DOCSLIB.ORG

2. Descrizione Delle Applicazioni Vpn

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
2. Descrizione Delle Applicazioni Vpn UNIVERSITÀ DEGLI STUDI DI PISA Facoltà di Ingegneria Corso di Laurea in Ingegneria delle Telecomunicazioni Tesi di Laurea Analisi sperimentale di soluzioni open-source per la realizzazione di VPN Relatori Candidato Prof. Stefano Giordano Dario Napolitano Prof. Michele Pagano Ing. Davide Adami 1 1. INTRODUZIONE ........................................................................ 5 1.1 ARCHITETTURA DI UNA VPN ........................................................ 9 1.1.1 Indirizzi privati............................................................... 12 1.2 ALGORITMI CRITTOGRAFICI......................................................... 14 1.2.1 3DES .............................................................................. 17 1.2.2 AES................................................................................. 20 1.2.3 Algoritmi hash................................................................ 22 1.2.4 RSA................................................................................. 22 1.2.5 Diffie-Hellman ............................................................... 25 1.3 PARAMETRI DI QUALITÀ .............................................................. 26 1.3.1 Throughput..................................................................... 27 1.3.2 Latenza........................................................................... 28 1.3.3 Packet Loss .................................................................... 29 1.3.4 Jitter ............................................................................... 30 2. DESCRIZIONE DELLE APPLICAZIONI VPN .................... 31 2.1 OPENS/WAN .............................................................................. 33 2.1.1 Funzionamento di OpenS/WAN...................................... 34 2.2 TINC ............................................................................................ 40 2.2.1 Funzionamento di Tinc................................................... 41 2.3 OPENVPN ................................................................................... 45 2.3.1 Funzionamento di OpenVPN.......................................... 46 3. PIATTAFORMA DI TEST ....................................................... 50 3.1 SISTEMA SPIRENT AX4000 ......................................................... 52 3.1.1 Configurazione di base .................................................. 54 3.2 DESCRIZIONE DEI TEST ................................................................ 58 2 3.2.1 Dimensione dei pacchetti ............................................... 60 3.2.2 Test 1: Throughput......................................................... 61 3.2.3 Test 2: Latenza............................................................... 62 3.2.4 Test 3: Packet Loss Rate ................................................ 64 3.2.5 Test 4: Back-To-Back Packets........................................ 65 3.2.6 Test 5: VoIP Quality ...................................................... 65 3.3 SETUP DELLE APPLICAZIONI ........................................................ 69 3.3.1 Setup di OpenS/WAN...................................................... 70 3.3.2 Configurazione di Tinc................................................... 75 3.3.3 Configurazione di OpenVPN.......................................... 79 4. RISULTATI SPERIMENTALI ................................................ 83 4.1 TEST 1: THROUGHPUT ................................................................. 83 4.1.1 Sistema senza VPN......................................................... 84 4.1.2 OpenS/WAN con 3DES .................................................. 86 4.1.3 OpenS/WAN con AES..................................................... 88 4.1.4 Tinc ................................................................................ 90 4.1.5 OpenVPN ....................................................................... 92 4.1.6 Grafici di riepilogo ........................................................ 94 4.2 TEST 2: LATENZA ........................................................................ 96 4.2.1 Sistema senza VPN......................................................... 96 4.2.2 OpenS/WAN con 3DES .................................................. 97 4.2.3 OpenS/WAN con AES..................................................... 98 4.2.4 Tinc ................................................................................ 99 4.2.5 OpenVPN ..................................................................... 100 4.2.6 Grafici di riepilogo ...................................................... 101 4.3 TEST 3: PACKET LOSS RATE...................................................... 103 3 4.3.1 Sistema senza VPN....................................................... 103 4.3.2 OpenS/WAN con 3DES ................................................ 