NDLI: Performance Evaluation of Widely Used Portknoking Algorithms

Content Provider	IEEE Xplore Digital Library
Author	Khan, Z.A. Javaid, N. Arshad, M.H. Bibi, A. Qasim, B.
Copyright Year	2012
Abstract	Port knocking is a technique by which only a single packet or special sequence will permit the firewall to open a port on a machine where all ports are blocked by default. It is a passive authorization technique which offers firewall-level authentication to ensure authorized access to potentially vulnerable network services. In this paper, we present performance evaluation and analytical comparison of three widely used port knocking (PK) algorithms, Aldaba, FWKNOP and SIG-2. Comparative analysis is based upon ten selected parameters; Platforms (Supported OS), Implementation (PK, SPA or both), Protocols (UDP, TCP, ICMP), Out of Order packet delivery, NAT (Network Address Translation), Encryption Algorithms, Root privileges (For installation and operation), Weak Passwords, Replay Attacks and IPv6 compatibility. Based upon these parameters, relative performance score has been given to each algorithm. Finally, we deduce that FWKNOP due to compatibility with windows client is the most efficient among chosen PK implementations.
Starting Page	903
Ending Page	907
File Size	322558
Page Count	5
File Format	PDF
ISBN	9781467321648
DOI	10.1109/HPCC.2012.129
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2012-06-25
Publisher Place	United Kingdom
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Protocols Transmission Control Protocol Servers Firewall knock operator Man In the Middle Network Address Translator Authorization Authentication Port Knocking Authenticating User Internet Protocol Single Packet Authorization IP networks User Datagram Protocol Secure Shell
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Network security using firewall and cryptographic authentication (2012).

Port–knocking system using unilateral authentication algorithm.

SPKT: Secure Port Knock-Tunneling, an enhanced port security authentication mechanism

Towards Improving Packet Probing Techniques (2001)

Towards improving packet probing techniques (2001).

One-Time Knocking framework using SPA and IPsec

Address Knocking: An Undetectable Authentication Based on IPv6 Address

Firewall varieties (2009).

Profiles for User Datagram Protocol (UDP) Lite (2005)

Performance Evaluation of Widely Used Portknoking Algorithms

Similar Documents

Network security using firewall and cryptographic authentication (2012).

Port–knocking system using unilateral authentication algorithm.

SPKT: Secure Port Knock-Tunneling, an enhanced port security authentication mechanism

Towards Improving Packet Probing Techniques (2001)

Towards improving packet probing techniques (2001).

One-Time Knocking framework using SPA and IPsec

Address Knocking: An Undetectable Authentication Based on IPv6 Address

Firewall varieties (2009).

Profiles for User Datagram Protocol (UDP) Lite (2005)

Performance Evaluation of Widely Used Portknoking Algorithms