Recommended
More Related Content
What's hot
What's hot (8)
Viewers also liked
Similar to Vpn 2
Similar to Vpn 2 (20)
More from Swarup Kumar Mall
Recently uploaded
Recently uploaded (20)
Vpn 2
- 1. Virtual Private Networks Fred Baker
- 2. What is a VPN Public networks are used to move information between trusted network segments using shared facilities like frame relay or atm A VIRTUAL Private Network replaces all of the above utilizing the public Internet Performance and availability depend on your ISP and the Internet
- 3. Why?
- 4. HomeNet to the office.
- 5. VPN Types
- 7. VPN as your Intranet
- 10. Parts of a VPN
- 11. VPN works via crypto/Encapsulation
- 12. Encryption and Decryption Clear-Text Clear-Text Cipher Text 8vyaleh31&d ktu.dtrw8743 $Fie*nP093h Encryption Bob Is a Fink Bob Is a Fink Decryption
- 13. Basic Crypto – Keys are key
- 14. 2 Kinds Key Systems
- 18. Using Crypto in real life
- 19. PKI to send Private Keys
- 20. PKI Certs a way to authenticate
- 21. Prove the user cert Certificates of authority
- 22. Digital Signature to verify data not changed in transit
- 23. PKI the full picture
- 24. Where you do Crypto
- 25. Technologies
- 28. Transport Layer: IPSEC VPNs 3 parts
- 32. Diffie-Hellman Public Key Exchange Private Value, X A Public Value, Y A Private Value, X B Public Value, Y B (shared secret) Alice Bob Y B mod p = g mod p = Y A mod p X B X A X B Y A Y B X A Y B = g mod p X B Y A = g mod p X A
- 33. Security Association is the agreement on how to secure
- 34. create the ISAKMP SA (Internet Security Association Key Management Protocol)
- 35. IPSEC Key Exchange (IKE)
- 36. IKE allows scale as I do not need to hard code passwords for each pair
- 37. Link Layer: L2TP for VPDN (Vir Pvt Dial Net)
- 38. PPTP: Free from Microsoft
- 39. PPTP: Security
- 40. VPN Comparisons
- 42. Other Issues
- 43. Like Nat
- 44. Wireless: a new big driver, WAS (Work At Starbucks)
- 45. Many security protocols, depends on deployer
- 46. VPN means I don’t care how you connect
- 47. Example
Editor's Notes
- 11 43 43 Encryption is the masking of secret or sensitive information such that only an authorized party may view (or decrypt) it
- 15
- 13 49 49 What is encrypted with the public key can only be decrypted with the private key. Anyone can encrypt with someone’s private key but only the intended recipient can decrypt What is encrypted with the private key can only be decrypted with the public key. Only the holder of the private key can encrypt, anyone can decrypt—proof of signature.
- 16 45 45 Diffie-Hellman Key Generation By exchanging numbers in the clear, two entities can determine a new unique number known only to them Result is a shared secret Neither party can alone control value Neither party knows—no needs to know—private key of other
- 17 Diffie-Hellmann exchange is based upon the concept of modular exponentiation. The prime p denotes a galois field. The numbers are HUGE—e.g,. 1024 bits
- 18 46 46 D-H exchange is in fact two exponentiations One exponentiation produces a “public value”. Private value is a random (but very large) number Public numbers are exchanged and another exponentiation is performed. Each party derives the same shared secret Susceptible to man-in-the-middle attack