A survey on automatic configuration of virtual private networks

Computer Networks

Volumn 55, Issue 8, 2011, Pages 1684-1699

  Rossberg, Michael ^a   Schaefer, Guenter ^a  

^a ILMENAU UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

Automation; Configuration; Management; Virtual private networks

Indexed keywords

AUTO-CONFIGURATION; AUTOMATIC CONFIGURATION; CONFIGURATION; DENIAL OF SERVICE; DYNAMIC BEHAVIORS; FUTURE DIRECTIONS; PUBLIC NETWORKS; SECURE DATA; VIRTUAL PRIVATE NETWORKS;

COMPUTER NETWORKS; TELECOMMUNICATION NETWORKS;

NETWORK MANAGEMENT;

EID: 79955762557     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2011.01.003     Document Type: Article

References (80)

1. S. Raghunath, K.K. Ramakrishnan, S. Kalyanaraman, C. Chase, Measurement based characterization and provisioning of IP VPNs, in: Proceedings of the 4th ACM SIGCOMM Conference on Internet Measurement, 2004, pp. 342-355. (Pubitemid 40372062)
2. S. Fluhrer, System and Method for Protected Spoke to Spoke Communication Using an Unprotected Computer Network, United States Patent US 2007/0271451 A1, 2007.
3. J. Reinhardt, BWI Informationstechnik GmbH, 2.400 Bundeswehr-Mitarbeiter kommen jetzt zur BWI, Statement to the Press, German. , 2007.
4. A. Ghosh, R. Talpade, M. Elaoud, M. Bereschinsky, Securing ad-hoc networks using IPsec, in: Proceedings of the IEEE Military Communications Conference (MILCOM), 2005, pp. 2948-2953.
5. L.A. DaSilva, S.F. Midkiff, J.S. Park, G.C. Hadjichristofi, N.J. Davis, K.S. Phanse, and T. Lin Network mobility and protocol interoperability in ad hoc networks IEEE Communications Magazine 42 11 2004 88 96
6. S. Hanigk, M. Kretzschmar, F. Eyermann, A distributed routing architecture for secure communication over highly dynamic radio networks, in: Communication Systems and Networks and Workshops, 2009.
7. VPN (The Easy Way) V24+. , 2009.
8. D. Kravets, Wired.com, Pirate Bay Launches VPN Service. , 2009.
9. Relakks - Trygghetsbolaget i Lund AB, Relakks - Questions and Answers. , 2009.
10. T. Dierks, E. Rescorla, The Transport Layer Security (TLS) Protocol, IETF Request for Comments 5246 (Proposed standard). , 2008.
11. M. Bauer, Paranoid penguin: rehabilitating clear-text network applications with stunnel, Linux Journal, 2004.
12. E. Rescorla, N. Modadugu, The design and implementation of datagram TLS, in: ISOC Network and Distributed System Security (NDSS) Symposium, 2004.
13. E. Rescorla, N. Modadugu, Datagram Transport Layer Security, IETF Request for Comments 4347 (Proposed standard). , 2006.
14. S. Kent, K. Seo, Security Architecture for the Internet Protocol, IETF Request for Comments 4301 (Proposed standard). , 2005.
15. S. Frankel Demystifying the IPsec Puzzle 2001 Artech House Publishers
16. N. Ferguson, B. Schneier, A Cryptographic Evaluation of IPsec, Technical Report, Counterpane Internet Security, Inc. , 2000.
17. C. Kaufman, Internet Key Exchange (IKEv2) Protocol, IETF Request for Comments 4306 (Proposed standard). , 2005.
18. E. Rescorla, M. Ray, S. Dispensa, N. Oskov, Transport Layer Security (TLS) Renegotiation Indication Extension, Internet-Draft. , 2010.
19. E. Levy, The Crumbling Tunnel, Phrack 53. .
20. W.M. Townsley, A.J. Valencia, A. Rubens, G.S. Pall, G. Zorn, B. Palter, Layer Two Tunneling Protocol "L2TP", IETF Request for Comments 2661 (Proposed standard). , 1999.
21. gematik - Gesellschaft für Telematikanwendungen in der Gesundheitskarte mbH, Konnektorspezifikation Version 3.0.0 (in German). , 2009.
22. G. Schaefer Security in Fixed and Wireless Networks: An Introduction to Securing Data Communications 2004 John Wiley and Sons
23. D. Andersen, H. Balakrishnan, F. Kaashoek, R. Morris, Resilient overlay networks, in: SOSP'01: Proceedings of the Eighteenth ACM Symposium on Operating Systems Principles, 2001, pp. 131-145. (Pubitemid 33612610)
