This paper presents the results of a case study that tested the performance of IPSec Offload feature of Microsoft Windows 2000 Server using 3COM 10/100 Mbps PCI Server NIC 3XP Processors. Based on the results of the benchmark, it was concluded that, in a few cases, a fast CPU with ample RAM and CACHE could yield better performance than a 3DES NIC using the IPSec Offload feature of Microsoft Windows 2000 Server.In most cases, with the IPSec Offload turned on, there was improvement in overall performance of the system. This paper concludes that in order to yield and maintain peak performance, the selection of encryption protocols and devices ought to be dynamic and based on runtime environmental factors.
This paper presents the results of a case study research conducted by the author that investigated the performance impact of thread pooling in dynamic selection of optimal cryptographic algorithms in a runtime environment (DSOCARE), a cryptography framework proposed in the author's Ph.D. thesis. Using the advice, default, and pass-through priority modes in runtime optimal cryptographic algorithm selector (ROCAS) module of DSOCARE, eight cryptographic service requests with high and low security, speed, and priority Quality of Service (QoS) parameters were performed with and without thread pooling. The results of the performance test data showed that thread pooling increased the performance of cryptographic services by 70% in advice and pass-through priority modes. In the default mode, there was a throughput increase of 28%. The experiment also proved that the optimal number of threads in a thread pool is dependent on the number of processors and number of execution pipelines in each processor.
This paper presents the results of work by the author on application and comparative performance of IP Security (IPSec) and Secure Socket Layer (SSL) protocols in a Microsoft .NET 3-tier client-server network. To evaluate the performance of each security protocol, the author created a typical 3-tier client-server e-commerce model in which data communication passed through three distinct pathways: (1) channel between client and Web server over Internet, (2) channel between the Web server and application server, (3) channel between the application server and database server. The primary focus in this paper remains on the third channel where IPSec and SSL were used to connect the application server to the database server. A preliminary analysis of the collected data sheds light on performance of IPSec and SSL in Microsoft .NET environment. It also suggests that in pathways where SSL and IPSec could be used interchangeably, the selection of the most suitable security protocol ought to be dynamic.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.