فهرست مطالب:

 چکیده
1 مقدمه
2 پیشینه
3 روش کارکردIPSec
A مجمع های امنیتی
B SA و مدیریت کلید
C الگوریتم ها و روشها
4 تجزیه و تحلیل امنیت
5 راه حل امنیتی پیشنهادی
6 نتیجه گیری

بخشی از ترجمه:

6. نتیجه گیری
نیاز IPv6 موبایل با برخی مسائل عملی ضروری ، هنوز ناقص می باشد. مهمترین نگرانی امنیت پروتکل می باشد، زیرا بدون راه حل امنیتی مناسب، پروتکل فرصتی برای پذیرفته شدن نداشته و به هیچ وجه کار نمی کند. در حال حاضر، در مد انتقال، بسته بندی امن داده ها (ESP) روش استاندارد برای حفاظت از BU و همچنین ساخت اتصال امن برای کنترل پیام های ارسال شده در روش ثبت خانگی می باشد. برخی از مزایای IPSec نسبت به SSL/TLS عبارتنداز: او می تواند مستقل از آدرس IP عمل کند، می تواند هر پروتکلی را رمزگذاری کند و می تواند بسته های متشکل از هدر IP را نیز رمزگذاری کند. اما IPSec بسیار پیچیده بوده و راههای مختلفی برای پیکره بندی آن وجود دارد.
مدیریت کلید پویا ، الگوریتم های احراز هویت متقابل و مذاکره رمزنگاری را می توان با استفاده از پروتکل IKE کنترل نمود. به علاوه، روش احراز هویت که یکی از راههای اصلی ایجاد ارتباط امن بین همتایان است، می تواند براساس رمز مشترک، پروتکل احرازهویت توسعه پذیر (EAP) یا گواهی های X.509 عمل کند.

بخشی از مقاله انگلیسی:

I. INTRODUCTION There are various implementations presented for Mobile IPv6. Some have been successful, while other concepts such as security bandwidth consumption and seamless handover are still concerns that researchers are trying to improve [1]. Communication privacy is a basic necessity of each user in public communication. A summary of necessary security issues includes how sender and receiver authenticate each other before creating any connection (addressing as trust), how communication between senders and receivers is protected against eavesdropping and tampering (addressing as confidentiality), and how authenticated users follow private communication (addressing as authorization). On the other hand, secure communication over the internet is essential for important applications such as banking, purchasing, making payments, virtual private network (VPN) and so on. Security includes peer authentication, and is encouraged by authorization to make use of resources, secret key and exchanges, and private communication using algorithms. Security can be provided either at the IP layer or transport layer. For example, Secure Socket Layer (SSL) is used to make a secure http which is visible as an https on a web page. The VPN applications for roaming users are based either on IP Security or SSL, which are both enough to provide the minimum security functions necessary. IP mobility is concerned with IP layer security so in this paper the focus is on preparing a summary of IP Security (IPsec). Authentication, integrity, confidentiality and access control can be achieved using IPsec in the network [2-5]. II. BACKGROUND Mobile IPv6 is a standard that offers a way for mobile nodes (MN) to preserve connectivity while they travel across different areas. All mobile nodes (MNs) have a home network with a permanent home IP address. In addition, each home network includes a home agent (HA) in charge of tracking MNs as they move in different networks. The time a MN leaves a home network and move to the neighbor network, obtaining a new IP address, is called a care-of address (CoA). The MN is required to register this address (CoA) with its HA through a binding update which defends its authenticity and integrity and is issued over an IPSec. Thus, even as the MN moves to a foreign network, a correspondent node (CN) can maintain communication with the MN using indirect routing made of packets being relayed by the HA. To decrease overhead at the border router, routing optimization is used. Routing optimization offers a way for the MN and CN to forward packets to each other directly without sending from the HA. If there is no security mechanism, the CN does not know which MN sent the BU. The BU is not actually secret but it needs to be sent from a legitimate MN. The integrity and authenticity of this binding update cannot be secured via IPSec as it cannot be assumed that a common public key survives between the two nodes. [6-8]. III. HOW IPSEC WORKS IPSec uses packet cryptography and filtering, with cryptography helping to achieve user data confidentiality, authentication and integrity. These are components which together with their interrelationships include the logical architecture of IPSec. In this section the fundamental components of IPSec architecture are briefly explained. IPSec architecture can be classified into three main areas: Security Associations (SA) SA and key management support Algorithms and methods A. Security Associations Security Associations are a number of keys that define the security services and an agreeable policy, and are used to defend communications between IPSec peers. Security Associations (SA) is a one-way connection that offers security 2012 Third International Conference on Intelligent Systems Modelling and Simulation 978-0-7695-4668-1/12 $26.00 © 2012 IEEE DOI 10.1109/ISMS.2012.9 582 584 services. For each IPSec session two SAs are needed; for instance, if Authentication Header (AH) and Encapsulating (ESP) are both used between two peers in IPSec, then four SAs are needed. Security Association database (SAD) and Security Policy database (SPD) are two databases used in SAs. The SAD is used to keep the information about each SA after SA is established; then the SPD stores the policy requisites or security necessities for each SA to be established. Fig.1 illustrates SA, SAD and SPD architecture [9].

