Enhancing VPN security through security policy management

Singh, Arun; Samaddar, Shefalika Ghosh; Misra, A. K.

doi:10.1109/rait.2012.6194494

Cited by 13 publications

(12 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A list of threats and potential attacks on the Transport Layer Security (TLS) and Secure Shell protocols is available [14]. However, while Virtual Private Networks (VPNs) usually call upon the L2TP protocol, reference [15] this alone does not suffice to meet with the LHSs' requirements: There are threats like traffic fingerprinting attacks, possible unencrypted intermediate texts (metadata added during transit of network packets), and potentially leaked client identity keys allowing the identification of the sender for a given message [16].…”

Section: Related Workmentioning

confidence: 99%

A Sensitive Data Access Model in Support of Learning Health Systems

et al. 2021

View full text Add to dashboard Cite

Given the ever-growing body of knowledge, healthcare improvement hinges more than ever on efficient knowledge transfer to clinicians and patients. Promoted initially by the Institute of Medicine, the Learning Health System (LHS) framework emerged in the early 2000s. It places focus on learning cycles where care delivery is tightly coupled with research activities, which in turn is closely tied to knowledge transfer, ultimately injecting solid improvements into medical practice. Sensitive health data access across multiple organisations is therefore paramount to support LHSs. While the LHS vision is well established, security requirements to support them are not. Health data exchange approaches have been implemented (e.g., HL7 FHIR) or proposed (e.g., blockchain-based methods), but none cover the entire LHS requirement spectrum. To address this, the Sensitive Data Access Model (SDAM) is proposed. Using a representation of agents and processes of data access systems, specific security requirements are presented and the SDAM layer architecture is described, with an emphasis on its mix-network dynamic topology approach. A clinical application benefiting from the model is subsequently presented and an analysis evaluates the security properties and vulnerability mitigation strategies offered by a protocol suite following SDAM and in parallel, by FHIR.

show abstract

Section: Related Workmentioning

confidence: 99%

A Sensitive Data Access Model in Support of Learning Health Systems

et al. 2021

View full text Add to dashboard Cite

show abstract

“…However, the ones are still informative [3]. Some researches talk about security methods of a VPN [13], while many others focus on the amazingly accurate performance of VPNs [15][16][17]. However, no academic research doesn't really seems to compare IP Sec [8,10] to a more highly state VPNs procedure such as Wire Guard [18,19] and GRE [20].…”

Section: Literature Review and Problem Statementmentioning

confidence: 99%

“…VPN gives users the opportunity to be in contact with a closed network while using the Internet in a safe way as well as securely. VPN produces converted data and information into codes that prevent interrelation, which is known as a VPN tunnel, and every Internet traffic and communication is taken into the safe tunnel [13,28]. VPN is practically made of two different kinds:…”

Section: Types Of a Virtual Private Network (Vpn)mentioning

confidence: 99%

“…Transport mode encrypts only the data part (Payload) of packets. Tunnel mode is much safer, which codes two things which are the header as well as the payload [13,43], for a better understanding the below Table 1 has more details that explain the performance of IP Sec VPN tunnels.…”

Section: Fig 2 Ip Sec Vpn Tunnelmentioning

confidence: 99%

“…This paper has a key aspect that is around a network layer VPNs. Network layers give a very well comforting place to do encryption [13,14]. The network layer is reduced just about the right amount in the stack to offer smooth connectivity to all applications that are active on top of it and is on its highest to allow a decent granularity for the traffic that should be part of the VPN according to the extensive IP Addressing architecture in place [11].…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Comparison of VPN Protocols at Network Layer Focusing on Wire Guard Protocol

Abdulazeez

Salim

Zeebaree

et al. 2020

Int. J. Interact. Mob. Technol.

View full text Add to dashboard Cite

The key point of this paper is to assess and look over the top of the line network layer-based VPN (Virtual Private Network) protocols because data link layer is hardly ever found to be in use in organizations, the reason is because of its exceedingly high charge. Virtual Private Network (VPN) is commonly used in business situations to provide secure communication channels over public infrastructure such as Internet. Virtual Private Networks (VPNs) provide a secure encrypted communication between remote networks worldwide by using Internet Protocol (IP) tunnels and a shared medium like the Internet. The paper follows and sets standards for different types of protocols and techniques, the VPN (Virtual Private Network) architectural feature is made to deliver dependable and safe network that is not in line with regular networks that provide a higher trust and a higher secure channel between user and organization. The current study took place to summaries the usage of existing VPNs protocol and to show the strength of every VPN. Through different studies that have been made by other researchers as well as an extra focus on the state of art protocol, Wire guard. It is also worthy to mention that wire guard compared with other protocols such as IPsec and GRE. The studies show the WireGuard being a better choice in terms of other well-known procedures to inaugurate a secure and trusted VPN.

show abstract