104 4.3.3 OpenS/WAN con AES................................................... 106 4.3.4 Tinc .............................................................................. 107 4.3.5 OpenVPN ..................................................................... 109 4.4 TEST 4: BACK-TO-BACK PACKETS ............................................. 110 4.4.1 Sistema senza VPN....................................................... 111 4.4.2 OpenS/WAN con 3DES ................................................ 112 4.4.3 OpenS/WAN con AES................................................... 113 4.4.4 Tinc .............................................................................. 114 4.4.5 OpenVPN ..................................................................... 115 4.4.6 Grafici di riepilogo ...................................................... 116 4.5 TEST 5: VOIP QUALITY ............................................................. 117 4.6 OVERHEAD................................................................................ 122 4.7 ANALISI DEI DATI ...................................................................... 125 5. CONCLUSIONI ....................................................................... 136 6. RIFERIMENTI ........................................................................ 139 4 1. Introduzione Il grandissimo sviluppo che le tecnologie informatiche hanno riscontrato negli ultimi anni ha fatto sì che praticamente in ogni settore lavorativo, così come in moltissime situazioni domestiche o di svago, siano coinvolti computer o dispositivi in grado di comunicare mediante reti di vari tipi, dalla classica rete Ethernet su cavo ai vari tipi di reti wireless, quali 802.11 o anche le reti di telefonia cellulare. Di pari passo con tale diffusione sono state sviluppate innumerevoli applicazioni che sfruttano le possibilità offerte dalla crescente facilità di collegamento. Complice anche la presenza di una connessione ad Internet, spesso a larga banda, in moltissimi uffici e abitazioni, viene spontaneo pensare di estendere la propria rete aziendale o domestica in modo da collegare fra loro più sedi distanti, quali ad esempio filiali della propria azienda in città diverse, la propria abitazione con il luogo di lavoro o perfino il 5 proprio cellulare con delle apparecchiature domestiche per il controllo a distanza; il tutto sfruttando come rete di trasporto l'infrastruttura offerta dalla rete pubblica. Sede centrale Filiale A Rete di trasporto Filiale B Figura 1.1 Questo proponimento si scontra però con una serie di problematiche di vario tipo, inerenti al fatto di far transitare il proprio traffico telematico in una rete che fornisce una riservatezza quasi nulla per i dati trasmessi, poche garanzie sulle prestazioni ottenibili e la virtuale certezza che ogni macchina raggiungibile dall'esterno sarà soggetta a molteplici attacchi, da quelli volti a ostacolarne il funzionamento a quelli che mirano a prenderne il controllo per scopi illeciti. Non trascurabile è anche il fatto che dotare ogni macchina di un indirizzo IP pubblico può essere oneroso, dato che almeno fino 6 a quando il protocollo comunemente utilizzato sarà IPv4 gli indirizzi disponibili resteranno limitati e pertanto costosi. Per fare fronte ad alcuni di questi inconvenienti viene sempre più spesso adottato il sistema delle VPN (Virtual Private Networks - reti private virtuali), mediante le quali è possibile mettere in collegamento macchine o sottoreti diverse tramite una rete di trasporto pubblica, offrendo però allo stesso tempo ragionevoli garanzie di protezione dei propri dati, controllo dell'accesso alle proprie risorse e tutela da alcune tipologie di attacchi. La realizzazione di un'architettura di questo tipo, che però mantenga al tempo stesso delle prestazioni accettabili per le principali applicazioni, viene spesso effettuata con apparecchiature dedicate anche piuttosto costose, dotate di processori dedicati allo scopo. Dato il basso costo e le elevate prestazioni offerte dai processori odierni e, più in generale, dai comuni PC attualmente in commercio, può essere ragionevole pensare di realizzare una VPN mediante l'utilizzo di queste macchine, specialmente considerando l'esistenza di vari strumenti software espressamente dedicati a questo impiego, con in più il vantaggio di essere gratuiti e open-source: il loro codice sorgente è cioè liberamente disponibile e modificabile secondo 7 le proprie esigenze, ed essendo ispezionabile consente di verificare che non ci siano debolezze o vulnerabilità, intenzionali o meno. La maggior parte di queste applicazioni inoltre funziona sotto il sistema operativo Linux, anch'esso disponibile gratuitamente ed adatto a
Load more

Recommended publications
  • Master Thesis
