1 Pertemuan 11 IPSec dan SSL Matakuliah: H0242 / Keamanan Jaringan Tahun: 2006 Versi: 1.

Slides:

Advertisements

Similar presentations

IP Security have considered some application specific security mechanisms –eg. S/MIME, PGP, Kerberos, SSL/HTTPS however there are security concerns that.

Advertisements

Internet Protocol Security (IP Sec)

NS-H /11041 IP Security. NS-H /11042 TCP/IP Example.

Spring 2012: CS419 Computer Security Vinod Ganapathy SSL, etc.

Internet Security CSCE 813 IPsec

IPSec: Authentication Header, Encapsulating Security Payload Protocols CSCI 5931 Web Security Edward Murphy.

Henric Johnson1 Chapter 6 IP Security Henric Johnson Blekinge Institute of Technology, Sweden

Information System Security AABFS-Jordan Summer 2006 IP Security Supervisor :Dr. Lo'ai Ali Tawalbeh Done by: Wa’el Musa Hadi.

Cryptography and Network Security Chapter 16 Fourth Edition by William Stallings Lecture slides by Lawrie Brown.

IP SECURITY – Chapter 16 IP SECURITY – Chapter 16 Security Mechanisms: – S/MIME, PGP client/server - Kerberos web access - Secure Sockets Layer network.

ECE 454/CS 594 Computer and Network Security Dr. Jinyuan (Stella) Sun Dept. of Electrical Engineering and Computer Science University of Tennessee Fall.

Henric Johnson1 Ola Flygt Växjö University, Sweden IP Security.

Henric Johnson1 Chapter 6 IP Security. Henric Johnson2 Outline Internetworking and Internet Protocols IP Security Overview IP Security Architecture Authentication.

IP Security. Overview In 1994, Internet Architecture Board (IAB) issued a report titled “Security in the Internet Architecture”. This report identified.

CSCE 715: Network Systems Security Chin-Tser Huang University of South Carolina.

Internet Protocol Security An Overview of IPSec. Outline:  What Security Problem?  Understanding TCP/IP.  Security at What Level?  IP Security. 

1 IP Security Outline of the session –IP Security Overview –IP Security Architecture –Key Management Based on slides by Dr. Lawrie Brown of the Australian.

Encapsulation Security Payload Protocol Lan Vu. OUTLINE 1.Introduction and terms 2.ESP Overview 3.ESP Packet Format 4.ESP Fields 5.ESP Modes 6.ESP packet.

Cryptography and Network Security

Chapter 6 IP Security. Outline Internetworking and Internet Protocols (Appendix 6A) IP Security Overview IP Security Architecture Authentication Header.

Lecture 22 Internet Security Protocols and Standards modified from slides of Lawrie Brown.

IP Security. IPSEC Objectives n Band-aid for IPv4 u Spoofing a problem u Not designed with security or authentication in mind n IP layer mechanism for.

Computer Security: Principles and Practice First Edition by William Stallings and Lawrie Brown Lecture slides by Lawrie Brown Chapter 21 – Internet Security.

1 Chapter 6 IP Security Henric Johnson Blekinge Institute of Technology, Sweden Revised by Andrew.

IP Security: Security Across the Protocol Stack

Cosc 4765 SSL/TLS and VPN. SSL and TLS We can apply this generally, but also from a prospective of web services. Multi-layered: –S-http (secure http),

Cryptography and Network Security Third Edition by William Stallings Lecture slides by Lawrie Brown.

Cryptography and Network Security Third Edition by William Stallings Lecture slides by Lawrie Brown.

CSCE 715: Network Systems Security

/IPsecurity.ppt 1 - Chapter 6 of William Stallings. Network Security Essentials (2nd edition). Prentice Hall.

IPSec IPSec provides the capability to secure communications across a LAN, across private and public wide area networks (WANs) and across the Internet.

Computer Security: Principles and Practice First Edition by William Stallings and Lawrie Brown Lecture slides by Lawrie Brown Chapter 21 – Internet Security.

Karlstad University IP security Ge Zhang

IP Security.  In CERTs 2001 annual report it listed 52,000 security incidents  the most serious involving:  IP spoofing intruders creating packets.

Chapter 6 IP Security. We have considered some application specific security mechanisms in last chapter eg. S/MIME, PGP, Kerberos however there are security.

IP Security. P R E S E N T E D B Y ::: Semester : 8 ::: Year : 2009 Naeem Riaz Maria Shakeel Aqsa Nizam.

IP Security: Security Across the Protocol Stack. IP Security There are some application specific security mechanisms –eg. S/MIME, PGP, Kerberos, SSL/HTTPS.

1 Chapter 6 IP Security. 2 Outline Internetworking and Internet Protocols (Appendix 6A) IP Security Overview IP Security Architecture Authentication Header.

IP Securty 1. Overview 2. Architecture 3. Authentication Header 4. Encapsulating Security Payload 5. Combining security Associations 6. Internet Key Exchange.

Chapter 8 IP Security MSc. NGUYEN CAO DAT Dr. TRAN VAN HOAI.

IP security Ge Zhang Packet-switched network is not Secure! The protocols were designed in the late 70s to early 80s –Very small network.

IPSec and TLS Lesson Introduction ●IPSec and the Internet key exchange protocol ●Transport layer security protocol.

1 IPv6 Security & QoS Babu Ram Dawadi. 2 Outline IP Security Overview IP Security Architecture Authentication Header Encapsulating Security Payload Combinations.

