Karshi branch of tashkent university of information technologies named after mukhammad al-khorezmi
Advantages and disadvantages of Security protocols
Download 1.05 Mb. Pdf ko'rish
|
MAIN DIPLOMA WORK (2)....
|
2.2. Advantages and disadvantages of Security protocols
PROS AND CONS OF SSL. The SSL is very useful in protecting websites from unauthorized access also they are capable of encrypting data to avoid data manipulation and violation. These benefits of SSL made them very popular and has easily replaced the old HTTP version. [8] 1. Data Protection SSL [Secured Socket Layer] supplies protection for our sensitive information which is transferred and exchanged online. They protect our vital information like ID, passwords, credit card details, debit cards, etc. SSL helps in the encryption of data using cryptography which is very challenging for hackers and spammers to decrypt and hence our valuable data are secured. SSL converts the data into some unreadable code & format which can be accessed and used by authorized sources. The SSL works as a shield from unknown and dangerous sources which can harm and tamper with our vital information. This is considered the major benefit and advantage of SSL. Due to their several advantages, SSL has been extensively used for the last few years. 2. Secure Website Using SSL makes a website more secure when compared to the HTTP version of a website. Modern browser denotes client whether a website is using an SSL certificate or not. A green color padlock sign or a locked sign appears next to the URL which indicates that the website is using SSL and it is also redirecting to the HTTPS version of a website which is considered to be more secure and protected. 57 Using this secure website user feels more comfortable surfing, accessing, and performing online transaction as they know that their data is encrypted and secured from hackers and crackers. Last few years it has been observed that nearly every website is shifting to SSL because of its silent features and the amount of awareness that has spread across the globe. These days SSL is a compulsory matrix for website owners, designers, and developers. 3. Reduce the Risk of Phishing Attacks Hackers and Crackers develop such websites which ask users for their private details and data like name, address, credit card details, bank details, etc. After receiving and tricking users to enter information they misuse these details for their own benefit. These website links are forwarded and spread using email marketing software and affiliate marketing groups which allows heavy commission for their affiliate sales. Therefore, it is highly advised that without prior investigation never ever disclose your private details online to unknown sources and websites. Using SSL on your website also indicates that you’re a valid human, company, or group that intends to secure clients’ data and sensitive information, therefore, have installed an SSL certificate on their domain. 4. Secure Customer Payments The SSL is used to encrypt the data and personal information on both the end browser as well as on the server. PCI (Payment Cards Industry) requires at least 128-bit encryption on any payment data being transmitted from one location to another. And you may also know that this data that has been encrypted by SSL is secured and cannot be decrypted or read by any third parties. 58 When there is any transaction occuring on the HTTPS website rest sure that the transaction will be encrypted and the details will not be accessible to any other sources except the authenticated ones. [8] Therefore it is said that websites that use SSL are considered to be more secure and protected for online transactions. 5. Easy to Install These SSL certificates are quite easy and simple to install on CPanel. Nowadays the majority of the hosting providers installs SSL certificate prior as they are aware of the advantages and benefits of SSL certificate for clients and users. To install an SSL certificate no need for professional guidance is required as anybody without prior technical knowledge can do the task quite easily. 6. SEO Ranking The search engine giant Google has announced that they have updated their algorithm which states that the websites which are using SSL and redirecting their websites to HTTPS version will definitely get an upper hand on the websites which are still not using SSL. The effect of the Google algorithm can be obviously seen in the fluctuations in the SERP [Search Engine Ranking Pages] ranking. The majority of the E-commerce and banking website where online transactions are performed have shifted their websites to HTTPS versions which clearly means they have installed an SSL certificate to secure their website from unauthorized access and vulnerabilities. 7. SSL Protects from Google Warning The Google search engine is constantly updating its algorithms and making the internet a better place to surf and purchase goods. Many latest and modern browsers are indicating clients as unsecured websites ahead of warning if an SSL certificate is not installed. 59 Therefore, SSL certificates must be installed to avoid such warnings and boost the trustworthy ness and brand of clients. 8. PCI/DSS Requirements The websites which accept online payments or online transactions are performed such as websites’ SSL certificates made mandatory also the website must be PCI compliant and these websites must follow the rules and regulations mentioned by this authority. Limitations and Disadvantages of SSL The SSL certificates are very important for the security of websites still they have some drawbacks and disadvantages of SSL which we are going to discuss below just have a look. Cost The SSL certificates are costly and the cost of the SSL entirely depends upon the nature of security you need on your websites. If you want to buy multi-domain certificates which cover domain and sub-domains obviously the cost of such SSL is much more than the single-domain SSL. If you are running an e-commerce company or a banking website where online transactions are performed it is highly suggested to buy an SSL from authorized sources Therefore, the cost of SSL is considered the major limitation and disadvantage of SSL. Performance Handshaking The SSL makes websites slow. The two ends of the encryption server and browser go for an elaborate handshaking process for establishing a good and secure connection. Once the connection is established SSL encrypts and decrypts the data and information before they are made available for further processing. This process of handshaking is done backstage which is not visible to clients and results in slow website performance. 