3, 2017 http://www.oop-konferenz.de Agenda Why do we need a Test Architect? What are the responsibilities and tasks
COMPUTER NETWORK SECURITY
COMPUTER NETWORK SECURITY Prof. Dr. Hasan Hüseyin BALIK (9 th Week) 9. Firewalls and Intrusion Prevention Systems 9.Outline The Need for Firewalls Firewall Characterictics and Access Policy Type of Firewalls
IBM i Version 7.2. Security Virtual Private Networking IBM
IBM i Version 7.2 Security Virtual Private Networking IBM IBM i Version 7.2 Security Virtual Private Networking IBM Note Before using this information and the product it supports, read the information
Configuring IP Version 6
CHAPTER 24 Configuring IP Version 6 Internet Protocol version 6 (IPv6), formerly called IPng (next generation), is the latest version of IP. IPv6 offers many advantages over the previous version of IP,