Security IPsec 1 * Essential Network Security Book Slides. IT352 | Network Security |Najwa AlGhamdi 1.

Cryptography and Network Security (CS435) Part Thirteen (IP Security)

IPSec  general IP Security mechanisms  provides  authentication  confidentiality  key management  Applications include Secure connectivity over.

CSCE 715: Network Systems Security Chin-Tser Huang University of South Carolina.

Network Layer Security Network Systems Security Mort Anvari.

CSEN 1001 Computer and Network Security Amr El Mougy Mouaz ElAbsawi.

Presentaion on ipsecurity Presentaion given by arun saraswat To lavkush sharma sir arun saraswat1.

第六章 IP 安全. Cryptography and Network Security Third Edition by William Stallings Lecture slides by Lawrie Brown.

IP Security - Chapter 6 of William Stallings. Network Security Essentials (2nd edition). Prentice Hall Slides by Henric Johnson Blekinge Institute.

IPSec Detailed Description and VPN

UNIT 7- IP Security 1.IP SEC 2.IP Security Architecture

IPv6 Security & QoS Babu Ram Dawadi.

Chapter 16 – IP Security If a secret piece of news is divulged by a spy before the time is ripe, he must be put to death, together with the man to whom.

Chapter 18 IP Security  IP Security (IPSec)

CSE565: Computer Security Lecture 23 IP Security

No.9: IP Security Network Information Security 网络信息安全

Cryptography and Network Security

CSCE 815 Network Security Lecture 13

IP Security - Chapter 6 of William Stallings. Network Security Essentials (2nd edition). Prentice Hall Slides by Henric Johnson Blekinge Institute.

IP Security - Chapter 6 of William Stallings. Network Security Essentials (2nd edition). Prentice Hall Slides by Henric Johnson Blekinge Institute.

Network Security 4/21/2019 Raj Rajarajan.

Chapter 6 IP Security.

Cryptography and Network Security

Presentation transcript:

1 Pertemuan 11 IPSec dan SSL Matakuliah: H0242 / Keamanan Jaringan Tahun: 2006 Versi: 1

2 Learning Outcomes Pada akhir pertemuan ini, diharapkan mahasiswa akan mampu : –Mahasiswa dapat menjelaskan IP Security dan SSL

3 Outline Materi Konsep IP Security Arsitecture IP security Protokol dasar SSL Arsitektur SSL

4 Security facilities in TCP/IP

5 IP Security Overview IPSec is not a single protocol. IPSec provides a set of security algorithms plus a general framework that allows a pair of communicating entities to use whichever algorithms provide security appropriate for the communication. General IP Security mechanisms provides –Authentication –Confidentiality –Key management Applicable to use over LANs, across public and private WANs, and for the Internet

6 IP Security Overview Applications of IPSec –Secure branch office connectivity over the Internet –Secure remote access over the Internet –Establsihing extranet and intranet connectivity with partners –Enhancing electronic commerce security

7 IP Security Overview Benefits of IPSec –Transparent to applications (below transport layer (TCP, UDP) –Provide security for individual users –IPSec can assure that: A router or neighbor advertisement comes from an authorized router A redirect message comes from the router to which the initial packet was sent A routing update is not forged provides strong security to all traffic crossing the perimeter

8 IP Security Scenario

9 Authentication Header Authentication Header (AH) provides support for data integrity & authentication of IP packets –End system/router can authenticate user/app –Prevents address spoofing attacks by tracking sequence numbers Based on use of a MAC –HMAC-MD5-96 or HMAC-SHA-1-96 Parties must share a secret key

10 Authentication Header Provides support for data integrity and authentication (MAC code) of IP packets. Guards against replay attacks.

11 AH Authentication Tunnel Mode AH Authentication

12 Security Associations Security Association (SA) is a one-way relationship between sender & receiver that affords security for traffic flow Defined by 3 parameters: –Security Parameters Index (SPI) –IP Destination Address –Security Protocol Identifier Has a number of other parameters –seq no, AH & EH info, lifetime etc Have a database of Security Associations

13 ESP Encapsulating Security Payload (ESP) provides message content confidentiality & limited traffic flow confidentiality Can optionally provide the same authentication services as AH Supports range of ciphers, modes, padding –DES, Triple-DES, RC5, IDEA, CAST, etc –CBC most common –Pad to meet blocksize, for traffic flow

14 ESP ESP Encryption and Authentication

15 Algorithms Encryption & Authentication Algorithms –Encryption: Three-key triple DES RC5 IDEA Three-key triple IDEA CAST Blowfish –Authentication: HMAC-MD5-96 HMAC-SHA-1-96

16 Transport & Tunnel Modes

17 Transport & Tunnel Mode ESP Transport mode is used to encrypt & optionally authenticate IP data –Data protected but header left in clear –Can do traffic analysis but is efficient –Good for ESP host to host traffic Tunnel mode encrypts entire IP packet –Add new header for next hop –Good for VPNs, gateway to gateway security

18 SSL and TLS SSL was originated by Netscape TLS working group was formed within IETF First version of TLS can be viewed as an SSLv3.1

19 SSL Architecture

20 Handshake Protocol The most complex part of SSL. Allows the server and client to authenticate each other. Negotiate encryption, MAC algorithm and cryptographic keys. Used before any application data are transmitted.

21 Handshake Protocol Action