Bandwidth-IPSec security trade-off in IPv4 and IPv6 in Windows 7 environment

Kolahi, Samad S.; Cao, Yuqing; Chen, Hong

doi:10.1109/fgct.2013.6767214

Cited by 7 publications

(4 citation statements)

References 12 publications

(9 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…By substituting the terms ADV PRF F K _MOD (A) and P PSCFB−MOD (col) of equations (34) and (35) in (33) it is possible to get as result equation 14which proves Theorem 1.…”

Section: Appendix a Proof Of Theoremmentioning

confidence: 58%

“…These advantages of performing encryption at physical layer contrasts with encryption techniques at other layers [34] [35], which introduces overhead on data frames and reduce the overall data bandwidth. For example, in IPsec the encryption overhead can reduce the overall throughput between 20% and 90% of the maximum achievable [36].…”

Section: B Encryption Throuthput and Latencymentioning

confidence: 99%

See 1 more Smart Citation

Self-Synchronized Encryption for Physical Layer in Gigabit Ethernet Optical Links

et al. 2020

View full text Add to dashboard Cite

In this work a new self-synchronized symmetric encryption solution for high speed communication systems necessary to preserve the format of the plaintext is proposed, developed and tested. This new encryption mechanism is based on the block cipher operation mode called PSCFB (Pipelined Statistical Cipher Feedback) and the modulo operation. The confidentiality of this mode is analyzed in terms of its IND-CPA (Indistinguishability under Chosen-Plaintext Attack) advantage, concluding that it can be considered secure in the same way as traditional modes are. The encryption system has been integrated in the physical layer of a 1000Base-X Gigabit Ethernet Interface, where the 8b/10b symbol flow is encrypted at line rate. Moreover, an implementation of the proposed system has been carried out in an FPGA (Field Programmable Gate Array) device. Finally, an encrypted optical link has been tested with real Ethernet frames, getting maximum throughput and protecting the data traffic from passive eavesdroppers.

show abstract

“…By substituting the terms ADV PRF F K _MOD (A) and P PSCFB−MOD (col) of equations (34) and (35) in (33) it is possible to get as result equation 14which proves Theorem 1.…”

Section: Appendix a Proof Of Theoremmentioning

confidence: 58%

Section: B Encryption Throuthput and Latencymentioning

confidence: 99%

Self-Synchronized Encryption for Physical Layer in Gigabit Ethernet Optical Links

et al. 2020

View full text Add to dashboard Cite

show abstract

“…Impact of IPSec on performance of the wireless LAN networks is evaluated in [6,7]. Impact of SSL security on network performance is evaluated in [8].…”

Section: Related Workmentioning

confidence: 99%

Impact of IPSec security on VoIP in different environments

Kolahi

Mudaliar

Zhang

et al. 2017

2017 Ninth International Conference on Ubiquitous and Future Networks (ICUFN)

View full text Add to dashboard Cite

-In this paper, the performance of VoIP on IPv4, IPv6 and 6in4 protocol with and without IPsec is compared. RTT (Round Trip Time), Throughput, Jitter and CPU usage are compared in VoIP networks. The results for throughput are almost same for both operating systems. CPU usage was higher on both operating systems with IPsec enabled and the results for RTT and Jitter were inconsistent. In general, the results indicated that Fedora 16 performance was better than Windows 7. The results show that although IPSec can add security, it can reduce the VoIP performance in terms of higher delay and higher CPU usage.Keyword: Performance, VoIP, IPsec, IPv4, IPv6, 6in4, Windows 7 and Fedora 16. I. INRODUCTIONThe purpose of network security is to provide confidentiality, integrity and authentication. VoIP is a revolutionary technology that takes analogue audio signals and turns them into digital data that can be transmitted over the internet. VoIP has the potential to completely rework the world's phone systems at cheaper rate than PSTN (Public Switched Telephone System). VoIP phone calls are cheaper as it uses a shared packet switched network as compared to circuit switched PSTN calls.IPSec encryption can protect VoIP data as it travels over the network; if attackers bypass physical security precautions and intercept VoIP packets, they won't be able to decipher the encrypted contents. IPSec can make VoIP communications more secure than a traditional landline. Although IPsec is popular security technology for VoIP security, it affects VoIP performance due to added overheads involved with IPSec.IPv6 is the later version of IPv4 that provided much more IP addresses (2 128 ), better mobility, better security, and better QoS features as compared to IPv4. In transition stages, where both IPv6 and IPv4 are present in a network, protocols such as 6in4 is required to handle computer networks including both IPv6 and IPv4 traffic. Currently the core of Internet is IPv4 but some companies might have immigrated to IPv6. We therefor compare the performance of these in IPSec encrypted VoIP environment using a test bed. The testing performance parameters were throughput, delay, and CPU usage. Data was obtained for IPv4, IPv6 and IPv6 to IPv4 environments.To the authors' knowledge, there is little work in literature to evaluate VoIP in these environments. The motivation for this work is therefore to provide new results on the impact of IPSec on VoIP performance in IPv6, IPv6, 6in4 environments. We also compare the performance of window based system with Linux based system. The organisation of this paper is as follows, next section is related works, section three is network set up, section four is data generation and traffic measurement tool used, section five is results, and section six is conclusions followed by future works and list of references. II. RELATED WORKSThe previous research work on VoIP and IPsec are as follows. Barbieri, Bruschi and Rosti [1] discussed analysis and solutions of Voice over IPsec (experimental study of VoI...

show abstract

“…In 2013, IPSec versus bandwith for Linux and Windows was evaluated in [10][11]. We have included IPsec results for Windows 7 again to show SSL impacts the bandwith much more than IPSec.…”

Section: Related Workmentioning

confidence: 99%

Impact of SSL security on bandwidth and delay in IEEE 802.11n WLAN using Windows 7

Kolahi

Cao

Chen

2016

2016 10th International Symposium on Communication Systems, Networks and Digital Signal Processing (CSNDSP)

Self Cite

View full text Add to dashboard Cite

Abstract-IPSec (IP Security) and SSL (Secure Socket Layer) are the main technologies for securing communications via the Internet. In this paper, we present new results on the performance of SSL using Windows 7 operating system under IEEE802.11n wireless network. Enabling IPSec security results on average approximately 50% less TCP throughout while enabling SSL security results on average approximately 96% less TCP throughput compared to open system. In IPSec, 3DES-SHA encrypted system outperformed AES128-SHA encrypted system with a maximum difference of 2.40 Mbps for packet size of 1408. However, in SSL, AES128-SHA and 3DES-SHA had almost the same performance.

show abstract

Bandwidth-IPSec security trade-off in IPv4 and IPv6 in Windows 7 environment

Cited by 7 publications

References 12 publications

Self-Synchronized Encryption for Physical Layer in Gigabit Ethernet Optical Links

Self-Synchronized Encryption for Physical Layer in Gigabit Ethernet Optical Links

Impact of IPSec security on VoIP in different environments

Impact of SSL security on bandwidth and delay in IEEE 802.11n WLAN using Windows 7

Contact Info

Product

Resources

About