    Master's Programme in Computer Network Engineering, 60 credits MASTER Connect street light control devices in a secure network THESIS Andreas Kostoulas, Efstathios Lykouropoulos, Zainab Jumaa Network security, 15 credits Halmstad 2015-02-16 “Connect street light control devices in a secure network” Master’s Thesis in Computer Network engineering 2014 Authors: Andreas Kostoulas, Efstathios Lykouropoulos, Zainab Jumaa Supervisor: Alexey Vinel Examiner: Tony Larsson Preface This thesis is submitted in partial fulfilment of the requirements for a Master’s Degree in Computer Network Engineering at the Department of Information Science - Computer and Electrical Engineering, at University of Halmstad, Sweden. The research - implementation described herein was conducted under the supervision of Professor Alexey Vinel and in cooperation with Greinon engineering. This was a challenging trip with both ups and downs but accompanied by an extend team of experts, always willing to coach, sponsor, help and motivate us. For this we would like to thank them. We would like to thank our parents and family for their financial and motivational support, although distance between us was more than 1500 kilometres. Last but not least we would like to thank our fellow researchers and friends on our department for useful discussions, comments, suggestions, thoughts and also creative and fun moments we spend together. i Abstract Wireless communications is a constantly progressing technology in network engineering society, creating an environment full of opportunities that are targeting in financial growth, quality of life and humans prosperity. Wireless security is the science that has as a goal to provide safe data communication between authorized users and prevent unauthorized users from gaining access, deny access, damage or counterfeit data in a wireless environment.
    [Show full text]
  • AWS Site-To-Site VPN User Guide AWS Site-To-Site VPN User Guide
    AWS Site-to-Site VPN User Guide AWS Site-to-Site VPN User Guide AWS Site-to-Site VPN: User Guide Copyright © Amazon Web Services, Inc. and/or its affiliates. All rights reserved. Amazon's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored by Amazon. AWS Site-to-Site VPN User Guide Table of Contents What is Site-to-Site VPN ..................................................................................................................... 1 Concepts ................................................................................................................................... 1 Working with Site-to-Site VPN ..................................................................................................... 1 Site-to-Site VPN limitations ......................................................................................................... 2 Pricing ...................................................................................................................................... 2 How AWS Site-to-Site VPN works ........................................................................................................ 3 Site-to-Site VPN Components .....................................................................................................
    [Show full text]
  • Building Ipv6 Based Tunneling Mechanisms for Voip Security
    WK,QWHUQDWLRQDO0XOWL&RQIHUHQFHRQ6\VWHPV6LJQDOV 'HYLFHV Building IPv6 Based Tunneling Mechanisms for VoIP Security Amzari J. Ghazali, Waleed Al-Nuaimy, Ali Al-Ataby, Majid A. Al-Taee Department of Electrical Engineering and Electronics University of Liverpool, UK e-mail: {amzari.ghazali, wax, ali.ataby, altaeem}@liv.ac.uk Abstract—Internet protocol version 6 (IPv6) was such as Toredo, 6to4 and manual configuration [4]. developed to resolve the IPv4 address exhaustion Despite the benefits of using IPv6, there are still problem and support new features. However, IPv6 still challenges and obstacles in implementing and comprises some defectiveness of IPv4 protocol such as practically using IPv6 VoIP [5]. The issues of the multimedia security. This paper presents IPv6-based transition from the current IPv4 network to IPv6 as tunneling mechanisms for securing Voice over Internet Protocol (VoIP) network traffic using OpenSwan IPSec well as VoIP performance for both IP versions need (site-to-site). IPSec with Triple Data Encryption to be assessed and compared. Algorithm (3DES) is used to create a Virtual Private Evaluation of VoIP performance with IPSec in Network (VPN) on top of existing physical networks. IPv4, IPv6 and 6to4 networks using Teredo for NAT Secure communication mechanisms can therefore be provided for data and control information transmitted traversal in a test LAN was previously reported in between networks. Secure VoIP-oriented mechanisms [6]. The testbed used softphones to setup calls, and on VPN IPv6 have been designed, implemented and background traffic was generated to create congestion tested successfully using open source approaches. The on the links and routers. The results demonstrated the performance of the IPv6 VoIP network is assessed feasibility of using a single Linux box to handle experimentally in terms of several performance metrics IPSec, 6to4 and NAT processing, and it was found including jitter, throughput and packet loss rate.
