Please use this identifier to cite or link to this item: http://hdl.handle.net/1959.14/197404
10 Visitors
14 Hits
1 Downloads
- Title
- The Silence of the LANs : efficient leakage resilience for IPsec VPNs
- Related
- European Symposium on Research in Computer Security (17th : 2012) (10 - 12 September 2012 : Pisa, Italy)
- Related
- Foresti, Sara; Yung, Moti and Martinelli, Fabio. Computer security : ESORICS 2012 : 17th European Symposium on Research in Computer Security, Pisa, Italy, September 10-12 2012 : proceedings, p.253-270
- DOI
- 10.1007/978-3-642-33167-1_15
- Related
- Lecture notes in computer science Vol. 7459
- Publisher
- Heidelberg, Germany : Springer-Verlag
- Date
- 2012
- Author/Creator
- Sadeghi, Ahmad-Reza
- Author/Creator
- Schulz, Steffen
- Author/Creator
- Varadharajan, Vijay
- Description
- Virtual Private Networks (VPNs) are increasingly used to build logically isolated networks. However, existing VPN designs and deployments neglect the problem of traffic analysis and covert channels. Hence, there are many ways to infer information from VPN traffic without decrypting it. Many proposals were made to mitigate network covert channels, but previous works remained largely theoretical or resulted in prohibitively high padding overhead and performance penalties. In this work, we (1) analyse the impact of covert channels in IPsec, (2) present several improved and novel approaches for covert channel mitigation in IPsec, (3) propose and implement a system for dynamic performance trade-offs, and (4) implement our design in the Linux IPsec stack and evaluate its performance for different types of traffic and mitigation policies. At only 24% overhead, our prototype enforces tight information-theoretic bounds on all information leakage.
- Description
- 18 page(s)
- Subject Keyword
- covert channels
- Subject Keyword
- IPsec
- Subject Keyword
- performance trade-offs
- Subject Keyword
- VPNs
- Resource Type
- conference paper
- Organisation
- Macquarie University. Dept. of Computing
- Identifier
- http://hdl.handle.net/1959.14/197404
- Identifier
- ISBN:9783642331664
- Identifier
- ISSN:0302-9743
- Identifier
- mq_res-ext-2-s2.0-84865596182
- Language
- eng
- Reviewed
