System of a self-organizing virtual secure communication channel based on stochastic multi-layer encryption and overlay technologies | [Journal of Theoretical and Applied Information Technology • 2022]

Author(s):

1. E.A.BASINYA: National Research Nuclear University MEPhI (Moscow Engineering Physics Institute), Moscow, Russia

2. ZH.B.AKHAYEVA: L.N.Gumilyov Eurasian National University, Department of Information Systems, Astana, Kazakhstan; Higher School of Information Technology and Engineering, Astana International University, Kazakhstan

3. A.B.ZAKIROVA: L.N.Gumilyov Eurasian National University, Department of Information Systems, Astana, Kazakhstan

4. D.ZH. OMARKHANOVA: S.Seifullin Kazakh Agro Technical University, Department of Information Systems, Astana, Kazakhstan

5. G.B.TOLEGENOVA: L.N.Gumilyov Eurasian National University, Department of Information Systems, Astana, Kazakhstan; Higher School of Information Technology and Engineering, Astana International University, Kazakhstan

6. В.K.ABDURAIMOVA: L.N.Gumilyov Eurasian National University, Department of Information Systems, Astana, Kazakhstan

7. L.ALDASHEVA: Astana IT University, Department of Information Systems, Astana, Kazakhstan

8. ZH.A.ZHANAYEVA: L.N.Gumilyov Eurasian National University, Department of Information Systems, Astana, Kazakhstan

Abstract:

The paper considers the problem of ensuring information security of information flows in computer networks operating on the basis of the TCP/IP protocol stack (Transmission Control Protocol/Internet Protocol). one of possible solutions for providing the data transfer protection, proposed in this paper is to use a combination approach to dynamically build encapsulated virtual network tunnels using onion and garlic routing, and additional encryption layers. The algorithm of tunnel self-organization based on the author's modification of the port knocking technology, taking into account metadata about the previous connection (route tracing, duration of interaction, the sequence of port enumeration, protocols and other control information, including the client's computing device) is described. An analysis of the conceptual vulnerabilities of TOR (The Onion Router) and I2P (invisible internet project) overlay networks is made, and possible approaches to their elimination are reviewed. The experiment in identification of unauthorized access to transit traffic on the output nodes of the TOR network is described. Under the experiment “ traps” were used in the form of sending authentication data of own test servers through all active outgoing nodes in an open form , the redirection from top 100 _ foreign sites to other information resources ( including falsification of DNS replies ) was tracked . The duration of the experiment was two years. An analysis of the dynamics of the development of TOR network is further described, and the conclusions about the credibility of these networks are outlined. The results of the developed and software - implemented solution are described, as well as the results of testing. In conclusion, findings and recommendations on the use of the proposed system with various parameters are presented.

Page(s): 4918-4927

DOI: DOI not available

Published: Journal: Journal of Theoretical and Applied Information Technology, Volume: 100, Issue: 16, Year: 2022

Keywords:

I2P , Traffic management , Garlic Traffic Routing , Overlay Networks , Onion Traffic Routing , Traffic Analysers , Encapsulation Of Virtual Tunnels , Multilayer Encryption , Network Attacks , TOR , Virtual Secure Communication Channels , DPI

References:

References are not available for this document.

Citations

Citations are not available for this document.

Citations

Downloads

Views