    [Show full text]
  • CS670: Network Security
    Cristina Nita-Rotaru CS670: Network security IPsec. TLS. Sources 1. Many slides courtesy of Christo Wilson and Wil Robertson 2. IPSec Key management based on slides from B. LaMacchia 3. Analysis of the HTTPS Certificate Ecosystem, IMC 2013: https://jhalderm.com/pub/papers/https-imc13.pdf 4. Analysis of SSL certificate reissues and revocations in the wake of Heartbleed, IMC 2014: http://www.ccs.neu.edu/home/cbw/pdf/imc254-zhang.pdf 2 IPSec; TLS 1: Protecting IP: IPsec OSI/ISO Model Application Application Presentation Presentation Session Session Transport Transport Network Network Data Link Data Link Physical Layer Physical Layer 4 IPSec; TLS IPsec design goals } Design philosophy: applications cannot be trusted to implement end-to-end security properly and security should be built into the network itself } Transparent to applications (below transport layer ) } Goal: Facilitate direct IP connectivity between sensitive hosts through untrusted networks } It is designed to be extremely flexible } Different crypto algorithms and key exchange supported } Different security services compositions } Different granularities of protection 5 IPSec; TLS Security goals } IPsec provides: } access control } integrity } data origin authentication } rejection of replayed packets } confidentiality } IETF IPSEC Working Group } Documented in RFCs and Internet drafts 6 IPSec; TLS Security and deployment mechanisms } Operates based on security associations } Deployment: } Transport-mode: encapsulates an upper-layer protocol (e.g. TCP or UDP) and preapends an
    [Show full text]
  • FIPS 140-2 Security Policy
    Red Hat Enterprise Linux 6.2 Openswan Cryptographic Module v2.0 FIPS 140-2 Security Policy version 1.1 Last Update: 2012-11-13 Red Hat Enterprise Linux 6.2 Openswan Cryptographic Module version 2.0 FIPS 140-2 Security Policy Contents 1 Cryptographic Module Specification .................................................................................................... .................. 3 1.1 Description of Module ............................................................................................................. .................. ... 3 1.2 Description of Approved Mode .......................................................................................................... ............ 4 1.3 Cryptographic Module Boundary ......................................................................................... ......................... 5 1.3.1 Hardware Block Diagram ................................................................................................................. .......... 6 1.3.2 Software Block Diagram .......................................................................................................... ................... 7 1.4 Red Hat Enterprise Linux 6.2 Cryptographic Modules and FIPS 140-2 Certification ......................... .......... 7 1.4.1 Platforms ............................................................................................................................... ............. ........ 8 1.4.2 FIPS Approved Mode .......................................................................................................................
