A Protection Model for Network Communications Based on Security Levels

摘要

IPSec was specified to provide authentication, integrity and confidentiality to IP packets. However, the large variety of cryptographic and security options available may cause that the effective cost-protection relation does not correspond to the desired requirements. In this context, this paper presents SLM (Security Level Model), which aims to rationalize the use of IPSec through security levels that group parameters together according to the degrees of protection they offer. High-level information, which are platform-independent and centralized on a LDAP server, are queried fay a Perl-implemented component, which generates specific configurations for IPSec and IKE.