izpis_h1_title_alt

Primerjava rešitev za varen oddaljen dostop do poslovnih omrežij
HALILOVIČ, MIRAN (Author), Kos, Anton (Mentor) More about this mentor... This link opens in a new window

.pdfPDF - Presentation file, Download (900,35 KB)

Abstract
Diplomska naloga opisuje različne rešitve, ki se uporabljajo za varen dostop do poslovnega omrežja. Najprej so na splošno opisani najpogosteje uporabljeni sistemi VPN (virtualna privatna mreža), ki se uporabljajo v ta namen. Sledi razlaga osnovnih principov simetričnega ter asimetričnega šifriranja in enosmerne zgostitvene funkcije. Vse troje je osnova za uspešno varno povezavo med oddaljenim uporabnikom ali oddaljenim omrežjem in poslovnim omrežjem. Naslednje poglavje opisuje praktično testiranje dveh najpogosteje uporabljenih sistemov VPN, in sicer L2TP/IPsec in OpenVPN. Oba sistema sta bila testirana na dveh različnih mrežnih usmerjevalnikih, kjer eden predstavlja nizkocenovno rešitev za mala podjetja in domačo uporabo, drugi pa rešitev srednjega razreda za malo večja podjetja. Zaradi boljšega razumevanja samega testiranja je bilo najprej potrebno podrobneje opisati uporabljene šifrirne algoritme in zgostitvene funkcije. Pomembno je namreč vedeti, kateri algoritmi so priporočljivi za uporabo, kateri niso in katere se odsvetuje. Testiranje je simuliralo dva scenarija. V prvem se oddaljeni uporabnik s prenosnim računalnikom povezuje v poslovno omrežje, v drugem pa je bila simulirana povezava dveh oddaljenih omrežij. V zadnjem delu so podane praktične izkušnje in spoznanja, ki sem jih pridobil v dolgih letih uporabe in vzdrževanja različnih sistemov VPN. Podal sem tudi svoje izkušnje pri uporabi tako odprtokodnih kot komercialnih zaprtokodnih rešitev. Tako eni kot drugi imajo prednosti in slabosti, univerzalna rešitev pa žal ne obstaja. Z vidika varnosti so odprtokodne rešitve celo v prednosti, še posebej po razkritjih varnostnih spodrsljajev nekaterih priznanih proizvajalcev zaprtokodnih rešitev. Vendar obstajajo tudi razlogi, zaradi katerih se večina podjetij še vedno odloča za zaprtokodne rešitve.

Language:Slovenian
Keywords:sistem VPN, oddaljeno omrežje, L2TP/IPsec, OpenVPN, šifrirni algoritmi, zgostitvena funkcija, odprtokodna rešitev, mrežni usmerjevalnik
Work type:Undergraduate thesis (m5)
Organization:FE - Faculty of Electrical Engineering
Year:2016
Views:594
Downloads:262
Metadata:XML RDF-CHPDL DC-XML DC-RDF
 
Average score:(0 votes)
Your score:Voting is allowed only to logged in users.
:
Share:AddThis
AddThis uses cookies that require your consent. Edit consent...

Secondary language

Language:English
Title:Comparison of Solutions for Secure Remote Access to Corporate Networks
Abstract:
This thesis describes different solutions for secure remote access to a corporate network. At the beginning, there is a general description of the most commonly used VPN systems. It follows with an explanation of basic principles about symmetrical encryption, asymmetrical encryption and one way hashing function. These are also fundamentals for secure remote connection between remote user or remote network and corporate network. Next chapter talks about a practical experiment of two most widely used VPN systems, L2TP/IPsec and OpenVPN. Both VPN systems were tested on two different network routers. One router was a low cost unit intended for home and small office use, while the other one was a router intended for corporate use. For better understanding of the experiment, we first describe the used encryption algorithms and hashing functions. It is important to know which algorithms are recommended for use and which are not. The experiment was simulating two scenarios. The first scenario was simulating a remote user connecting to corporate network. In the second scenario was simulating a connection between two remote networks. In the last part of this thesis, we discuss experiences and discoveries gathered over the years of use and support of various VPN systems. I have also described my experience regarding use of open source and commercial proprietary VPN solutions. They both have their strengths and weaknesses, but no universal solution exists. From security point of view, open source solutions have an advantage, especially after several security blunders of some prominent proprietary solutions manufacturers. Despite that, there are still reasons why most of the companies are still choosing proprietary solutions.

Keywords:VPN system, remote network, L2TP/IPsec, OpenVPN, encryption agorithm, hashing function, open source solution, network router

Similar documents

Similar works from RUL:
Similar works from other Slovenian collections:

Comments

Leave comment

You have to log in to leave a comment.

Comments (0)
0 - 0 / 0
 
There are no comments!

Back