    [Show full text]
  • Bohrende Fragen Wireguard
    01/2018 VPN mit Wireguard aufsetzen Titelthema Bohrende Fragen Wireguard 38 Wer ein Virtual Private Network einrichten möchte, kämpft oftmals mit einer nicht ganz simplen Konfiguration. Wireguard verspricht, dass der Tunnelbau auch einfacher und flinker gelingen kann. Falko Benthin www.linux-magazin.de Quelltext und setzt auf starke Verschlüs- selungsalgorithmen, wofür Donenfeld Trevor Perrins Noise Protocol Framework [9] ins Boot nimmt. Für Zertifikate setzt das Wireguard-Protokoll auf Ed25519, für den Schlüsselaustausch auf Curve25519 (ECDHE) und für den Datentransport auf Chacha20-poly1305. Wireguard unterstützt allerdings nur eine kryptografische Suite, die sich je- doch bei Problemen ohne Weiteres aus- tauschen lässt. Anwender müssen ihre Verschlüsselungs-Suite also nicht mehr aus verschiedenen Chiffren selbst zusam- menbasteln. Das reduziert die Komple- xität und vermindert das Risiko von Si- cherheitslücken. Wireguard arbeitet aus © Péter Gudella, 123RF © Péter Sicht des Administrators zustandslos und bringt einen integrierten Schutz gegen VPNs (Virtual Private Networks) gelten In freien Wildbahn treffen Admins Wire- Denial-of-Service-Attacken mit. als sichere Nummer, wenn es darum guard bislang noch eher selten an. Das geht, das Home Office mit dem Firmen- dürfte vor allem daran liegen, dass das Installation und netz, Firmensitze mit der Zentrale oder Projekt noch nicht im offiziellen Linux- Inbetriebnahme Geschäftsreisende mit ihrer Kundenda- Kernel steckt und aktuell nur für Linux tenbank zu verbinden. Privatnutzer ver- und OS X verfügbar ist. Daneben feh- Die Repositories zahlreicher Distributio- wenden VPNs, um beispielsweise sicher len Sicherheits-Audits und das Protokoll nen bieten Wireguard bereits an, sodass über das Internet auf die heimische Wet- kann sich noch ändern. Experimentierfreudige es leicht mit Hilfe terstation mit angeschlossenem Daten- Trotzdem haben es manche VPN-Provi- der entsprechenden Paketverwaltung in- bankserver zuzugreifen.
    [Show full text]
  • Evolution of the Transport Layer Security As Internet Security Protocol: Impact, Improvements and Extent
    Norberto Novoa Torres, et. al. International Journal of Engineering Research and Applications www.ijera.com ISSN: 2248-9622, Vol. 10, Issue 11, (Series-II) November 2020, pp. 27-34 RESEARCH ARTICLE OPEN ACCESS Evolution Of The Transport Layer Security As Internet Security Protocol: Impact, Improvements And Extent. Johana Alejandra Mendoza Aguilera*, Norberto Novoa Torres** *(Engineering Department, Universidad Distrital Francisco José de Caldas, Facultad Tecnologica, Bogotá D.C. – Colombia. ** (Engineering Department, Universidad Distrital Francisco José de Caldas, Facultad Tecnologica, Bogotá D.C. – Colombia. ABSTRACT Although, it presents the use of SSL and TLS as protection mechanisms of communication trough encryption in data transportation making it been the most used crucial service, like messaging, financial transactions, etc., At the same time, it becomes in an attack target through its different versions which they have managed to be successful because of different methods. Making the protocol to evolve rapidly in its implementation modes and present improvements by means of hybrid solutions with the aim to solve those found security breaches or to give power to other services. In this document it is presented an analysis of these affirmations, managing to determine how safe the protocol is at the moment and how it prepares to the future. Keywords – Comunication, Safe protocols, Security, SSL, TLS. --------------------------------------------------------------------------------------------------------------------------------------- Date of Submission: 06-11-2020 Date of Acceptance: 19-11-2020 --------------------------------------------------------------------------------------------------------------------------------------- has been done until now. Or, if it is planned to I. INTRODUCTION include improvements that keep it situating as one of Nowadays, technology presents high the best solutions talking about information and safe advantages ahead of the challenges of security communications it refers.
