Blug talk

What is a VPN and how is it different from other security software? ,[object Object],[object Object],[object Object]

The Wide area network before VPNs ,[object Object],[object Object],[object Object]

A brief history of VPNs ,[object Object],[object Object],[object Object],[object Object]

IPSec problems ,[object Object],[object Object],[object Object],[object Object]

The rise of SSL and user-space VPNs. ,[object Object],[object Object],[object Object],[object Object]

Linux and virtual network interfaces ,[object Object],[object Object],[object Object]

What is a tun interface? ,[object Object],[object Object],[object Object],[object Object]

How is a tun interface used to build a VPN? ,[object Object],[object Object],[object Object],[object Object],[object Object]

How is a tun interface used to build a VPN (continued)? ,[object Object],[object Object],[object Object]

Adding security to the VPN ,[object Object],[object Object]

Problems with using SSH to build a VPN ,[object Object],[object Object],[object Object],[object Object],[object Object]

Reliable and Unreliable protocols ,[object Object],[object Object],[object Object],[object Object]

Encapsulating Protocols ,[object Object],[object Object],[object Object]

Encapsulating TCP in TCP – the problem ,[object Object],[object Object],[object Object]

Fixing the problem ,[object Object],[object Object]

Why is UDP better for encapsulating IP? ,[object Object],[object Object],[object Object]

VPNs and UDP ,[object Object],[object Object],[object Object]

The VPN is invisible to applications tunneling over it. ,[object Object],[object Object],[object Object]

Enter OpenVPN ,[object Object],[object Object],[object Object]

User-space Tun/Tap vs. IPSec ,[object Object],[object Object],[object Object],[object Object]

IPSec in a nutshell ,[object Object],[object Object],[object Object]

IPSec limitations ,[object Object],[object Object],[object Object],[object Object]

IPSec limitations (continued) ,[object Object],[object Object],[object Object],[object Object]

The “Two Minds” of IPSec -- N. Ferguson and B. Schneier ,[object Object]

How does a VPN achieve security? ,[object Object],[object Object],[object Object]

Active Attacks ,[object Object],[object Object]

Active attacks are thwarted through the use of authentication ,[object Object],[object Object],[object Object]

HMAC isn’t a 100% solution against active attacks. ,[object Object],[object Object],[object Object]

Replay Attacks ,[object Object],[object Object],[object Object]

Replay attacks, continued ,[object Object],[object Object],[object Object]

Replay attacks, continued. ,[object Object],[object Object],[object Object]

Known plaintext attacks. ,[object Object],[object Object]

Known plaintext attacks (continued). ,[object Object],[object Object],[object Object]

This would be impossible (I hope) in 2003. ,[object Object],[object Object],[object Object]

OpenVPN and Cryptography ,[object Object],[object Object],[object Object],[object Object]

OpenVPN and keying ,[object Object],[object Object],[object Object],[object Object]

Authentication only leads into a bigger problem – key management. ,[object Object],[object Object]

Enter public key cryptography. ,[object Object]

Public Key cryptography is really about the problem of authentication ,[object Object],[object Object]

Public Key technology solves the key sharing problem. ,[object Object],[object Object]

Public key cryptography. ,[object Object],[object Object],[object Object],[object Object],[object Object]

Public key cryptography and authentication. ,[object Object],[object Object],[object Object]

Enter the Certificate. ,[object Object],[object Object],[object Object],[object Object],[object Object]

The Certificate Authority. ,[object Object],[object Object],[object Object],[object Object]

CAs Continued… ,[object Object],[object Object],[object Object],[object Object]

Cryptography conclusion ,[object Object],[object Object],[object Object]

OpenVPN Features ,[object Object],[object Object],[object Object],[object Object],[object Object]

OpenVPN Features, continued. ,[object Object],[object Object]

OpenVPN’s 3 tier security model ,[object Object],[object Object],[object Object]

OpenVPN’s 3 tier security model (continued) ,[object Object],[object Object]

OpenVPN’s 3 tier security model (continued) ,[object Object],[object Object],[object Object]

VPNs and Networking ,[object Object],[object Object],[object Object]

Bridging vs. Routing in the VPN context ,[object Object],[object Object]

Bridging Advantages ,[object Object],[object Object],[object Object],[object Object]

Bridging Disadvantages ,[object Object]

Routing Advantages ,[object Object],[object Object]

Routing Disadvantages ,[object Object],[object Object],[object Object],[object Object]

The nuts and bolt of bridging (1) ,[object Object],[object Object],[object Object]

The nuts and bolt of bridging (2) ,[object Object],[object Object],[object Object]

VPNs and firewalling ,[object Object],[object Object],[object Object]

VPNs and firewalling (continued). ,[object Object],[object Object],[object Object]

Future directions -- OpenVPN 2.0 ,[object Object],[object Object],[object Object]

Future directions -- OpenVPN 2.0 (continued) ,[object Object]

Conclusion ,[object Object],[object Object],[object Object],[object Object]

Blug talk

Recomendados

Recomendados

Más contenido relacionado

La actualidad más candente

La actualidad más candente (20)

Destacado

Destacado (7)

Similar a Blug talk

Similar a Blug talk (20)

Más de Swarup Kumar Mall

Más de Swarup Kumar Mall (12)

Blug talk