Deployment of a Policy-Based Management System for the Dynamic Provision of IPsec-Based VPNs in IPv6 Networks

Security is considered as a key service in IP networks. This is equally true for IPv4- and IPv6-based networks, and for them the IPsec protocol was defined to provide security at the network layer. IPsec can be used in different scenarios, being the VPN the most widely used. However, IPsec-based VPN...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Clemente, F.J.G., Lopez Millan, G., Re, J.D.J., Martinez Perez, G., Gomez Skarmeta, A.F.
Format: Tagungsbericht
Sprache:eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
container_end_page 13
container_issue
container_start_page 10
container_title
container_volume
creator Clemente, F.J.G.
Lopez Millan, G.
Re, J.D.J.
Martinez Perez, G.
Gomez Skarmeta, A.F.
description Security is considered as a key service in IP networks. This is equally true for IPv4- and IPv6-based networks, and for them the IPsec protocol was defined to provide security at the network layer. IPsec can be used in different scenarios, being the VPN the most widely used. However, IPsec-based VPNs are experiencing important limitations mainly because they are usually based on information manually configured, and the integration with PKI-related services is still under definition and is far from being mature. This is especially true in IPv6 networks where IPsec is defined as a mandatory component to be implemented in all stacks and PKI services in these networks are just starting to be designed and deployed. This paper describes how IPsec-based VPNs can be dynamically deployed in an IPv6 network as the one designed in the Euro6IX EU IST project. Such dynamicity is provided using a new management paradigm based on security policies.
doi_str_mv 10.1109/SAINTW.2005.1619966
format Conference Proceeding
fullrecord <record><control><sourceid>ieee_6IE</sourceid><recordid>TN_cdi_ieee_primary_1619966</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><ieee_id>1619966</ieee_id><sourcerecordid>1619966</sourcerecordid><originalsourceid>FETCH-LOGICAL-i175t-c58da304430a0b0aebc4d4ce04bb573fd766494d56d78668e52815d7ff6718e3</originalsourceid><addsrcrecordid>eNotkE1OwzAUhC0hJFDpCbrxBVLs2H62l6Xlp1IpkVrBsnLiFzA0cRVHRbk9BTqbkWb0zWIImXA25ZzZ281sud6-TXPG1JQDtxbggoytNkyDVXkOgl2RcUqf7CRhBZj8mjQLPOzj0GDb01hTR4u4D9WQ3bmEnj671r3jX7kZUo8NrWNH-w-ki6F1Taho0cVjSCG2v_SySFid0ddinWhoT9kR6Br779h9pRtyWbt9wvHZR2T7cL-dP2Wrl8flfLbKAteqzyplvBNMSsEcK5nDspJeVshkWSotaq8BpJVegdcGwKDKDVde1zVoblCMyOR_NiDi7tCFxnXD7vyJ-AF3R1er</addsrcrecordid><sourcetype>Publisher</sourcetype><iscdi>true</iscdi><recordtype>conference_proceeding</recordtype></control><display><type>conference_proceeding</type><title>Deployment of a Policy-Based Management System for the Dynamic Provision of IPsec-Based VPNs in IPv6 Networks</title><source>IEEE Electronic Library (IEL) Conference Proceedings</source><creator>Clemente, F.J.G. ; Lopez Millan, G. ; Re, J.D.J. ; Martinez Perez, G. ; Gomez Skarmeta, A.F.</creator><creatorcontrib>Clemente, F.J.G. ; Lopez Millan, G. ; Re, J.D.J. ; Martinez Perez, G. ; Gomez Skarmeta, A.F.</creatorcontrib><description>Security is considered as a key service in IP networks. This is equally true for IPv4- and IPv6-based networks, and for them the IPsec protocol was defined to provide security at the network layer. IPsec can be used in different scenarios, being the VPN the most widely used. However, IPsec-based VPNs are experiencing important limitations mainly because they are usually based on information manually configured, and the integration with PKI-related services is still under definition and is far from being mature. This is especially true in IPv6 networks where IPsec is defined as a mandatory component to be implemented in all stacks and PKI services in these networks are just starting to be designed and deployed. This paper describes how IPsec-based VPNs can be dynamically deployed in an IPv6 network as the one designed in the Euro6IX EU IST project. Such dynamicity is provided using a new management paradigm based on security policies.