Policy Based Security Management for IPSec Luis A. Sanchez August - PowerPoint PPT Presentation

Nov 09, 2023 •128 likes •201 views

Policy Based Security Management for IPSec Luis A. Sanchez August 25, 1998 Page 1 Page 1 Outline Problems Requirements A Solution Next Step Page 2 Page 2 Problems Need a common security policy specification language

Policy Based Security Management for IPSec Luis A. Sanchez August 25, 1998 Page 1 Page 1
Outline � Problems � Requirements � A Solution � Next Step Page 2 Page 2
Problems � Need a common security policy specification language � Need to specify enforcement points for each policy � Discovery of security gateways � Resolution of security requirements for inter- domain communication � Consistency checking of local security policies � Management of dynamic security associations Page 3
Requirements � Support for complex topologies t multiple embedded tunnels � Support for legacy systems t non IPSec compliant � Scalable and deployable incrementally � Independence of protocol suite, KMP � NAT Friendly � Graceful failure Page 4
A Solution SS 1 RPY2 SS 2 RPY21 SS 21 CMD21 CMD2 C REQ21 REQ2 RPY1 REQ21 1 M RPYd REQd REQ REQ2 D 1 Src Dst SG 1 SG 2 SG 21 Domain 1 Domain 2 Domain 2.1 Security Policy Negotiation Protocol (SPP) Message Flow Legend Functions SPP Messages provides server and security services discovery l domain based policy resolution ● REQ#: SPP-Request l enforcement point selection ● RPY#: SPP-Reply l security association bundle management ● CMD#: SPP-Policy Page 5 l
Next Step � Code Release: Pre-Alpha by End of Sept. 1998 � 2 Internet-Drafts underway: t Security Policy Specification Language t Security Policy System (policy exchange and resolution protocol) � Request feedback from Community and vendors in general � any questions: t lsanchez@bbn.com Page 6

Download Presentation

Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

OPPORTUNISTIC ENCRYPTION USING IPSEC Linux Security Summit, Toronto August 2016 Presented by

OPPORTUNISTIC ENCRYPTION USING IPSEC Linux Security Summit, Toronto August 2016 Presented by Paul Wouters, RHEL Security THE LIBRESWAN PROJECT An Internet Key Exchange (IKE) daemon for IPsec Enterprise IPsec based VPN solution

736 views • 32 slides

Labeled IPsec draft-jml-ipsec-ikev1-security-context-00.txt

Labeled IPsec draft-jml-ipsec-ikev1-security-context-00.txt draft-jml-ipsec-ikev2-security-context-00.txt Presented by: Joy Latten Document authors: Serge Hallyn, Trent Jaeger, Joy Latten, and George Wilson Problem Description Mandatory

295 views • 6 slides

IKEv2: IPSec Key Management Protocol Lecture 20 Acknowledgement: Slides from Vincent Luk, revised

IKEv2: IPSec Key Management Protocol Lecture 20 Acknowledgement: Slides from Vincent Luk, revised by Cunsheng Ding IP Security Architecture IPSec module 1 IPSec module 2 SPD SPD IKE IKE AH/ESP AH/ESP SAD SAD SA IKE: Internet Key

702 views • 26 slides

Introduction to IPsec Charlie Kaufman charliek@microsoft.com 1 IP Security (IPsec) IETF

Introduction to IPsec Charlie Kaufman charliek@microsoft.com 1 IP Security (IPsec) IETF standard for Network Layer security Popular for creating trusted link (VPN), either firewall-firewall, or machine to firewall Done at

868 views • 51 slides

Uses of IPSEC with VPNs VPNs Uses of IPSEC with Purpose Outline some scenarios where IPSEC

Uses of IPSEC with VPNs VPNs Uses of IPSEC with Purpose Outline some scenarios where IPSEC can be used with VPNs Identify areas where extensions to IPSEC could be useful Bryan Gleeson, Page-1 VPN Reference Model CE CE PE

352 views • 9 slides

IPsec (AH, ESP), IKE Guevara Noubir CSG254: Network Security noubir@ccs.neu.edu Securing

IPsec (AH, ESP), IKE Guevara Noubir CSG254: Network Security noubir@ccs.neu.edu Securing Networks Applications Layer Monitoring/Logging/Intrusion Detection Control/Management (configuration) telnet/ftp: ssh, http: https , mail: PGP Network

1.4k views • 26 slides

Cryptography and Network Security IPSEC Security architecture and protocol stack Secure

Cryptography and Network Security IPSEC Security architecture and protocol stack Secure applications: Applicaz. (SHTTP) PGP, SHTTP, SFTP, or SSL/TLS Security down in the TCP protocol stack -SSL between TCP IPSEC and applic. layer

723 views • 59 slides

THE LIBRESWAN PROJECT An Internet Key Exchange (IKE) daemon for IPsec Enterprise IPsec

THE LIBRESWAN PROJECT An Internet Key Exchange (IKE) daemon for IPsec Enterprise IPsec based VPN solution Make encryption the default mode of communication Certifjcations (FIPS, Common Criteria, USGv6, etc.)

917 views • 25 slides

IPSEC VPN overview IPSEC VPN overview Basic VPN Architecture CPE/CLE CPE/CLE PE

IPSEC VPN overview IPSEC VPN overview Basic VPN Architecture CPE/CLE CPE/CLE PE PE CPE/CLE Host PE CPE to CPE IPSEC can be used for : PE to PE PE to CPE Bryan Gleeson, Page-1 CPE to CPE IPSEC tunnels

680 views • 8 slides

IPsec Slide 1 Protocol security - where? Application layer: (+): easy access to user credentials,

IPsec 1 IPsec Slide 1 Protocol security - where? Application layer: (+): easy access to user credentials, extend without waiting for OS vendor, understand data; (-): design again and again; e.g., PGP, ssh, Kerberos Transport layer: (+):

420 views • 18 slides

IP IPSec ( ) 13 Network

IP IPSec ( ) 13 Network Security, Principles and Practice,2nd Ed. : http://www.fata.ir

567 views • 23 slides

Firewalls, IPsec and Linux by Harald Welte <laforge@netfilter.org> Firewalls, IPsec and

Firewalls, IPsec and Linux by Harald Welte <laforge@netfilter.org> Firewalls, IPsec and Linux Contents Introduction Highly Scalable Linux Network Stack Netfilter Hooks Packet selection based on IP Tables The Connection Tracking

444 views • 9 slides

Security Tunneling Cyber Security Spring 2010 Reading Material IPSec overview Chapter

Security Tunneling Cyber Security Spring 2010 Reading Material IPSec overview Chapter 6 Network Security Essentials, William Stallings SSH RFCs 4251, 4252, 4253 SSL/TLS overview Slide material from Bishop

1.55k views • 69 slides

Security and Authorization CS430/630 Lecture 18 Slides based on Database Management Systems

Security and Authorization CS430/630 Lecture 18 Slides based on Database Management Systems 3 rd ed, Ramakrishnan and Gehrke Definitions Security policy specifies who is authorized to do what Security mechanism allows to

892 views • 26 slides

On the (In)Security of IPsec in MAC-then-Encrypt Configurations Jean Paul Degabriele Kenneth G.

Motivation The Attacks Concluding Remarks On the (In)Security of IPsec in MAC-then-Encrypt Configurations Jean Paul Degabriele Kenneth G. Paterson Information Security Group Royal Holloway, University of London CCS 2010 Jean Paul

930 views • 68 slides

Specification-based testing of IPsec Institute for system Programming Russian Academy of

Specification-based testing of IPsec Institute for system Programming Russian Academy of Sciences Nickolay Pakoulin npak@ispras.ru Agenda Work Background Specification based testing in IPsec Discussion Future work The work

578 views • 30 slides

The New Security Frontier: Threat Hunting, Augmented Intelligence, and Automated Response

The New Security Frontier: Threat Hunting, Augmented Intelligence, and Automated Response Michael Melore, CISSP IBM Cyber Security Advisor @MichaelMelore June 2018 May 2018 May 2018 Threat Hunting Workflow Cognitive Advanced Analytics

443 views • 15 slides

Document Hierarchy of Information Security Corporate Security Policy Policy General commitment

Document Hierarchy of Information Security Corporate Security Policy Policy General commitment to Information Security General commitment to Information Security Installation of CorpSec Enabling CSO Installing Information Security Standard

355 views • 8 slides

CS 5412: LECTURE 6 Ken Birman TIMESTAMPED DATA Spring, 2019

CS 5412: LECTURE 6 Ken Birman TIMESTAMPED DATA Spring, 2019 HTTP://WWW.CS.CORNELL.EDU/COURSES/CS5412/2019SP 1 TODAY: DRILL DOWN ON TIME Last time we discussed time more as an active aspect of a coordinated system (one of a few dimensions in

611 views • 42 slides

FY 2019 Q2 Earnings Call May 7, 2019 Agenda TransDigm Overview and Highlights Nick Howley

FY 2019 Q2 Earnings Call May 7, 2019 Agenda TransDigm Overview and Highlights Nick Howley Executive Chairman Operating Performance, Market Review, Kevin Stein Outlook and Esterline Integration President and CEO Financial Results

504 views • 21 slides

How to set up a CSIRT in an ITIL driven organization Christian Proschinger Raiffeisen Informatik

How to set up a CSIRT in an ITIL driven organization Christian Proschinger Raiffeisen Informatik GmbH Introduction R-IT CERT Idea Introduction to ITIL Example Vulnerability Management Lessons Learned How to set up a CSIRT in

380 views • 16 slides

EUDAT AND SECURITY Urpo Kaila, EUDAT Security Officer urpo.kaila@csc.fi, security@eudat.eu WISE W

EUDAT AND SECURITY Urpo Kaila, EUDAT Security Officer urpo.kaila@csc.fi, security@eudat.eu WISE W orkshop for I nformation S ecurity for E -infrastructures 2015-10-20, Barcelona This work is licensed under the Creative Commons CC-BY 4.0

563 views • 30 slides

So You Want to Be an Information Security Officer? Presented by: Art Bakke Information Security

So You Want to Be an Information Security Officer? Presented by: Art Bakke Information Security Officer Background Personal Starion Bank Arts Goals Highlight the typical responsibilities of an Information Security Officer from

778 views • 22 slides

What do ALL NGIs need to do? Requirements for operational security Sven Gabriel (Nikhef) EGEE

Enabling Grids for E-sciencE What do ALL NGIs need to do? Requirements for operational security Sven Gabriel (Nikhef) EGEE Operational Security Coordination Team http://cern.ch/osct/ www.eu-egee.org Information Society and media EGEE-III

311 views • 13 slides