Comparing TSL/SSL vs. IPSec over VPN

Paper Summary:

The intent of this paper is to concentrate on comparing and contrasting SSL versus IPSec from both a market factors-based and technology-based comparisons. The Open Systems Interconnect (OSI) Model is a valuable construct for analyzing each of these specific security protocols in the context of network connectivity and systems integration. A market-based analysis of how each of these protocols precedes the technical analysis to specifically show how the protocols are evolving based on customers' needs, with SSL-based VPNs being seen by many organizations as being more cost-effective and easier to deploy that the more complex, yet more secure, IPSec-based VPNs. The core view of this paper is that all types of remote connectivity is critical for ensuring enterprise productivity.

Outline:
Executive Summary
Using the OSI Model as a Framework for Comparison
Using the TCP/IP Model as a Frame of Reference
Defining Virtual Private Networks and their role in security
VPN Tunneling: Implications for Security
Options for Creating Secured Virtual Private Networks
Defining IPSec-based VPNs
Defining SSL-based VPNs
Technical Comparative Analysis of IPSEC vs. SSL-based VPN
Market Comparative Analysis of IPSec vs. SSL-based VPN
Evaluating the Cost of IPSec versus SSL VPNs
Summary

From the Paper:

"The method that VPNs use for communicating between both systems and networks is a method calling tunneling. The foundation of this method is to use an internetwork infrastructure to transfer data from one network to another. The data being transferred is organized into frames or packets, and relies on a specific preamble or Transit Internetwork Header. Protocols relying on tunneling complete an entire series of steps to create data packets, encode them for security, and then attach preamble and postamble headers and footers to the message for use by the receiving system or network to first accept the packets as secure and authentic, and second, transmit them to the intended destination. What the tunneling protocol does in addition to the specific security protocol selected by the designer of the network is to first encapsulate the frame into a record header. The additional header provides routing information so that the encapsulated payload can traverse the intermediate internetwork. The function of the Encapsulating Security Payload (ESP) protocol is to primarily provide high levels of packet flow confidentiality, and limited traffic flow confidentiality (Kent 6-7)
The encapsulated packets are then routed between tunnel endpoints over the internetwork. The logical path through which the encapsulated packets travel through the internetwork's defined tunnels. Once the encapsulated frames reach their destination on the internetwork, the frame is unencapsulated and forwarded to its final destination. Tunneling includes this entire process (encapsulation, transmission, and unencapsulation of packets) and is graphically illustrated defined in Figure 6."

Sample of Sources Used:

• AMR Research (2005)- SOX Spending for 2006 to Exceed $6B. John Hagerty and Fenella Sirkisoon. Tuesday November 29, 2005. Accessed from the Internet on July 1, 2006: http://www.amrresearch.com/Content/View.asp?pmillid=18967
• Chou, W (2002). "Inside SSL: Accelerating Secure Transactions." IT Professional. Sep/Oct. 2002: 37- 41.
• Ciampa, Mark (2005). Security+ Guide to Network Security Fundamentals. 2nd Edition.Massachusetts: Thomson Course Technology, 2005
• Cisco Tutorial (2007). Basics of the OSI Model and associated documents. Accessed from the Internet on July 29, 2007 from location: http://www.cisco.com/univercd/cc/td/doc/cisintwk/ito_doc/introint.htm
• Cisco Systems. (2007). White Paper on Security. Retrieved July 31, 2007 from location:http://www.cisco.com/en/US/docs/security/pix/pix62/configuration/guide/config.html

More papers on Comparing TSL/SSL vs. IPSec over VPN:

• Comparison Essay # 123313 : "'One Flew Over The Cuckoo's Nest' & 'On The Road'"
• Term Paper # 122064 : "Comparative Criminal Justice vs. International Criminal Justice"
• Comparison Essay # 124325 : "Teams Vs. Groups"

APA Citation:

MLA Citation: