Allowing IP networks to be securely renumbered and shared

Leroy, Damien
(2011)

Files

phd-thesis-final.pdf
  • Open Access
  • Adobe PDF
  • 1.99 MB

Details

Authors
  • Leroy, DamienUCLouvain
    author
Supervisors
Bonaventure, Olivier
Abstract
(en) At the end of 2000 the estimated population of Internet users was about 360 million. Mid-2010 it reached 1.97 billion. While the Internet continues to spread, its usage is also more and more present in our everyday's life. In developed countries, people often have access to the Internet at work, at home, and increasingly on mobile devices through 3G or WiFi. Each of these devices must be assigned an IP address to communicate with others on the Internet. The currently used address space, IPv4, was designed in the 1970s. It has a theoretical capacity of only 3.7 billion addresses whose many are lost due to suboptimal allocation. The exhaustion of the IPv4 addresses is now a matter of months. To address this issue, a new network-layer protocol, IPv6, has been designed and implemented. A key operation to allow IPv6 to scale is to be able to easily change the IP addresses of all devices in a campus or enterprise network. This operation is called renumbering. As automated tools are missing, renumbering a network is often done manually and is thus lengthy and error-prone. The first part of this thesis focuses on secure renumbering and automated tools to help the process. Besides, more and more mobile phones and tablets are equipped with both 3G and WiFi interfaces. These devices as well as laptops require an Internet connection for a large part of their popular applications. Unfortunately, connecting all these devices to the Internet is still painful. On the one hand, although 3G has been designed for that purpose, it is still expensive and slow. On the other hand, WiFi is usually much faster than 3G and much easier to deploy, mostly indoor. Users have typically access to WiFi at home and at work. Between these locations, connecting to a WiFi network is often difficult and risky. In the second part of this thesis, we present Secure WIfi SHaring (SWISH), a protocol that enables to secure WiFi sharing and offers security for both the visited network and the visitor. SWISH is compatible within existing standards and has been deployed in actual networks.
Affiliations

Citations

Leroy, D. (2011). Allowing IP networks to be securely renumbered and shared. https://hdl.handle.net/2078.5/149415