</description><identifier>ISBN: 9780769522630</identifier><identifier>ISBN: 0769522637</identifier><identifier>DOI: 10.1109/SAINTW.2005.1619966</identifier><language>eng</language><publisher>IEEE</publisher><subject>Authentication ; Communication system security ; Cryptography ; Intelligent networks ; Internet ; IP networks ; Open source software ; Protection ; Protocols ; Virtual private networks</subject><ispartof>2005 Symposium on Applications and the Internet Workshops (SAINT 2005 Workshops), 2005, p.10-13</ispartof><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://ieeexplore.ieee.org/document/1619966$$EHTML$$P50$$Gieee$$H</linktohtml><link.rule.ids>309,310,780,784,789,790,2056,4048,4049,27924,54919</link.rule.ids><linktorsrc>$$Uhttps://ieeexplore.ieee.org/document/1619966$$EView_record_in_IEEE$$FView_record_in_$$GIEEE</linktorsrc></links><search><creatorcontrib>Clemente, F.J.G.</creatorcontrib><creatorcontrib>Lopez Millan, G.</creatorcontrib><creatorcontrib>Re, J.D.J.</creatorcontrib><creatorcontrib>Martinez Perez, G.</creatorcontrib><creatorcontrib>Gomez Skarmeta, A.F.</creatorcontrib><title>Deployment of a Policy-Based Management System for the Dynamic Provision of IPsec-Based VPNs in IPv6 Networks</title><title>2005 Symposium on Applications and the Internet Workshops (SAINT 2005 Workshops)</title><addtitle>SAINTW</addtitle><description>Security is considered as a key service in IP networks. This is equally true for IPv4- and IPv6-based networks, and for them the IPsec protocol was defined to provide security at the network layer. IPsec can be used in different scenarios, being the VPN the most widely used. However, IPsec-based VPNs are experiencing important limitations mainly because they are usually based on information manually configured, and the integration with PKI-related services is still under definition and is far from being mature. This is especially true in IPv6 networks where IPsec is defined as a mandatory component to be implemented in all stacks and PKI services in these networks are just starting to be designed and deployed. This paper describes how IPsec-based VPNs can be dynamically deployed in an IPv6 network as the one designed in the Euro6IX EU IST project. Such dynamicity is provided using a new management paradigm based on security policies.</description><subject>Authentication</subject><subject>Communication system security</subject><subject>Cryptography</subject><subject>Intelligent networks</subject><subject>Internet</subject><subject>IP networks</subject><subject>Open source software</subject><subject>Protection</subject><subject>Protocols</subject><subject>Virtual private networks</subject><isbn>9780769522630</isbn><isbn>0769522637</isbn><fulltext>true</fulltext><rsrctype>conference_proceeding</rsrctype><creationdate>2005</creationdate><recordtype>conference_proceeding</recordtype><sourceid>6IE</sourceid><sourceid>RIE</sourceid><recordid>eNotkE1OwzAUhC0hJFDpCbrxBVLs2H62l6Xlp1IpkVrBsnLiFzA0cRVHRbk9BTqbkWb0zWIImXA25ZzZ281sud6-TXPG1JQDtxbggoytNkyDVXkOgl2RcUqf7CRhBZj8mjQLPOzj0GDb01hTR4u4D9WQ3bmEnj671r3jX7kZUo8NrWNH-w-ki6F1Taho0cVjSCG2v_SySFid0ddinWhoT9kR6Br779h9pRtyWbt9wvHZR2T7cL-dP2Wrl8flfLbKAteqzyplvBNMSsEcK5nDspJeVshkWSotaq8BpJVegdcGwKDKDVde1zVoblCMyOR_NiDi7tCFxnXD7vyJ-AF3R1er</recordid><startdate>2005</startdate><enddate>2005</enddate><creator>Clemente, F.J.G.</creator><creator>Lopez Millan, G.</creator><creator>Re, J.D.J.</creator><creator>Martinez Perez, G.</creator><creator>Gomez Skarmeta, A.F.</creator><general>IEEE</general><scope>6IE</scope><scope>6IL</scope><scope>CBEJK</scope><scope>RIE</scope><scope>RIL</scope></search><sort><creationdate>2005</creationdate><title>Deployment of a Policy-Based Management System for the Dynamic Provision of IPsec-Based VPNs in IPv6 Networks</title><author>Clemente, F.J.G. ; Lopez Millan, G. ; Re, J.D.J. ; Martinez Perez, G. ; Gomez Skarmeta, A.F.