IPSec works on two basic packet components—ESP and AH. ESP encrypts the data
and stores them in an encapsulated security payload packet component for data
protection. Though essential, AHs manage the authentication process, not the
security of the data. Semantic nets are part of artificial intelligence and
would not help in data protection. Digital signatures are not used in IPSec and,
thus, will not provide data protection.
What is the ESP protocol?
Encapsulating Security Payload (ESP) is a member of the IPsec protocol suite. In IPsec it provides origin authenticity, integrity and confidentiality protection of packets.
The basic idea of IPsec is to provide security functions,
authentication and encryption, at the IP (Internet Protocol) level.
This requires a higher-level protocol (IKE) to set things up for the
IP-level services (ESP and AH).
Internet Protocol security (IPsec) uses cryptographic security services to protect communications over Internet Protocol (IP) networks. IPsec
supports network-level peer authentication, data-origin authentication,
data integrity, data confidentiality (encryption), and replay
protection.
No comments:
Post a Comment