Scribd Logo

Language

Upload

Welcome to Scribd!

Enjoy millions of ebooks, audiobooks, magazines, and more, with a free trial

Only $11.99/month after trial. Cancel anytime.

Securing Communication of Legacy Applications with IPSec: Step-by-Step Guide to Protecting “Data in Transit” without Changes in Your Existing Software
Securing Communication of Legacy Applications with IPSec: Step-by-Step Guide to Protecting “Data in Transit” without Changes in Your Existing Software
Securing Communication of Legacy Applications with IPSec: Step-by-Step Guide to Protecting “Data in Transit” without Changes in Your Existing Software
Ebook42 pages12 minutes

Securing Communication of Legacy Applications with IPSec: Step-by-Step Guide to Protecting “Data in Transit” without Changes in Your Existing Software

By Slava Gomzin

()

Read preview

About this ebook

Booklet for IT professionals, developers and security specialists on how to utilize IPSec protocol in order to protect data transmission between legacy applications which were created before secure communication became common practice. In many cases it is difficult or even impossible to make necessary changes in old software in order to implement commonly accepted secure protocols such as SSL/TLS. IPSec protocol can be utilized as inexpensive but powerful alternative solution which provides adequately high level of protection.

Topics include: what is IPSec and how to use it to secure data transmission, creating and deploying IPSec policy, overview or IPSec authentication types, configuring IPSec Policy with different types of authentication, and more (Article: ~2,180 words).

Table of Contents includes:
Introduction • TCP/IP Security Vulnerabilities • What is IPSec? • Securing Data Transmission with IPSec • Creating and Deploying IPSec Policy • Selecting IPSec Authentication Type • Configuring IPSec Policy with Kerberos Authentication • Diffie-Hellman Groups • Configuring IPSec Policy with X.509 Certificates Authentication • Configuring Certificate Template • Testing • Conclusion • Resources • About the Author

Slava Gomzin, CISSP, PCI ISA, ECSP, Security+ has more than 15 years of professional experience in software development and application security. He is Security Architect at Retalix USA.

LanguageEnglish
PublisherSlava Gomzin
Release dateJul 17, 2012
ISBN9781301593729
Securing Communication of Legacy Applications with IPSec: Step-by-Step Guide to Protecting “Data in Transit” without Changes in Your Existing Software
Read preview
Author

Slava Gomzin

Slava Gomzin is a Security and Payments Technologist at Hewlett-Packard, where he helps create products that are integrated into modern payment processing ecosystems using the latest security and payments technologies. Prior to joining Hewlett-Packard, Slava was a security architect, corporate product security officer, R&D and application security manager, and development team leader at Retalix, a Division of NCR Retail. As PCI ISA, he focused on security and PA-DSS, PCI DSS, and PCI P2PE compliance of POS systems, payment applications, and gateways. Before moving into security, Slava worked in R&D on design and implementation of new products including next-generation POS systems and various interfaces to payment gateways and processors. Slava currently holds CISSP, PCIP, ECSP, and Security+ certifications. He blogs about payment security at www.gomzin.com.

Read more from Slava Gomzin

Related to Securing Communication of Legacy Applications with IPSec

Related ebooks

Related podcast episodes

Related articles

  • Article

    Peripherals

    Jan 14, 2020

    Is there a hub with three USB-C ports yet? Yes, but it comes with a ‘free’ built-in LG UltraFine 4K display. That offers one additional Thunderbolt 3 port, and three USB-C. Smaller hubs are becoming available now: Belkin promises one with two USB-C p

    1 min read

  • Article

    Letter of the Month

    Jan 27, 2017

    I read with much interest your article on email encryption in issues #121 and #122. The step-bystep instructions are very useful for those who never set up email encryption or know about digital certificates. I would like to recommend that in a futur

    2 min read

  • Article

    More On Let’s Encrypt

    Mar 10, 2020

    Let’s Encrypt launched in 2016 and offers both individuals and organisations a way to obtain completely free TLS (historically called SSL) certificates, allowing traffic to be encrypted between a web browser and server. Let’s Encrypt makes use of a c

    1 min read

  • Article

    Step By Step

    Feb 17, 2022

    Step By Step
    2 min read

  • Article

    Typical Certificate-related Errors

    Sep 21, 2021

    Certificates have a start and end date. When the browser connects to a web page or even if an apt-get update connects to a digitally signed update repository, it checks the local machine time against the certificate validity date and if the time and

    1 min read

  • Article

    Secure Your Server

    Nov 12, 2019

    The basic Bitwardenrs server is up and running, but there are key elements missing: One, there’s no security, and two, you can’t access the server outside your local network. To see what’s required, visit the Bitwardenrs wiki (https://github.com/dani

    1 min read

  • Article

    Secure Your Server

    Dec 2, 2019

    The basic Bitwardenrs server is up and running, but there are key elements missing: One, there’s no security, and two, you can’t access the server outside your local network. To see what’s required, visit the Bitwardenrs wiki (https://github.com/ dan

    1 min read

  • Article

    Android 7.1 Internet Woes

    Dec 15, 2020

    Devices running Android 7.1 or earlier, may find the internet getting smaller in 2021. Let’s Encrypt, one of the world’s biggest certificate authorities, with around 30 per cent of all web domains using its certificates, is ending its partnership wit

    1 min read

  • Article

    THIS MONTH News & Views

    Mar 12, 2020

    Q Could you explain what a Certificate of Habitability (certificato di abitabilità) is? We have been advised to check that one is available when looking for a property to buy in Italy. A The certificate of habitability certifies that conditions of sa

    1 min read

  • Article

    Ed Space

    Jun 21, 2018

    Ed Space
    2 min read

  • Article

    Installing Zulip

    Nov 17, 2020

    Installing Zulip
    1 min read

  • Article

    Pull, Configure And Run

    Apr 7, 2020

    Guacamole offers ready-to-run installation packages that are available for Linux distros such as CentOS or Debian. However, the thrust of this article is to illustrate running Guacamole in a Docker container context. Fire up an environment where you

    8 min read

  • Article

    Easy Https With Certbot

    Jan 12, 2021

    Certbot is a tool from the Electronic Frontier Foundation that automates the generating and updating of free SSL certificates from Let’s Encrypt. This enables you to serve content over HTTPS, which provides encryption, but also some guarantees that y

    1 min read

  • Article

    Answers

    Jun 29, 2021

    Answers
    8 min read

  • Article

    Jitsi Meet

    Jan 5, 2021

    JITSI MEET IS A FREE, open-source video-conferencing program that you can connect to via a browser or smartphone app. You can use it by visiting https://meet. jit.si and choosing a name for your virtual meeting (or accepting one of the amusing ones t

    4 min read