loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Paper

Paper Unlock

Authors: Alberto Ferrante 1 ; Sathish Chandra 1 and Vincenzo Piuri 2

Affiliations: 1 ALaRI, Faculty of Informatics, University of Lugano, Switzerland ; 2 DTI, University of Milano, Italy

Keyword(s): IPSec, IPSec Databases, IPSec accelerator, SADB, SPD.

Related Ontology Subjects/Areas/Topics: Cloud Computing ; Information and Systems Security ; Ipsec, Vpns and Encryption Modes ; Service and Systems Design and Qos Network Security ; Services Science

Abstract: IPSec is a suite of protocols that adds security to communications at the IP level. Protocols within IPSec make extensive use of two databases, namely the Security Policy Database (SPD) and the Security Association Database (SAD). The ability to query the SPD quickly is fundamental as this operation needs to be done for each incoming or outgoing IP packet, even if no IPSec processing needs to be applied on it. This may easily result in millions of query per second in gigabit networks. Since the databases may be of several thousands of records on large secure gateways, a dedicated hardware solution is needed to support high throughput. In this paper we discuss an architecture for these query units, we propose different query methods for the two databases, and we compare them through simulation. Two different versions of the architecture are presented: the basic version is modified to support multithreading. As shown by the simulations, this technique is very effective in this case. Th e architecture that supports multithreading allows for 11 million queries per second in the best case. (More)

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 18.213.110.162

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Ferrante, A.; Chandra, S. and Piuri, V. (2007). A QUERY UNIT FOR THE IPSEC DATABASES. In Proceedings of the Second International Conference on Security and Cryptography (ICETE 2007) - SECRYPT; ISBN 978-989-8111-12-8; ISSN 2184-3236, SciTePress, pages 133-139. DOI: 10.5220/0002119901330139

@conference{secrypt07,
author={Alberto Ferrante. and Sathish Chandra. and Vincenzo Piuri.},
title={A QUERY UNIT FOR THE IPSEC DATABASES},
booktitle={Proceedings of the Second International Conference on Security and Cryptography (ICETE 2007) - SECRYPT},
year={2007},
pages={133-139},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0002119901330139},
isbn={978-989-8111-12-8},
issn={2184-3236},
}

TY - CONF

JO - Proceedings of the Second International Conference on Security and Cryptography (ICETE 2007) - SECRYPT
TI - A QUERY UNIT FOR THE IPSEC DATABASES
SN - 978-989-8111-12-8
IS - 2184-3236
AU - Ferrante, A.
AU - Chandra, S.
AU - Piuri, V.
PY - 2007
SP - 133
EP - 139
DO - 10.5220/0002119901330139
PB - SciTePress