Protection of LAN-wide, P2P interactions: a holistic approach. (4th August 2009)

• Record Type: Journal Article
• Authors: Zuquete, Andre
• Is Part Of: International journal of communication networks and distributed systems. Volume 3:Number 4(2009)
• Page Start: 408
• Page End: 426
• Publication Date: 2009-08-04
• Subjects: holistic LAN security -- 8021X framework -- SLAN architecture -- secure communication networks -- P2P security associations -- network security -- local area networks -- peer-to-peer -- secure LANs -- host identification -- resource allocation -- message authentication; Computer networks -- Periodicals; Telecommunication systems -- Periodicals; Electronic data processing -- Distributed processing -- Periodicals; 004.6
• Languages: English
• ISSNs: 1754-3916

Abstract

This article advocates the need of a holistic approach to protect LAN interactions and presents a solution for implementing it based on secure LAN (SLAN), a novel security architecture. SLAN uses the 802.1X access control mechanisms and is supported by a key distribution centre (KDC) built upon an 802.1X authentication server. The KDC is used, together with a new host identification policy and modified DHCP servers, to provide proper resource allocation and message authentication in DHCP transactions. The KDC is used to authenticate ARP transactions and to distribute session keys to pairs of LAN hosts, allowing them to set up arbitrary, LAN-wide peer-to-peer security associations using such session keys. We show how PPPoE and IPSec security associations may be instantiated and present a prototype implementation for IPSec.