دانلود رایگان مقاله انگلیسی

خرید ترجمه فارسی مقاله با فرمت ورد

خرید نسخه پاورپوینت این مقاله جهت ارائه

نوشته دانلود ترجمه مقاله کلیاتی در رابطه با امنیت Ipv6 موبایل – مجله IEEE اولین بار در ترجمه فا پدیدار شد.

فهرست مطالب:

 چکیده
1 مقدمه
2 ویژگیهای امنیتی IPV6 موبایل
3 تهدیدهای امنیتی در ویژگیهای جدید IPV6 موبایل
A حمله Forged Binding update
B حمله Home Address Option
C حمله Routing Header
D تهدیدها در مکانیسم کشف پیشوند موبایل پویا
4 استراتژیهای حفاظت در برابر تهدیدهای امنیتی
A حفاظت از امنیت در فرایند رجیستر(ثبت)
B تائید Home Address Option و Routing Header
C اتحاد امنیتی IPsec
5 نتیجه گیری

بخشی از ترجمه:

5. نتیجه گیری
ویژگیهای جدید تعریف شده در IPv6 موبایل دارای ریسک های امنیتی بالقوه ای می باشند. هدر یا سرآیند بسته داده ها، گزینه های مسیریابی و مکانیسم های اجرایی ، اشیاء و اهداف حملات امنیتی می باشند. اطلاعات رجیستر و ثبت که حامل روابط نظیر بین آدرس خانگی گره موبایل و مراقبت از آدرس هستند، کلیدی برای ویژگی نشانی پذیر گره موبایل می باشند که در معرض انواع و اقسام حملات غیر قانونی قرار دارد و به همین خاطر استراتژیهای حفاظت از امنیت الزامی و ضروری خواهند بود.
برگشت به فرایند مسیریابی به منظور تحقق اعتبار مالکیت آدرس خانگی و مراقبت از آدرس گره موبایل شرایط دسترسی برای گره های ارتباطی را فراهم می آورد که این مسئله از امنیت ثبت و رجیستر عمومی اطمینان حاصل می کند. برای اطمینان از اعتبار و ارزیابی مشروعیت آدرس مبدا، گزینه آدرس خانگی و هدر یا سرآیند مسیریابی مورد ارزیابی و اعتباریابی قرار می گیرد. ضمناً،برای حفاظت از یکپارچگی داده ها در انتقال جهت اطمینان از ویژگی آدرس گره موبایل، مکانیسم IPsec معرفی می شود.

بخشی از مقاله انگلیسی:

