NDLI: Techniques for improving the security and manageability of IPsec policy

Content Provider	Springer Nature Link
Author	Trostle, Jonathan Gossman, Bill
Copyright Year	2005
Abstract	We discuss the strengths and weaknesses of existing tools with respect to the Internet Protocol security (IPsec) name mapping problem: how to ensure a correct mapping between application-layer target names and network-layer target names. We show that DNSSEC is neither necessary nor sufficient for solving the IPsec name mapping problem. We describe design and implementation results for new techniques that are applicable to legacy applications to partially or completely solve the IPsec name mapping problem. As a corollary, we obtain programming recommendations that make it easier to apply these techniques. We show how the set of current IPsec policy parameters can usefully be expanded. We give a prototype of a modified lookup API and argue that the modified API is the preferred long-term solution to the IPsec name mapping problem. We also cover the implications for IPsec key management. Finally, we summarize the environments where IPsec is being used today and discuss which IPsec name mapping techniques are most appropriate for these environments.
Starting Page	209
Ending Page	226
Page Count	18
File Format	PDF
ISSN	16155262
Journal	International Journal of Information Security
Volume Number	4
Issue Number	3
e-ISSN	16155270
Language	English
Publisher	Springer Berlin Heidelberg
Publisher Date	2005-06-01
Publisher Place	Berlin, Heidelberg
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	IPsec IPsec policy DNSSEC Host local IP address Service name Data Encryption Computer Communication Networks Operating Systems Coding and Information Theory Management of Computing and Information Systems Communications Engineering, Networks
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Information Systems Safety, Risk, Reliability and Quality Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Offline firewall analysis

Rigorous automated network security management

Broadcast encryption with dealership

Enhancing host security using external environment sensors

On improving resistance to Denial of Service and key provisioning scalability of the DTLS handshake

Security in cloud computing

Modeling contextual security policies

Computer security

Passive classification of wireless NICs during active scanning

Techniques for improving the security and manageability of IPsec policy

Similar Documents

Offline firewall analysis

Rigorous automated network security management

Broadcast encryption with dealership

Enhancing host security using external environment sensors

On improving resistance to Denial of Service and key provisioning scalability of the DTLS handshake

Security in cloud computing

Modeling contextual security policies

Computer security

Passive classification of wireless NICs during active scanning

Techniques for improving the security and manageability of IPsec policy