NDLI: Efficient Algorithms for Dynamic Detection and Resolution of IPSec/VPN Security Policy Conflicts

Content Provider	IEEE Xplore Digital Library
Author	Niksefat, S. Sabaei, M.
Copyright Year	2010
Abstract	Today IPSec virtual private networks are widely used to establish secure network connections between a pair of hosts, between a pair of security gateways, or between a security gateway and a host. The complexity and variety of rules in an IPSec policy may result in a combination of rules which not only do not provide the required security services, but also compromise the security of communication. Efficiency has not been a major concern for existing IPSec policy conflict detection methods since they process the IPSec rules in an offline way. These methods could be inefficient in dynamic conditions that rules are being updated frequently. The performance of the conflict detection is important in environments where network administrator needs to frequently add or delete rules to existing policy and also he/she needs to know of the possible conflicts which may arise due to policy changes. In this paper we extend the formal model proposed by Hamed [6] for IPSec policy analysis and propose novel and efficient algorithms which can dynamically detect and also resolve the policy conflicts. The results of the implementation and evaluation of our proposed algorithms show significantly better performance for detection and resolution of IPSec policy conflicts, comparing to current work.
Starting Page	737
Ending Page	744
File Size	397507
Page Count	8
File Format	PDF
ISBN	9781424466955
ISSN	1550445X
e-ISBN	9781424466962
DOI	10.1109/AINA.2010.99
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-04-20
Publisher Place	Australia
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Heuristic algorithms Virtual private networks Data structures Boolean functions Protocols Computer security Information security Algorithm design and analysis Internet Peer to peer computing Dynamic Conflict Detection and Resolution Virtual Private Networks IPSec IPSec Policy Policy Conflicts
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

IPSec/VPN security policy: Correctness, conflict detection and resolution (2001)

Modeling and verification of IPSec and VPN security policies

Technical comparison analysis of encryption algorithm on site-to-site IPSec VPN

A framework for tunneled traffic analysis

Study and implement of VPN penetrating NAT based on IPSec protocol

Information security of mobile VPN: Conceptual models and design methodology

Secure voice over Internet Protocol (voIP) using virtual private networks (VPN) and Internet Protocol Security (IPSec)

Efficient application of IPsec VPNs in wireless networks

Preservation of Security Configurations in the Cloud

Efficient Algorithms for Dynamic Detection and Resolution of IPSec/VPN Security Policy Conflicts

Similar Documents

IPSec/VPN security policy: Correctness, conflict detection and resolution (2001)

Modeling and verification of IPSec and VPN security policies

Technical comparison analysis of encryption algorithm on site-to-site IPSec VPN

A framework for tunneled traffic analysis

Study and implement of VPN penetrating NAT based on IPSec protocol

Information security of mobile VPN: Conceptual models and design methodology

Secure voice over Internet Protocol (voIP) using virtual private networks (VPN) and Internet Protocol Security (IPSec)

Efficient application of IPsec VPNs in wireless networks

Preservation of Security Configurations in the Cloud

Efficient Algorithms for Dynamic Detection and Resolution of IPSec/VPN Security Policy Conflicts