    [Show full text]
  • Applied Crypto Hardening
    Applied Crypto Hardening Wolfgang Breyha, David Durvaux, Tobias Dussa, L. Aaron Kaplan, Florian Mendel, Christian Mock, Manuel Koschuch, Adi Kriegisch, Ulrich Pöschl, Ramin Sabet, Berg San, Ralf Schlatterbeck, Thomas Schreck, Alexander Würstlein, Aaron Zauner, Pepi Zawodsky (University of Vienna, CERT.be, KIT-CERT, CERT.at, A-SIT/IAIK, coretec.at,FH Campus Wien, VRVis, MilCERT Austria, A-Trust, Runtux.com,Friedrich-Alexander University Erlangen-Nuremberg, azet.org, maclemon.at) April 25, 2017 Contents 1. Abstract 5 1.1. Acknowledgements ........................................ 6 2. Introduction 8 2.1. Audience .............................................. 8 2.2. Related publications ........................................ 8 2.3. How to read this guide ....................................... 8 2.4. Disclaimer and scope ........................................ 9 2.4.1. Scope ............................................ 10 2.5. Methods ............................................... 11 3. Practical recommendations 12 3.1. Webservers ............................................. 12 3.1.1. Apache ........................................... 12 3.1.2. lighttpd ........................................... 13 3.1.3. nginx ............................................ 14 3.1.4. Cherokee .......................................... 15 3.1.5. MS IIS ............................................ 17 3.2. SSH ................................................. 20 3.2.1. OpenSSH .......................................... 20 3.2.2. Cisco ASA .........................................
    [Show full text]
  • Supported Software
    The following table identifies the log types that the Binary Defense SIEM supports out of the box. SUPPORTED SOFTWARE Vendor Supported Software A10 Thunder WAF Abas ERP Abas Accellion Kiteworks Actiontec Verizon FIOS router Adtran NetVanta Aerohive Networks Wireless Access Point Alcatel Arista Switch AlienVault Agent | Availability-Monitoring | HIDS | Monit | Monitor |Netflow Alerts | NIDS | Nmap Hosts | Nmap Monitor | OCS Monitor | Ping Monitor | Post-Correlation | TCPTrack Monitor | USBdev | User Activity | Whois Monitor | WMI Application Logger | WMI Monitor | WMI Security Logger | WMI System Logger Allot Communications NetEnforcer Amun Amun Honeypot Anti-Spam SMTP Proxy Anti-Spam SMTP Proxy Apache Software Foundation Apache HTTP Server | OpenLDAP | SpamAssassin | Tomcat | Apple AirPort Extreme | OS-X AQTRONiX WebKnight Arbor Networks Pravail APS Arista Switches Arpalert Arpalert Array Networks Secure Access Gateway Artemisa Artemisa Honeypot Artica Proxy Aruba Networks Airwave | ClearPass | Mobility Access Switches | Wireless Asterisk VoIP AsusTek Wireless Router Automatic Software Solutions HoneyBOT Automation Access Tarantella Avast Free Antivirus Avaya Media Gateway | VSP switches | Wireless LAN Barracuda Link Balancer | Next Gen Firewall | Spam Firewall | SSL VPN | Web Application Firewall | Web Filter Binary Defense Artillery Honeypot Bitdefender GravityZone Blackboard Learn Blue Coat PacketShaper | ProxySG Bomgar Remote Support and Privileged Access Bro Bro NSM Broadweb IPS-Netkeeper | Netkeeper NIDS Brocade Brocade Devices
    [Show full text]
  • Master's Thesis Template
    DEGREE PROGRAMME IN WIRELESS COMMUNICATIONS ENGINEERING MASTER’S THESIS Wireless Backhaul in Future Cellular Communication Author Munim Morshed Supervisor Mika Ylianttila Second Examiner Jari Iinatti (Technical Advisor Jaakko Leinonen) August 2018 Morshed Munim. (2018) Wireless Backhaul for Future Cellular Communication. University of Oulu, Degree Programme in Wireless Communications Engineering. Master’s Thesis, 64 p. ABSTRACT In 5G technology, huge number of connected devices are needed to be considered where the expected throughput is also very ambitious. Capacity is needed and thus used frequencies are expected to get higher (above 6 GHz even up to 80 GHz), the Cell size getting smaller and number of cells arising significantly. Therefore, it is expected that wireless backhaul will be one option for Network operators to deliver capacity and coverage for high subscriber density areas with reduced cost. Wireless backhaul optimization, performance and scalability will be on the critical path on such cellular system. This master’s thesis work includes connecting a base station by using the wireless backhaul by introducing a VPN in the proposed network. We find the bottleneck and its solution. The network is using 3.5 GHz wireless link instead of LAN wire for backhaul link between the EnodeB and the core network (OpenEPC). LTE TDD band 42 acting as a Wireless Backhaul (Link between EnodeB and Band 42 CPE Router). The status and attachment procedure are observed from different nodes of the openEPC and from the VPN machine. Step by step we have established a tunnel between the CPE device and the VPN server using PPTP and L2TP with IPSec tunneling protocol.
    [Show full text]
  • City Research Online
    Sajjad, Ali (2015). A secure and scalable communication framework for inter-cloud services. (Unpublished Post-Doctoral thesis, City University London) City Research Online Original citation: Sajjad, Ali (2015). A secure and scalable communication framework for inter- cloud services. (Unpublished Post-Doctoral thesis, City University London) Permanent City Research Online URL: http://openaccess.city.ac.uk/14415/ Copyright & reuse City University London has developed City Research Online so that its users may access the research outputs of City University London's staff. Copyright © and Moral Rights for this paper are retained by the individual author(s) and/ or other copyright holders. All material in City Research Online is checked for eligibility for copyright before being made available in the live archive. URLs from City Research Online may be freely distributed and linked to from other web pages. Versions of research The version in City Research Online may differ from the final published version. Users are advised to check the Permanent City Research Online URL above for the status of the paper. Enquiries If you have any enquiries about any aspect of City Research Online, or if you wish to make contact with the author(s) of this paper, please email the team at [email protected]. A Secure and Scalable Communication Framework for Inter-Cloud Services Ali Sajjad School of Mathematics, Computer Science & Engineering City University London This dissertation is submitted for the degree of Doctor of Philosophy September 2015 THE FOLLOWING PARTS OF THIS THESIS HAVE BEEN REDACTED FOR COPYRIGHT REASONS: p 7: Fig 1.2. International Data Corporation survey.
    [Show full text]
  • Application Identification and Control
    APPLICATION Arcisdms Networking 3 1 BITS Download Manager File Transfer 4 1 Citrix IMA Remote Access 5 1 Cyworld Social Networking 3 2 Ares File Transfer 1 2 BitTorrent File Transfer 1 5 Citrix Licensing Remote Access 5 1 Daily Mail Web Services 1 2 IDENTIFICATION Ariel Networking 3 3 bizo.com Web Services 3 1 Citrix Online Collaboration 4 3 Dailymotion Streaming Media 1 4 Army Attack Games 2 5 BJNP Networking 4 1 Citrix RTMP Remote Access 5 2 Datagram Authenticated Session Protocol Networking 3 1 Army Proxy Proxy 1 5 Blaze File Server File Transfer 3 2 Citrix WANScaler Remote Access 5 1 Datalogix Web Services 4 1 arns Networking 3 1 BLIDM Database 3 1 Citrix XenDesktop Remote Access 5 1 Datei.to File Transfer 2 5 & CONTROL ARP Networking 3 1 Blogger Web Services 3 1 CitrixSLG Remote Access 5 1 DATEX-ASN Networking 3 1 $100,000 Pyramid Games 2 5 Adobe Updates Web Services 3 1 asa Networking 3 1 Blokus Games 1 2 CityVille Games 1 1 Daum.net Web Services 1 1 050Plus Messaging 2 2 Adometry Web Services 4 1 Ask.com Web Services 2 1 Bloomberg Web Services 4 1 CL1 Networking 3 1 Daytime Network Monitoring 2 5 12306.cn Web Services 4 1 Adready Web Services 4 1 Astaro SSL VPN Client VPN and Tunneling 3 1 Bluekai Web Services 1 1 Clarizen Collaboration 5 1 dBASE Unix Database 3 1 While traditional firewalls block protocols, 126.com Mail 4 2 Adrive.com Web Services 3 3 Astraweb File Transfer 3 5 BlueLithium Web Services 3 1 Classmates Social Networking 1 3 DC Storm Web Services 4 1 and ports, the Network Box Application 17173.com Social Networking
    [Show full text]