Q-ESP: A QoS-Compliant Security Protocol to Enrich IPSec Framework

Mostafa, Mahmoud; Kalam, Anas Abou El; Fraboul, Christian

doi:10.1109/ntms.2009.5384762

Cited by 2 publications

(3 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It consists of two security protocols: Authentication Header (AH) and Encapsulated Security Payload (ESP) [30], [31] operating following two distinct modes (transport mode and tunnel mode). The reader may refer to Appendix for further details on IPSec, and see [32]. However, applied to the network-based bilateral teleoperation system, IPSec needs some enhancements.…”

Section: B Securing Application With Ipsecmentioning

confidence: 99%

Bilateral Teleoperation System Using QoS and Secure Communication Networks for Telemedicine Applications

Kalam

Ferreira

Kratz

2016

IEEE Systems Journal

Self Cite

View full text Add to dashboard Cite

The next generation of telesurgical robotics systems presents significant challenges related to network performance and data security. It is known that packet transmission in wide area networks is a complex stochastic process; thus, low bandwidth as well as high delay, jitter, and packet loss will greatly affect the quality of service (QoS) of teleoperation control, which is unacceptable in this kind of sensitive application. Furthermore, a relevant but more serious issue is the network attacks, particularly denial of service as well as data alteration or disclosure. The main motivation of this study is to deploy suitable security mechanisms while preserving the QoS of network-based bilateral teleoperation. We propose and apply a protocol that secures our teleoperation system while preserving its real-time constraints. More precisely, we present in this paper a bilateral generalized predictive controller coupled to a QoS-friendly IP security protocol. The experimental results demonstrate that the telerobotic system is able to satisfy both QoS and security requirements of real-time and sensitive teleoperation tasks. In fact, our teleoperation security protocol provides priority treatment while preventing attacks and avoiding potential deadline misses due to increased security cost.Index Terms-Predictive control, quality of service (QoS), secured network, telerobotics control. 1932-8184

show abstract

Section: B Securing Application With Ipsecmentioning

confidence: 99%

Bilateral Teleoperation System Using QoS and Secure Communication Networks for Telemedicine Applications

Kalam

Ferreira

Kratz

2016

IEEE Systems Journal

Self Cite

View full text Add to dashboard Cite

show abstract

“…The major aim of Q-ESP is to construct packets that are QoS controllable according to active admission control, while maintaining the same security services provided by IPSec ESP and AH used jointly [11]. The next sub-sections give details of these fields.…”

Section: Q-esp Protocolmentioning

confidence: 99%

“…In Reference [11], we emphasized this problem, we discussed existing works and showed their limits, vulnerabilities and potential attacks; finally, we introduced the main idea of the 'QoS friendly Encapsulated Security Payload' (Q-ESP) protocol. The major aim of Q-ESP is to construct packets that are QoS controllable according to active admission control while providing the same security services assured by IPSec ESP and AH [12].…”

Section: Introductionmentioning

confidence: 99%

Specification, implementation and performance evaluation of the QoS‐friendly encapsulating security payload (Q‐ESP) protocol

Mostafa¹,

Kalam²,

Morsey³

2010

Security Comm Networks

Self Cite

View full text Add to dashboard Cite

While IPSec standard is largely used to protect real time network applications, it unfortunately consumes more processing time, cause packet delay and impede QoS enforcement. The QoS level that a flow receives depends on the value of the Type of Service (ToS) field; the later is set by the 'Multi-Field' (MF) packet classifiers according to the IP source and destination addresses and ports as well as the transport layer protocol. The last three fields are encrypted by the IPSec ESP, and thus ESP prevents network control devices from providing preferred treatment for time critical applications. To solve this problem, we propose a QoS-friendly Encapsulated Security Payload (Q-ESP) as a new IPSec security protocol that provides QoS supports while enforcing the same security services assured by IPSec ESP and AH used jointly. Basically, Q-ESP allows network elements to inspect all the needed fields to perform classification adequately. In this paper, we present details about Q-ESP design, processing and kernel implementation. Moreover, we give analytical as well as experimental evaluation of our protocol to measure its impact on real time VoIP; we also compare it to IPSec ESP and AH according to QoS and security metrics. Finally, we present and discuss some application scenarios in which the use of the Q-ESP protocol has many advantages.

show abstract

Q-ESP: A QoS-Compliant Security Protocol to Enrich IPSec Framework

Cited by 2 publications

References 8 publications

Bilateral Teleoperation System Using QoS and Secure Communication Networks for Telemedicine Applications

Bilateral Teleoperation System Using QoS and Secure Communication Networks for Telemedicine Applications

Specification, implementation and performance evaluation of the QoS‐friendly encapsulating security payload (Q‐ESP) protocol

Contact Info

Product

Resources

About