University of Cambridge > Talks.cam > Computer Laboratory Security Seminar > Security Flaws in Tunnel Mode IPsec

  Browse A-Z

Log in

University Account External (via Google)

🔐 Log In

Information on

Subscribing to talksdetails Finding a talkdetails Adding a talkdetails Disseminating talksdetails Help and Documentationdetails

ℹ️ Information

Security Flaws in Tunnel Mode IPsec

Download to your calendar using vCal

If you have a question about this talk, please contact Saar Drimer .

We present a variety of attacks that efficiently extract plaintext data from IP datagrams that are protected using the IPsec protocol ESP in tunnel mode. In contrast to earlier attacks of Bellovin, our attacks require only small amounts of time and network bandwidth to be successful. The attacks apply in situations where the IP packets are not integrity protected, or where integrity protection is supplied only by a higher layer protocol. While strongly discouraged by experts, these configurations of IPsec are still allowed by the relevant IPsec standards. In addition, we believe that these configurations may be widely used in practice. We report on successful implementation of the attacks against an IPsec VPN built using the native implementation of IPsec in Linux.

Joint work with Arnold K.L. Yau.

This talk is part of the Computer Laboratory Security Seminar series.

This talk is included in these lists:

Note that ex-directory lists are not shown.

Other lists

Ramsden Room The Royal Geographical Society, 1 Kensington Gore, London SW7 2AR Polis Department, Alison Richard Building

Other talks

Title to be confirmed: CMS "That's History. That's Truth. I Seen It Myself": T'tc~tsa (Wailaki) and the Enslavement of California Native Americans. Title to be confirmed Thelocactus Title abstract tbc A novel hereditary encephalopathy in four related Labrador Retrievers associated with a missense variant in the ALDH5A1 gene’
 

© 2006-2025 Talks.cam, University of Cambridge. Contact Us | Help and Documentation | Privacy and Publicity