60 Redirects from HTTP to HTTPS There are multiple HTTP versions of websites for example 1] http://www.chtips.com, 2] https://www.chtips.com, 3] http://chtips.com 4] https://chtips.com according to us all these URLs are the same however search engines treat all these as different URLs, therefore, websites owners needs to redirect these URLs to their preferred URL else they all will get indexed and result in duplicate content and low search engine rankings. Renew SSL The SSL has to be renewed and updated periodically, especially each year. If not updated the SSL stop validating and protecting your website. This will seriously drop the revenue as SSL is made mandatory for those websites which deal in e-commerce and online transactions. It is not suggested as clients may leave your website when an insecure warning indicates on your website also you may lose the branding. Caching Issues The article which is encrypted is surely going to face issues in caching, the proxy caching system is not capable of handling this sort of encryption. Therefore to deal with this encryption additional servers are placed just after the encryption reaches the caching server, and hence the information is properly encrypted and presented to the destination. [8] Allows Insecure Encryption SSL/TLs are capable of the browser and server to decide which form of encryption method they will allow for connection. These SSL / TLS are very secure and powerful. This SSL connection sometimes allows low-par servers or outdated servers to establish a connection even select an encryption method 61 which is very harmful for the privacy and security of websites as their encryptions are not of quality standard which can prevent modern hackers and spammers. This process is done backstage so the user on the website will not know that he is using an unsafe website that can harm his private information. Pros and Cons of IPSec 2. Advantages of IPSec: Nowadays, let’s move on and discuss the typical advantages that our Support Engineers see for IPSec. Network layer security IPSec operates at layer 3, the network layer. As a result, it has no impact on higher network layer. In other words, one of the biggest advantage of IPSec is its transparency to apps. The end client need not have to bother about the IPSec or its configuration. In addition, as it works at the network layer, IPSec allows to monitor all the traffic that passes over the network. That’s why, our Support Engineers suggest IPsec-based VPNs for consumers who need protection for all the traffic flowing in and out of the network. Confidentiality Likewise, the second advantage of IPSec is that it offers confidentiality. During any data exchange, IPSec uses public keys that helps to safely transfer confidential data. As a result, securing the keys ensure safe data transfer. In Addition, these keys helps to verify that the information has come from the correct host. Therefore, it becomes rather impossible to forge the data packets. That’s why, our Server Administrators always ensure security while sending the public keys. Zero dependability on Application As we already saw, IPSec security is implemented at the network layer. Thus, it do not depend on the applications used. 62 IPSec solely requires modification to the operating system. As a result, IPsec-based VPNs do not need to worry about the type of application too. That’s not the case with SSL based VPNs, where it requires modification to individual applications. This is yet another reason for the popularity of IPSec. [9] Disadvantages of IPsec Until now, we saw the top benefits of IPSec. However, IPSec is not free from demerits too. From our experience in managing VPN servers, our Support Engineers often stumble upon IPSec disadvantages too. Let’s take a look at them. Wide access range One of the greatest disadvantage of IPSec is its wide access range. Giving access to a single device in IPSec-based network, can give access privileges for other devices too. For example, imagine that you are connecting to a corporate network from your IPSec based home network. Here, if any of the computer in your home network has malware in it, it can easily spread to the computers in the corporate network. Unless there are special security mechanisms, vulnerabilities that exist at the IP layer will pass on to the corporate network across the IPSec tunnel. 2. Compatibility issues Secondly, IPSec brings in couple of compatibility issues with software too. This occurs when software developers do not adhere to the standards of IPSec. Likewise, when you are already on IPSec based VPN, connecting to another network will be rather impossible due to restrictions in firewalls. Again, IPsec does not suppy support for multi-protocol and IP multicast traffic. 3. CPU Overhead However, IPSec is well known for the high CPU usage. It requires quite a bit of processing power to encrypt and decrypt all the information that passes through the server. When the data packet size is small, the performance of the network diminishes 63 due to large overhead used by IPsec. That’s why, our Support Engineers stay away from IPSec based VPN’s in scenarios where there is only small size data transfer. 4. Broken Algorithms Again, security of certain algorithms used in IPSec is a concern. If, someone uses these broken algorithms, server will be at a greater risk of hack. Fortunately, there are readily available newer and complex algorithms that overcome the known vulnerabilities. To avoid the hacking risk, when using IPSec, our Support Engineers always ensure the use of latest algorithms. [9] 3. Pros of TLS: 1. Data safety: Due to the encryption and decryption facilities supplied by the TLS, data shared through the internet is safe. You do not have to worry about your data getting eavesdropped on or misused. 2. Hides complexity: Generating private and public keys along with encryption and decryption is a very long task. There is a load of complex computation to be done. Since the TLS layer lies beneath the application layer, the complexity is hidden and clients do not even know the computation behind it. 3. Interoperability of TLS: TLS works nearly in all web browsers, operating systems, and web servers including different applications. This helps to be assured that their data are safe and they will not be misused in any way. Cons of TLS 1. Limited support for the new version: The new TLS version 1.3 is supported by very few platforms. Due to its complexity suppliers are finding it difficult to implement. 2. Vulnerable to attacks: 64 There are previous cases of attack in TLS 1.0 as mainly man-in–middle attacks (MiM). This increases the concern for information integrity and authentication. 3. More latency compared to other security protocols: TLS has higher latency compared to other types of security protocols. This is caused by many things due to the nature of TLS. [15] 4. Advantages of SSH Protocol ▪ Can be used on various platforms, including major ones, like Windows, Mac, Linux ▪ Encrypts your personal data and can protect you from cybercrimes, like man-in- the-middle attacks ▪ Allows you to access remote devices ▪ Disadvantages of SSH protocol ▪ Works on an application level. You have to configure each application to use the SSH tunnel ▪ Doesn’t encrypt all of your traffic, but solely the applications you’ve configured ▪ Can be challenging to set up for inexperienced users Download 1.05 Mb. Do'stlaringiz bilan baham: 
|