I. INTRODUCTION The rapid growth of intelligent mobile terminal users and fast development of Next Generation Network (NGN) have greatly promoted intelligent mobile terminal applications. With remarkable progress of its application, Internet protocol version 4 (IPv4) cannot satisfy special requirements of mobile Internet, such as security and network performance. At present, telecom operators gradually start to support Internet protocol version 6 (IPv6), including terminal, access and core network. Meanwhile, intelligent terminal manufactures also launch both software and hardware development supporting IPv6. Due to those factors mentioned above, mobile IPv6 application will become a trend inevitably. In the Internet protocol family, IPv4 is mainly designed aiming at wired network mode. With limited number of IP address available for network distribution and insufficient support for network node mobility, IPv4 cannot satisfy mobile internet’s development requirements. Based on original IP protocol, mobile IP protocol is proposed to support mobile nodes, which makes it realizable to access internet via various mobile devices under any circumstance. Mobile IP protocol is mainly designed to keep the continuity of communication between mobile nodes, without changing their IP address when connecting to other network access points. As a corporate body subordinate to IETF (Internet Engineering Task Force), mobile IP protocol group put forward IPv4 proposals in 1996[1], which have solved the reliability, security, scalability and media related problems of mobile Internet. Compared with mobile IPv4, mobile IPv6 combines with new features of IPv6 and makes further mobile nodes roaming in NGN more smoothly, thus the mobile network can be accessible at any time. Mobile IPv6 has more complete functions compared to IPv4, and it breaks several fundamental restrictions. It provides specific IP addresses for all mobile terminals and will eventually replace IPv4 using currently. Resolving the problem of IP address resource exhaustion as well as effective security supporting in network layer make it to be the dominant network protocol in NGN. II. SECURITY FEATURES OF MOBILE IPV6 The security technology used in IPv6 is IPsec (IP Security). While the existing network of IPv4 could not be fully updated to support IPsec, IPv6 has realized all security requirements of IPsec [2]. Since many network attacks are carried out in network layer, the security service realized in IP layer can defend all kinds of network attacks more efficiently. However, in terms of mobile IPv6, there are still many problems existing in protocol implementation [3]. As mobile node has to register current IP address to home agent as well as other communication nodes when moving away from home link, which would provide opportunities for network hacking in location registration process. In mobile Internet based on IPv6, most potential threats result from incorrect binding update information. Meanwhile, new technical characteristics defined in the agreement also have security vulnerabilities, and the support for nodes’ mobility also has special effects for traditional network security protection. III. SECURITY THREATS IN MOBILE IPV6 NEW FEATURES In mobile IPv6 agreement, mobile node informs home agent and communication node of its current position through binding update information, which would make their data packet accessible to mobile node. The binding update information adapted in home agent or communication nodes create corresponding relations between home address and care-of-address for mobile node, which is stored in binding cache. Both home agent and communication nodes firstly have to check the binding cache so as to obtain the destination’s care-of-address, and then, they send data packets to other nodes

دانلود رایگان مقاله انگلیسی

خرید ترجمه فارسی مقاله با فرمت ورد

خرید نسخه پاورپوینت این مقاله جهت ارائه

نوشته دانلود ترجمه مقاله تحقیقات پیرامون ویژگیهای امنیتی Ipv6 موبایل – مجله IEEE اولین بار در ترجمه فا پدیدار شد.

فهرست مطالب:

 چکیده
1 مقدمه
2 کارهای مرتبط
3 پروتکل طرح پیشنهادی
4 تجزیه و تحلیل عملکرد
A تاخیر هند آف
B تجزیه و تحلیل مقیاس پذیری و امنیت
5 نتایج

بخشی از ترجمه:

از آنجایی که شماره سریال در پروتکل IPSec غیر تکراری بوده و ازمحرمانه بودن و یکپارچگی داده های IPSec حفاظت می شود، در نتیجه IPSec-FMIPv6 می تواند این سه تیپ حمله را بلوکه نماید: حملات بازپخش یا تکرار، حملات سیلابی و حملات کد. اما مهاجم می تواند از ساختار گره بهره برده و فرایند را جهت ارسال تعداد بزرگی عملیات اسپم برای حمله DOS تائید نماید، یعنی پیکره بندی سیاست بایستی الگوریتم درست جهت کاهش احتمال حمله را انتخاب نماید. حمایت از مقیاس پذیری عمدتاً در طرح اینترهنداور تحت مدیریت حوزه IPv6 موبایل سلسله مراتبی منعکس و دارای عملکرد سوئیچ بهتری می باشد.
5. نتایج
مقاله حاضر طرح رجیستر امنیتی جدیدی براساس IPSec پیشنهاد می کند که ترکیبی از علامتدهی FMIPv6 و مکانیسم تصدیق اولیه می باشد که قبل از هند اور تصدیق را تحقق داده و با تصدیق پس از هنداور تاخیر زمانی تا حد زیادی کاهش می یابد. تجزیه و تحلیل نشان می دهد مزیت طرح IPSec-FMIPv6 در مقایسه با طرح AAA ، تاخیر پائین و هزینه های کم سربار بسته و همچنین شاخصه های خوب در جنبه هایی نظیر امنیت و حمایت از توسعه پذیری می باشد. قطعاً، می بایست جزئیات بیشتری مطرح گردد، مثل انتخاب الگوریتم های رمزگذاری و وقت گیری در دوره به آن نیاز نخواهد بود، نباید در نظر گرفته شود و این مسئله در کار آتی مورد تحقیق و پژوهش قرار خواهد گرفت.

بخشی از مقاله انگلیسی:

I. INTRODUCTION As the growth of ubiquitous network technologies and services, users can access the Internet from anywhere at any time by using wireless devices. As to support mobility of various applications and services, IETF proposed mobile IPv6 protocols [1] in 2004. However, wireless environment is characterized by openness, which makes it vulnerable to the threat of attacks, and also does MIPv6. MIPv6 signaling are easy subject to attacks, such as man-in-the-middle attack, replay attack, flooding attack, code attacks, DOS attack and so on. Redirection attacks, middle attacks, denial of service attacks will be occur especially during the handover process of mobile nodes for lacking of strong protection measures to the signaling interactions. Additionally, Mobile IPv6 may also be subjected to other security attacks, such as the lack of effective authentication mechanism, which may be the root of many attacks. Mobile IPv6 authentication protocol make mobile nodes get certified in their respective certification entities by using IPSec Security Association(SA) between mobile nodes and home agent or AAAH[2] server when mobile nodes access to a new network. However, the authentication protocol just applied to MN-HA, mutual certification between MN-CN still cannot be made effectively, thus the risk of eavesdropping or intermediary attacking increase if malicious node access to network fake normal node. II. RELATED WORKS Several mechanisms [3-7] have been proposed to solve security problems in handoff process. The related works are discussed here and their drawbacks are pointed out as sequel. In [3], Hu Wang and Anand R. Prasad proposed a method of fast authentication for inter administrative domain handoff between two foreign mobile or wireless communication network domains. In this method, Serving Network (SN) and Target Networks (TN) must be a relationship of mutual trust. When MN handoff from SN to TN, MN send a handoff decision to SN, then SN calculates a shared key for MN and TN，and sends it to MN and TN respectively. Then MN sends a fast authentication request asking to TN after receiving the key, and MN can be accessed to TN when authentication finish. Such an approach, however, faces the following challenges: First, if the trusted third-party introduced for distributing the pre-shared key to authentication entities is under attack, there is no security to speak of in authentication process. Secondly, the introduction of a trusted third-party will be an additional signaling overhead. Finally, binding update process is also lack of effective protection after handoff. In[6], a fast authentication mechanism using identitybased signature (IBS) was proposed. Its primary idea is the effective combination of fast handover and access authentication. New access router (NAR) and NAAA server ask for the signature parameters of MN from AAAh of MN when handover initials. MN accomplish access authentication with only one interaction with AAAv server and complete binding update process with HA simultaneously. Similar researches on the combination of Mobile IP and AAA mechanism solving the authentication issues of MN in handover process are presented in [4-7]. But such approaches need a great deal of signaling interactions with the home network each handoff happens, which lead to a large handover delay and considerable signaling overhead. Even though these methods can solve the security treats in handoff process to a certain extent, there are still many defects, such as more packets overhead, the security issue of message and signals protection which was rarely take into 978-1-4244-3709-2/10/$25.00 ©2010 IEEE account in the handover process, and poor performance when mobile node far away from home networks. III. PROPOSED SCHEME PROTOCOL The underlying security problem of handoff is the lack of effective authentication of mobile nodes as well as security protection of handover signals. In this paper, we propose a novel registration of fast handoff, which is based on IPSec protection. Its basic mind is using IKEv2 protocol [8] to achieve pre-authentication of mobile nodes in fast handoff process, and the Security Association (SA) generated by IKEv2 also utilized to provide protection for handover signaling. We illustrate the method of registration in handover procedure as Fig.1 shows.

دانلود رایگان مقاله انگلیسی

خرید ترجمه فارسی مقاله با فرمت ورد

خرید نسخه پاورپوینت این مقاله جهت ارائه

نوشته دانلود ترجمه مقاله هندآف IPv6 سیار با رجیستر امنیتی مبتنی بر شبکه IPSec – مجله IEEE اولین بار در ترجمه فا پدیدار شد.