VPN security: Hiding in plain sight, using network encryption
Jeff Young, Senior Analyst, Burton Group
07.05.2007
Rating: -3.20- (out of 5)
|
As an analyst, I've received an increasing number of queries from network architects about network encryption, encrypted transport or virtual private network (VPN) security. Maybe that's because of security breaches like the one experienced by TJX, the parent company of TJ Maxx, Marshalls and HomeGoods stores. Millions of credit cards were compromised when a hacker exploited Wi-Fi weaknesses at a Marshalls clothing store near St. Paul, Minnesota.
TJX isn't alone. Some very high-profile breaches of personal information -- including one involving the names of 80% of current active-duty military inside the U.S. government -- have prompted an executive mandate that encryption be used whenever personally identifiable information is in transit or at rest.
I often speak with network engineers on the topic of encryption of data in transit. Here, the first order of business is to describe the various types of encrypted transport VPNs and to suggest that they be considered in order of complexity. The two technologies that are most often used to encrypt information in transit are Secure Sockets Layer (SSL) and IPsec.
Four types of network encryption
To continue reading for free, register below or login
To read more you must become a member of SearchNetworking.com
>
In the case of a network-to-network VPN, we're talking about encryption from one network device to the next. Because of what we expect today's network equipment to do, some other gotchas might come up in the discussion:
Whatever the motivation, the time is right to explore the technology. Encryption technology is less expensive and more available (the technology is embedded in firewalls, routers and WAN accelerators) than it has ever been. But for most network engineers and architects, the technology requires a different way of thinking: Choose among technologies by considering them in order of complexity; try to minimize the burden on the network and on network users; and so on. By keeping to a few basic principles, you can ensure that encryption will become a very useful -- even vital -- tool for securing your network.
About the author:
Jeff Young is a senior analyst at Burton Group; his emphasis is on network architecture, Internet networks and backbones, and telecommunication service providers. He has 20 years of experience working in IT and the telecommunications industry. Young is a frequent speaker at industry conferences and panels.
|
|
|
|
|
|
