A new protocol for security and QoS in IP networks

Authors:
Mahmoud Mostafa;Anas Abou El Kalam;Christian Fraboul
Affiliations:
Universite de Toulouse, INPT-ENSEEIHT, IRIT-CNRS, 2 rue Charles Camichel, 31070 Toulouse, France.;Universite de Toulouse, INPT-ENSEEIHT, IRIT-CNRS, 2 rue Charles Camichel, 31070 Toulouse, France.;Universite de Toulouse, INPT-ENSEEIHT, IRIT-CNRS, 2 rue Charles Camichel, 31070 Toulouse, France
Venue:
International Journal of Information and Computer Security
Year:
2009

Citing 3
Cited 0

Message authentication with one-way hash functions

IEEE INFOCOM '92 Proceedings of the eleventh annual joint conference of the IEEE computer and communications societies on One world through communications (Vol. 3)
IPSec: The New Security Standard for the Internet, Intranets, and Virtual Private Networks

IPSec: The New Security Standard for the Internet, Intranets, and Virtual Private Networks
Algorithms for routing lookups and packet classification

Algorithms for routing lookups and packet classification

Quantified Score

Hi-index	0.00

Visualization

Abstract

To effectively manage network resources and to serve different traffic needs, several studies have been done in the Quality of Service (QoS) area. Basically, 'Multi-Field' (MF) packet classifiers classify a packet by looking for multiple fields of the IP-TCP headers, recognise which flow the packet belongs to, and according to this information, provide service differentiation in IP networks. However, for security purposes, existing security protocols (such as the IPSec ESP) hide much of this information in their encrypted payloads, preventing network control devices such as routers and switches from utilising this information in performing classification appropriately. The ESPQ protocol deals with this problem but it has some security weaknesses. In this paper, we present the ESPQ vulnerabilities and we propose QoS-friendly Encapsulated Security Payload (Q-ESP) as a security protocol that provides both security and QoS support.