24. W. Diffie, and M.E. Hellman New directions in cryptography IEEE Transactions on Information Theory 22 6 1976 644 654
25. D. Moore, C. Shannon, D.J. Brown, G.M. Voelker, and S. Savage Inferring Internet denial-of-service activity ACM Transactions on Computer Systems 24 2 2006 115 139
26. M. Lesk The new front line: estonia under Cyberassault IEEE Security and Privacy 5 4 2007 76 79
27. R. Perlman, and C. Kaufman Key exchange in IPSec: analysis of IKE IEEE Internet Computing 4 6 2000 50 56 (Pubitemid 32085790)
28. T. Aura, P. Nikander, and J. Leiwo DOS-resistant authentication with client puzzles Security Protocols 2001 Springer Berlin/Heidelberg 170 177 (Pubitemid 33347515)
29. S. Patton, B. Smith, D. Doss, W. Yurcik, A layered framework strategy for deploying high assurance VPNs, in: Fifth IEEE International Symposium on High Assurance Systems Engineering, 2000, pp. 199-202.
30. Y. Bhaiji Network Security Technologies and Solutions first ed. Part III: Data Privacy 2008 Cisco Press
31. S. Beaulieu, R. Pereira, Extended Authentication within IKE (XAUTH), Expired Internet-Draft. , 2001.
32. Cisco Systems Inc., Cisco IPsec VPN Implementation Group Password Usage Vulnerability, Cisco Security Notice. , 2006.
33. D. Roethlisberger, FakeIKEd. , 2010.
34. Cisco Systems Inc., Cisco Easy VPN Client for the Cisco 1700 Series Routers, White Paper. , 2010.
35. Cisco Systems Inc., Scenario: IPsec Remote-Access VPN Configuration, White Paper. , 2010.
36. Cisco Systems Inc., Cisco Group Encrypted Transport VPN, Cisco Feature Guide. , 2007.
37. M. Baugher, T. Hardjono, H. Harney, B. Weis, The Group Domain of Interpretation, IETF Request for Comments 3547 (Proposed standard). , 2003.
38. M. Rossberg, G. Schaefer, Ciscos group encrypted transport VPN - a sceptical analysis, in: Proceedings of D-A-CH Security, German, 2009, pp. 351-360.
39. E. Tews, R.-P. Weinmann, and A. Pyshkin Breaking 104 bit WEP in less than 60 seconds Information Security Applications 2008 Springer Berlin/Heidelberg 188 202
40. Cisco Systems Inc., Group Encrypted Transport VPN Security Analysis, White Paper. , 2008.
41. 2 Security: An Overview. , 2009.
42. M.C. Richardson, A Method for Storing IPsec Keying Material in DNS, IETF Request for Comments 4025 (Proposed standard). , 2005.
43. S. Josefsson, Storing Certificates in the Domain Name System (DNS), IETF Request for Comments 4398 (Proposed standard). , 2006.
44. V. Le, H. Guyennet, IPSec and DNSSEC to support GRID application security, in: IEEE International Symposium on Cluster Computing and the Grid, 2002, pp. 458-459.
45. P.J.M. Merino, A. García-Martínez, M.M. Organero, C.D. Kloos, Enabling practical IPsec authentication for the internet, in: On the Move to Meaningful Internet Systems 2006: OTM 2006 Workshops, 2006, pp. 392-403.
46. M.C. Richardson, D.H. Redelmeier, Opportunistic Encryption using the Internet Key Exchange (IKE), IETF Request for Comments 4322 (Proposed standard). , 2005.
47. D. Kaminsky Catching up with Kaminsky Network Security 2008 9 2008 4 7
48. M. Burmester, and Y. Desmedt Is hierarchical public-key certification the next target for hackers? Communications of the ACM 47 8 2004 68 74
49. J. Trostle, and B. Gossman Techniques for improving the security and manageability of IPsec policy International Journal of Information Security 4 3 2005 209 226 (Pubitemid 40743366)
50. K. Petric, Wippien - Open Source P2P VPN Software. , 2010.
51. M. Rossberg, Multiple Security Issues in Wippien, Technical Report, Ilmenau University of Technology. , 2010.
52. R. Figueiredo, P.O. Boykin, P.S. Juste, D. Wolinsky, Social VPNs: integrating overlay and social networks for seamless P2P networking, in: Seventeenth IEEE International Workshop on Enabling Technologies: Infrastructures for Collaborative Enterprises (WETICE/COPS), 2008, pp. 93-98.
53. A. Ganguly, A. Agrawal, P.O. Boykin, R. Figueiredo, IP over P2P: enabling self-configuring virtual IP networks for grid computing, in: 20th International Parallel and Distributed Processing Symposium (IPDPS), 2006.
54. L. Bilge, T. Strufe, D. Balzarotti, E. Kirda, All your contacts are belong to us: automated identity theft attacks on social networks, in: Proceedings of the 18th International World Wide Web Conference, 2009, pp. 551-560.
55. L. Deri, and R. Andrews N2N: a layer two peer-to-peer VPN Resilient Networks and Services 2008 Springer Berlin/Heidelberg 53 64
56. L. Deri, R. Andrews, N2N: A Layer Two Peer-to-Peer VPN. , 2010.
57. V. Bollapragada, M. Khalid, and S. Wainner IPSec VPN Design 2005 Cisco Press
58. Cisco Systems, Inc., Dynamic Multipoint VPN (DMVPN). , 2006.
59. N. Williams, M.C. Richardson, Better-Than-Nothing Security: An Unauthenticated Mode of IPsec, IETF Request for Comments 5386 (Proposed standard). , 2008.
60. J. Laganier, G. Montenegro, A. Kukec, Using IKE with IPv6 Cryptographically Generated Addresses, Expired Internet-Draft. , 2007.
61. T. Aura, Cryptographically Generated Addresses (CGA), IETF Request for Comments 3972 (Proposed standard). , 2005.
62. T. Aura Cryptographically generated addresses (CGA) Information Security 2003 Springer Berlin/Heidelberg 29 43
63. J.W. Bos, O. Özen, and J.-P. Hubaux Analysis and optimization of cryptographically generated addresses Information Security 2009 Springer Berlin/Heidelberg 17 32
64. S. Fluhrer, Determining Secure Endpoints of Tunnels in a Network that uses Internet Security Protocol, United States Patent US 2007/7207063 B1, 2007.
65. S. Fluhrer, Tunnel Endpoint Discovery, Expired Internet-Draft. , 2000.
66. P. Srisuresh, L.A. Sanchez, Policy Framework for IP Security, Expired Internet-Draft. , 1999.
67. M. Baltatu, A. Lioy, D. Lombardo, D. Mazzocchi, Towards a policy system for IPsec: issues and an experimental implementation, in: Proceedings of 9th IEEE International Conference on Networks (ICON), 2001, pp. 146-151.
68. L.A. Sanchez, M.N. Condell, Security Policy Protocol, Expired Internet-Draft. , 2002.
69. T. Tran, Proactive multicast-based IPSEC discovery protocol and multicast extension, in: Proceedings of the IEEE Military Communications Conference (MILCOM), 2006.
70. J. Hu, AOL Pulls Nullsoft File-Sharing Software, CNET News. , 2003.
71. M. Ek, F. Hultin, J. Lindblom, WASTE Peer-to-Peer Protocol, Technical Report, Lule Tekniska Universitet. , 2005.
72. C.J. Mitchell Cryptanalysis of two variants of PCBC mode when used for message integrity Information Security and Privacy 2003 Springer Berlin/Heidelberg 560 571 (Pubitemid 41431811)
73. W. Ginolas, P2PVPN - Documentation. , 2010.
74. G. Sliepen, The Difficulties of a Peer-to-Peer VPN on the Hostile Internet, Slides of Talk at FOSDEM. , 2010.
75. M. Kratochvil, CloudVPN How it Works. , 2009.
76. J. Dinger, O.P. Waldhorst, Decentralized bootstrapping of P2P systems: a practical view, in: Proceedings of Networking 2009, 2009, pp. 703-715.
77. A. Misra, S. Das, A. Mcauley, and S.K. Das Autoconfiguration registration and mobility management for pervasive computing IEEE Personal Communications Systems Magazine 8 2001 24 31 (Pubitemid 33060764)
78. A.D. Keromytis, V. Misra, and D. Rubenstein SOS: an architecture for mitigating DDoS attacks IEEE Journal on Selected Areas in Communications 22 2004 176 188
79. M. Brinkmeier, M. Rossberg, G. Schaefer, Towards a denial-of-service resilient design of complex IPsec overlays, in: Proceedings of International Conference on Communications (ICC), 2009.
80. Y. Liu, Y. Guo, and C. Liang A survey on peer-to-peer video streaming systems Peer-to-Peer Networking and Applications 1 2008 18 28