The design and implementation of secure socket SCTP

  • Authors:
  • Stefan Lindskog;Anna Brunstrom

  • Affiliations:
  • Centre for Quantifiable Quality of Service in Communication Systems, Norwegian University of Science and Technology, Trondheim, Norway;Department of Computer Science, Karlstad University, Sweden

  • Venue:
  • Transactions on Computational Science VI
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper describes the design and implementation of secure socket SCTP (S2SCTP). S2SCTP is a new multi-layer, end-to-end security solution for SCTP. It uses the AUTH protocol extension of SCTP for integrity protection of both control and user messages; TLS is the proposed solution for authentication and key agreement; Data confidentiality is provided through encryption and decryption at the socket library layer. S2SCTP is designed to offer as much security differentiation support as possible using standardized solutions and mechanisms. In the paper, S2SCTP is also compared to SCTP over IPsec and TLS over SCTP in terms of packet protection, security differentiation, and message complexity. The following main conclusions can be draw from the comparison. S2SCTP compares favorably in terms of offered security differentiation and message overhead. Confidentiality protection of SCTP control information is, however, only offered by SCTP over IPsec.