MLCC: A multi layered correlative control mechanism for the VPN topology

Kai Ouyang*, Xiaowen CHU, Lijun Dong, Hengqing Wang, Ting Cai

*Corresponding author for this work

Research output: Chapter in book/report/conference proceedingConference proceedingpeer-review

1 Citation (Scopus)

Abstract

The security model is the key component in the security of network topology research. Especially in the Virtual Private Network (VPN) topology, with the emergence of the tunneling, private routing and cipher technology in VPN, there are two embarrassments for the protection of the entire VPN topology. One is that internal services will be uncovered in the Internet by the tunneling, which can be compromised by attacking the client-side endpoint of a VPN tunnel. The other is that firewall and Intrusion Detection System (IDS) could not completely analyze the network packet content because of the private routing and cipher technology. Based on the analysis of the VPN topology, we put forward the Multi-Layered Correlative Control (MLCC) mechanism. MLCC is a multi-layered security protection mechanism based on VPN gateway incorporating client end-point, firewall, IDS and internal services. There are three types of correlative technology introduced in MLCC, which are endpoint extending, component correlation and service engine. By their combination, MLCC can turn the VPN protection into a correlative and full model and improve the security of the VPN topology. Finally, the performance analysis based on our prototype is presented.

Original languageEnglish
Title of host publicationInternational Conference on Networking, Architecture, and Storage, NAS 2007
Pages37-43
Number of pages7
DOIs
Publication statusPublished - 2007
Event2nd International Conference on Networking, Architecture, and Storage, NAS 2007 - Guilin, China
Duration: 29 Jul 200731 Jul 2007

Publication series

NameInternational Conference on Networking, Architecture, and Storage, NAS 2007

Conference

Conference2nd International Conference on Networking, Architecture, and Storage, NAS 2007
Country/TerritoryChina
CityGuilin
Period29/07/0731/07/07

Scopus Subject Areas

  • Computer Networks and Communications
  • Hardware and Architecture

Fingerprint

Dive into the research topics of 'MLCC: A multi layered correlative control mechanism for the VPN topology'. Together they form a unique fingerprint.

Cite this