An approach for measuring IP security performance in a distributed environment

Chappell, B.L.; Marlow, D.T.; Irey, Philip M.; O'Donoghue, Karen

doi:10.1007/bfb0097921

Cited by 5 publications

(1 citation statement)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It indicates also that when the packet size is small, IPsec becomes less efficient. These results are comparable with the results of much other research [14] and [30]. Our results also showed that the increase of the latency value is small even after applying IPsec.…”

Section: Discussionsupporting

confidence: 93%

Implementation and performance evaluation of embedded IPsec in microkernel OS

Hamad

Prevelakis

2015

2015 World Symposium on Computer Networks and Information Security (WSCNIS)

View full text Add to dashboard Cite

The rapid development of the embedded systems and the wide use of them in many sensitive fields require safeguarding their communications. Internet Protocol Security (IPsec) is widely used to solve network security problems by providing confidentiality and integrity for the communications in the network, but it introduces communication overhead. This overhead becomes a critical factor with embedded systems because of their low computing power and limited resources. In this research, we studied the overhead of using embedded IPsec in constrained resource systems, which run microkernel operating system (OS), in terms of the network latency and throughput. To conduct our experiment first, we ran the test with an unmodified network stack, and then we ran the same test with the modified network stack which contains the IPsec implementation. Later, we compared the results obtained from these two sets of experiments to examine the overhead. Our research demonstrated that the overhead imposed by IPsec protocols is small and well within the capabilities of even low cost microcontrollers such as the one used in the Raspberry Pi computer.

show abstract

Section: Discussionsupporting

confidence: 93%

Implementation and performance evaluation of embedded IPsec in microkernel OS

Hamad

Prevelakis

2015

2015 World Symposium on Computer Networks and Information Security (WSCNIS)

View full text Add to dashboard Cite

show abstract

Security and Scalability of Remote Entrusting Protection

Desnitsky

Kotenko

2010

Lecture Notes in Computer Science

View full text Add to dashboard Cite

IPSec overhead in wireline and wireless networks for Web and email applications

Hadjichristofi

Davis

Midkiff

Conference Proceedings of the 2003 IEEE International

View full text Add to dashboard Cite

This research focuses on developing a set of secure communication network testbeds and using them to measure the overhead of IP Security (IPSec) for email and web applications. The network testbeds are implemented using both wireline and wireless technologies. The testing involves a combination of authentication algorithms such as Hashed Message Authentication Code-Message Digest 5 (HMAC-MD5) and Hashed Message Authentication Code-Secure Hash Algorithm 1 (HMAC-SHA1), implemented through different authentication protocols such as ESP and AH, and used in conjunction with the Triple Digital Encryption Standard (3DES). The research examines the overhead using no encryption and no authentication, authentication and no encryption, and authentication and encryption. A variety of different sizes of compressed and uncompressed files, are considered when measuring the overhead.The testbed realizes security using IPSec to secure the connection between different nodes. The email protocol that is used is the Simple Mail Transfer Protocol (SMTP) and the web protocol considered is the Hyper Text Transfer Protocol (HTTP). The key metrics considered are the network load in bytes, the number of packets, and the transfer time.This research emphasizes the importance of using HTTP to access files than using SMTP. Use of HTTP requires fewer packets, lower network loads, and lower transfer times than SMTP. It is demonstrated that this difference, which occurs regardless of security, is magnified by the use of authentication and encryption. The results also indicate the value of using compressed files for file transfers. Compressed and uncompressed files require the same transfer time, network load and number of packets since FreeS/WAN IPSec does not carry any form of compression on the data before passing it to the data link layer. Both authentication algorithms, HMAC-MD5 and HMAC-SHA1, result in about the same network load and number of packets. However, HMAC-SHA1 results in a higher transfer time than HMAC-MD5 because of SHA1's higher computational requirements. ESP authentication and ESP encryption reduce the network load for small files only, compared to ESP encryption and AH authentication. ESP authentication could not be compared with AH authentication, since the FreeS/WAN IPSec implementation used in the study does not support ESP authentication without using encryption. In a wireless environment, using IPSec does not increase the network load and the number of transactions, when compared to a wireline environment. Also, the effect of security on transfer time is higher compared to a wireline environment, even though that increase is overshadowed by the high transfer time percentage increase due to the wireless medium.iii

show abstract

An approach for measuring IP security performance in a distributed environment

Cited by 5 publications

References 6 publications

Implementation and performance evaluation of embedded IPsec in microkernel OS

Implementation and performance evaluation of embedded IPsec in microkernel OS

Security and Scalability of Remote Entrusting Protection

IPSec overhead in wireline and wireless networks for Web and email applications

Contact Info

Product

Resources

About