Tunneling techniques for end-to-end VPNs: generic deployment in an optical testbed environment

Saad, Tarek; Alawieh, Basel; Guider, S.; Mouftah, Hussein T.

doi:10.1109/icbn.2005.1589696

Cited by 5 publications

(4 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To address that, an end‐to‐end secure VPN connection must be established with each ISP and LEA. However, with so many endpoints and the constant flow of huge data through a central node, providing accessibility at all times would be challenging (Saad et al., ). While expensive and liable to creating more security concerns, setting up data centers in a few different places by cloning the global database and utilizing cloud computing more effectively could be a reasonable option to handle the enormous data load.…”

Section: Discussionmentioning

confidence: 99%

Framework for a Single Global Repository of Child Abuse Materials

Açar¹

2019

Global Policy

View full text Add to dashboard Cite

Against the tide of a huge amount of data, law enforcement agencies barely manage to focus on undiscovered child abuse materials (CAMs) to identify victims, abusers, and crime scenes. Currently, to alleviate this burden to some extent, there are international and national repositories of CAMs in place, such as Interpol's International Child Sexual Exploitation Database (ICSE DB), NCMEC's Child Recognition and Identification System (CRIS), and the UK's Child Abuse Image Database (CAID). This article introduced these global, regional, and national repositories and other related transnational initiatives comprehensively and also critiques the current trend of setting up more repositories and additional initiatives at local and regional levels. Later, the author elaborates on a plan for a single global repository governed by an international organization. Despite a significant decrease in the costs for a country to be actively involved in the fight against online child sexual abuse and emergence of new possibilities for more effective prevention strategies and investigational methods, such an idea of global centralization might face insurmountable opposition from current stakeholders, particularly because of organizational concerns and technological challenges.

show abstract

Section: Discussionmentioning

confidence: 99%

Framework for a Single Global Repository of Child Abuse Materials

Açar¹

2019

Global Policy

View full text Add to dashboard Cite

show abstract

“…Another study by Saad et al [16] has discussed the effect of MPLS-based tunnels on end-to-end virtual connection service and security. The study shows that applying IPSec in MPLS-based tunnels reduces overall throughput of Transmission Control Protocol flow and adds more overhead.…”

Section: Related Workmentioning

confidence: 99%

MPLS security: an approach for unicast and multicast environments

2009

View full text Add to dashboard Cite

Multi-Protocol Label Switching (MPLS) network architecture does not protect the confidentiality of data transmitted. This paper proposes a mechanism to enhance the security in MPLS networks by using multi-path routing combined with a modified (k, n) threshold secret sharing scheme. An Internet Protocol (IP) packet entering MPLS ingress router can be partitioned into n shadow (share) packets, which are then assigned to maximally node disjoint paths across the MPLS network. The egress router at the end will be able to reconstruct the original IP packet if it receives any k share packets. The attacker must therefore tap at least k paths to be able to reconstruct the original IP packet that is being transmitted, while receiving k−1 or less of share packets makes it hard or even impossible to reconstruct the original IP packet. In this paper, we consider the multicast case in addition to the unicast. To our best knowledge, no work has been published for MPLS multicast security. We have implemented our model and measured its time complexity on variable packets size.

show abstract

“…Tunneling techniques such as L2TP, GRE or MPLS take advantage of encapsulation, which prepends an additional network header to the same or different OSI layer of the packet [27]. Tunnels can be built as stand-alone point-to-point links, or organized to form a topology, such as a mesh or structured P2P, that can be used for scalable overlay routing [34,11,12].…”

Section: Network Virtualizationmentioning

confidence: 99%

Self-configuring Software-defined Overlay Bypass for Seamless Inter- and Intra-cloud Virtual Networking

Jeong

Figueiredo

2016

Proceedings of the 25th ACM International Symposium on High-Performance Parallel and Distributed Computing

View full text Add to dashboard Cite

Many techniques have been proposed to provide, transparently, the abstraction of a layer-2 virtual network environment within a provider, e.g. by leveraging Software-Defined Networking (SDN). However, cloud providers often constrain layer-2 communication across instances; furthermore, SDN integration and layer-2 messaging between distinct domains distributed across the Internet is not possible, hindering the ability for tenants to deploy their virtual networks across providers. In contrast, overlay networks provide a flexible foundation for inter-cloud virtual private networking (VPN), by tunneling virtual network traffic through private, authenticated end-to-end overlay links. However, overlays inherently incur network virtualization overheads, including header encapsulation and user/kernel boundary crossing. This paper proposes a novel system -VIAS (VIrtualization Acceleration over SDN) -that delivers the flexibility of overlays for inter-cloud virtual private networking, while transparently applying SDN techniques (available in existing OpenFlow hardware or software switches) to selectively bypass overlay tunneling and achieve near-native performance for TCP/UDP flows within a provider. Architecturally, VIAS is unique in how it integrates SDN and overlay controllers in a distributed fashion to coordinate the management of virtual network links and flows. The approach is self-organizing, whereby overlay nodes can detect that peer endpoints are in the same network and program bypass flows between OpenFlow switches. While generally applicable, VIAS in particular applies to nested VMs/containers across cloud providers, supporting seamless communication within and across providers. VIAS has been implemented as an extension to an existing virtual network overlay platform (IP-over-P2P, IPOP) by integrating OpenFlow controller functionality with distributed overlay controllers. We evaluate the performance of VIAS in realistic cloud environments using an implementation based on IPOP, the RYU SDN framework, Open vSwitch, and LXC containers across various cloud environment including Amazon, Google compute engine, and CloudLab.

show abstract

Tunneling techniques for end-to-end VPNs: generic deployment in an optical testbed environment

Cited by 5 publications

References 3 publications

Framework for a Single Global Repository of Child Abuse Materials

Framework for a Single Global Repository of Child Abuse Materials

MPLS security: an approach for unicast and multicast environments

Self-configuring Software-defined Overlay Bypass for Seamless Inter- and Intra-cloud Virtual Networking

Contact Info

Product

Resources

About