<p>Over the past few years, there has been a significant rise in the use of the Internet, i.e., work from home, banking transactions, resource sharing, online shopping, online classes, and several other online activities. To prevent data snooping and multiple attacks while communicating over public networks, cryptography-based techniques and algorithms are used on multiple devices, especially on edge routers and security devices. Maintaining a balance between performance and protection when using public networks in large organizations remains a challenge. This study aims to address this challenge by designing and implementing a prototype architecture that uses cryptography techniques on cloud-edge device. The proposed design implements the Dynamic Multipoint Virtual Private Network (DMVPN) along with routing protocols over untrusted networks to improve network security from source to destination nodes. For simulation, the Graphical Network Simulator-3 (GNS3) tool is used with the integration of VMware, and network traffic was generated with the help of the Iperf3. The generated network traffic was captured by using Wireshark to evaluate network performance and efficiency. Finally, the comprehensive evaluation of routing protocols, i.e., OSPF, EIGRP, and BGP protocols, across various performance tests like ICMP, TCP, UDP, throughput, delay and latency, jitter, packet-loss, and speed is evaluated on parameters like confidentiality, integrity, and availability. In ICMP, TCP, UDP, delay and latency, EIGRP shows the best values compared to others, while in throughput, all the protocols have average values of 103 KB/sec. All protocols showed jitter during the UDP test, which had no packet loss and 1.05MB/sec bandwidth. This design eliminated packet loss for all protocols in the packet-loss test. Speed tests show that the BGP performs with the highest speed compared to other protocols. This research evaluates and analyzes the proposed architecture to show that it improves cloud-edge security while preserving efficient communication overhead. The proposed architecture utilizes AES-128 encryption. This ensures data confidentiality and SHA-HMAC. It maintains data integrity, along with MD5-based authentication for securing routing protocol communication.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Performance and security analysis of routing protocols in a cryptography-enabled cloud-edge architecture

  • Muhammad Amir Akbar,
  • Ayesha Altaf,
  • Faiza Iqbal,
  • Nagwan Abdel Samee,
  • Manal Abdullah Alohali,
  • Imran Ashraf

摘要

Over the past few years, there has been a significant rise in the use of the Internet, i.e., work from home, banking transactions, resource sharing, online shopping, online classes, and several other online activities. To prevent data snooping and multiple attacks while communicating over public networks, cryptography-based techniques and algorithms are used on multiple devices, especially on edge routers and security devices. Maintaining a balance between performance and protection when using public networks in large organizations remains a challenge. This study aims to address this challenge by designing and implementing a prototype architecture that uses cryptography techniques on cloud-edge device. The proposed design implements the Dynamic Multipoint Virtual Private Network (DMVPN) along with routing protocols over untrusted networks to improve network security from source to destination nodes. For simulation, the Graphical Network Simulator-3 (GNS3) tool is used with the integration of VMware, and network traffic was generated with the help of the Iperf3. The generated network traffic was captured by using Wireshark to evaluate network performance and efficiency. Finally, the comprehensive evaluation of routing protocols, i.e., OSPF, EIGRP, and BGP protocols, across various performance tests like ICMP, TCP, UDP, throughput, delay and latency, jitter, packet-loss, and speed is evaluated on parameters like confidentiality, integrity, and availability. In ICMP, TCP, UDP, delay and latency, EIGRP shows the best values compared to others, while in throughput, all the protocols have average values of 103 KB/sec. All protocols showed jitter during the UDP test, which had no packet loss and 1.05MB/sec bandwidth. This design eliminated packet loss for all protocols in the packet-loss test. Speed tests show that the BGP performs with the highest speed compared to other protocols. This research evaluates and analyzes the proposed architecture to show that it improves cloud-edge security while preserving efficient communication overhead. The proposed architecture utilizes AES-128 encryption. This ensures data confidentiality and SHA-HMAC. It maintains data integrity, along with MD5-based authentication for securing routing protocol communication.