Network security
Securing networks by using VPNs
PROJECT
Modernisation of VET through Collaboration with the Industry
http://movet.fel.cvut.cz
This project has been funded with support from the European Commission.
This publication reflects the views only of the author, and the Commission cannot be held responsible for any use which may be made of the information contained therein.
AUTHOR

Ivan Pravda

TRANSALTED BY

Michal Łucki

ANNOTATION

This teaching module deals with network security capabilities with a focus on Virtual Private Networking (VPN). It defines a number of basic concepts, it includes the description of some basic components and concepts of VPNs. In addition, attention is paid to the explanation of the IPSec protocol and to the mechanisms allowing the implementation of private network security, such as the ISAKMP/IKE method and the Diffie-Hellmann key exchange mechanism. Last but not least, the module contains a number of practical examples and solutions for them. The final part of the module describes electronic signature.

OBJECTIVES

By studying the module students will get an overview of the problem of computer networks’ security provided by virtual private networks. The topic is very current, as the concept of security is very closely related to cybercrime. Emphasis is placed not only on the clarification of terminology in this field, but also on the explanation of the principle of basic procedures, supplemented by specific examples of implementation. The final part explains electronic signature and its implementation in everyday life.

KEYWORDS

VPN, IPSec, SSL/TLS, tunneling, encryption, electronic signature, electronic seal.

LITERATURE

- [1] Deal, Richard. The Complete Cisco VPN Configuration Guide. Cisco Press, 2005. 1032 pages. ISBN: 978-1-58705-204-0.
- [2] Cisco Systems. Clientless SSL VPN (WebVPN) on Cisco IOS with SDM Configuration Example. 2009. https://www.cisco.com/c/en/us/support/docs/security/ssl-vpn-client/70663-webvpn.html [online]
- [3] RFC4301 - Security Architecture for the Internet Protocol http://tools.ietf.org/html/rfc4301 [online]
- [4] RFC4302 - IP Authentication Header http://tools.ietf.org/html/rfc4302 [online]
- [5] RFC4303 - IP Encapsulating Security Payload (ESP) http://tools.ietf.org/html/rfc4303 [online]
- [6] RFC4308 - Cryptographic Suites for IPsec http://tools.ietf.org/html/rfc4308 [online]
- [7] RFC4364 - BGP/MPLS IP Virtual Private Networks (VPNs). http://tools.ietf.org/html/rfc4364 [online]
- [8] RFC4835 - Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) and Authentication Header (AH) http://tools.ietf.org/html/rfc4835 [online]
- [9] RFC5246 - The Transport Layer Security (TLS) Protocol Version 1.2. http://tools.ietf.org/html/rfc5246 [online]