ISAKMP
ISAKMP (Internet Security Association and Key Management Protocol) is a protocol for establishing Security Associations (SA) and cryptographic keys in a internet environment.
ISAKMP defines the procedures for authenticating a communicating peer, creation and management of Security Associations, key generation techniques, and threat mitigation (e.g. denial of service and replay attacks).
ISAKMP typically utilizes IKE for key exchange, although other methods can be implemented.
ISAKMP is documented in RFC 2048: Internet Security Association and Key Management Protocol (ISAKMP).
ISAKMP under IP (Internet Protocol) is documented in RFC 2407: The Internet IP Security Domain of Interpretation for ISAKMP.
|
|
- IKE (Internet Key Exchange)
IKE (Internet Key Exchange) is a key exchange mode for ISAKMP. IKE is used to securely exchange encryption keys as part of building a VPN tunnel. IKE supports the following encryption algorithms: DES-CBC IDEA-CBC Blowfish-CBC RC5-R16-B64-CBC 3DES-CBC CAST-CBC IKE supports the following hash algorithms: MD5 SHA Tiger IKE supports the following authentication methods: Pre-shared key [...]...
- IPsec
IPSec (IP Security) is a suite of protocols which was designed by Internet Engineering Task Force (IETF) to protect data by signing and encrypting data before it is transmitted over public networks. The IETF Request for Comments (RFCs) 2401-2409 defines the IPSec protocols with regard to security protocols, security associations and key management, and authentication [...]...
- RSN (Robust Secure Network)
RSN (Robust Secure Network) is a protocol for establishing secure communications over an 802.11 wireless network. RSN (Robust Secure Network) is part of the 802.11i standard. The RSN Protocol Process The RSN protocol functions as follows: The wireless NIC sends a Probe Request. The wireless access point sends a Probe Response with an RSN Information [...]...
- Identity Management
Identity management is a discipline which encompasses all of the tasks required to create, manage, and delete user identities in a computing environment. Identity Management is often abbreviated IdM. Identity Management Tasks During Account Provisioning Identity management begins with the creation of the user account and the assignment of appropriate attributes to the account. The [...]...
- LDAP Security Issues
RFC 2829 – Authentication Methods for LDAP defines the basic threats to an LDAP directory service: Unauthorized access to data via data-fetching operations, Unauthorized access to reusable client authentication information by monitoring others' access, Unauthorized access to data by monitoring others' access, Unauthorized modification of data, Unauthorized modification of configuration, Unauthorized or excessive use of [...]...