</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-LOGICAL-i175t-c58da304430a0b0aebc4d4ce04bb573fd766494d56d78668e52815d7ff6718e3</frbrgroupid><rsrctype>conference_proceedings</rsrctype><prefilter>conference_proceedings</prefilter><language>eng</language><creationdate>2005</creationdate><topic>Authentication</topic><topic>Communication system security</topic><topic>Cryptography</topic><topic>Intelligent networks</topic><topic>Internet</topic><topic>IP networks</topic><topic>Open source software</topic><topic>Protection</topic><topic>Protocols</topic><topic>Virtual private networks</topic><toplevel>online_resources</toplevel><creatorcontrib>Clemente, F.J.G.</creatorcontrib><creatorcontrib>Lopez Millan, G.</creatorcontrib><creatorcontrib>Re, J.D.J.</creatorcontrib><creatorcontrib>Martinez Perez, G.</creatorcontrib><creatorcontrib>Gomez Skarmeta, A.F.</creatorcontrib><collection>IEEE Electronic Library (IEL) Conference Proceedings</collection><collection>IEEE Proceedings Order Plan All Online (POP All Online) 1998-present by volume</collection><collection>IEEE Xplore All Conference Proceedings</collection><collection>IEEE Electronic Library (IEL)</collection><collection>IEEE Proceedings Order Plans (POP All) 1998-Present</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext_linktorsrc</fulltext></delivery><addata><au>Clemente, F.J.G.</au><au>Lopez Millan, G.</au><au>Re, J.D.J.</au><au>Martinez Perez, G.</au><au>Gomez Skarmeta, A.F.</au><format>book</format><genre>proceeding</genre><ristype>CONF</ristype><atitle>Deployment of a Policy-Based Management System for the Dynamic Provision of IPsec-Based VPNs in IPv6 Networks</atitle><btitle>2005 Symposium on Applications and the Internet Workshops (SAINT 2005 Workshops)</btitle><stitle>SAINTW</stitle><date>2005</date><risdate>2005</risdate><spage>10</spage><epage>13</epage><pages>10-13</pages><isbn>9780769522630</isbn><isbn>0769522637</isbn><abstract>Security is considered as a key service in IP networks. This is equally true for IPv4- and IPv6-based networks, and for them the IPsec protocol was defined to provide security at the network layer. IPsec can be used in different scenarios, being the VPN the most widely used. However, IPsec-based VPNs are experiencing important limitations mainly because they are usually based on information manually configured, and the integration with PKI-related services is still under definition and is far from being mature. This is especially true in IPv6 networks where IPsec is defined as a mandatory component to be implemented in all stacks and PKI services in these networks are just starting to be designed and deployed. This paper describes how IPsec-based VPNs can be dynamically deployed in an IPv6 network as the one designed in the Euro6IX EU IST project. Such dynamicity is provided using a new management paradigm based on security policies.</abstract><pub>IEEE</pub><doi>10.1109/SAINTW.2005.1619966</doi><tpages>4</tpages></addata></record>
fulltext fulltext_linktorsrc
identifier ISBN: 9780769522630
ispartof 2005 Symposium on Applications and the Internet Workshops (SAINT 2005 Workshops), 2005, p.10-13
issn
language eng
recordid cdi_ieee_primary_1619966
source IEEE Electronic Library (IEL) Conference Proceedings
subjects Authentication
Communication system security
Cryptography
Intelligent networks
Internet
IP networks
Open source software
Protection
Protocols
Virtual private networks
title Deployment of a Policy-Based Management System for the Dynamic Provision of IPsec-Based VPNs in IPv6 Networks
url https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2025-01-13T00%3A22%3A19IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-ieee_6IE&rft_val_fmt=info:ofi/fmt:kev:mtx:book&rft.genre=proceeding&rft.atitle=Deployment%20of%20a%20Policy-Based%20Management%20System%20for%20the%20Dynamic%20Provision%20of%20IPsec-Based%20VPNs%20in%20IPv6%20Networks&rft.btitle=2005%20Symposium%20on%20Applications%20and%20the%20Internet%20Workshops%20(SAINT%202005%20Workshops)&rft.au=Clemente,%20F.J.G.&rft.date=2005&rft.spage=10&rft.epage=13&rft.pages=10-13&rft.isbn=9780769522630&rft.isbn_list=0769522637&rft_id=info:doi/10.1109/SAINTW.2005.1619966&rft_dat=%3Cieee_6IE%3E1619966%3C/ieee_6IE%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_id=info:pmid/&rft_ieee_id=1619966&rfr_iscdi=true