PAGE CONTENTS
Objectives
The main objective of this project is the procurement, integration, configuration, test and delivery of testbed demonstrating IP security over satellite. One purpose of this testbed is the verification of theoretical results found in the previous ‘IP Security over Satellite’ study. Results such as the appropriate architecture design for using IPsec to secure satellite communication.
Furthermore, it should demonstrate, in an illustrative manner, the security functionality provided by IPsec. In order to demonstrate this to a broad audience, the integration of representative demonstration scenarios, as well as the selection of impressive security attack scenarios is a must.
As the demonstrator is intended to be used by different parties, such as other research projects, equipment manufacturer and of course ESTEC itself, a modular design is of significant importance. This modularity allows for easy replacement of functional components, such as DVB-S equipment, IPsec gateways or performance enhancing equipment, as well as for a later enhancement of the demonstrator functionality, e.g. integration of IPv6 or secure IP Multicast support.
Lastly, one goal of this project is the use of open source software to the maximum possible extent.
Challenges
One of the key issues of this project is certainly the timely and functionally correct integration, configuration and delivery of the IP Security Demonstrator. As the demonstrator has a very complex functionality including e.g. IP Multicast, IPsec or proprietary protocol enhancements, a carefully architecture design and integration of different components is required in order to avoid negative interworking issues.
Another key issue is the thorough documentation of the demonstrator integration and configuration and of the lessons learned in order to allow later users of the demonstrator an easy operation of the testbed.
Plan
- Detailed specification of the testbed architecture and selection and specification of appropriate demonstration scenarios.
- Procurement, integration, configuration and testing of the components of the demonstrator.
- Integration and configuration of the security functionality, as well as verification of the security functionality using attack tools.
- Execution of performance tests for different demonstrator settings.
- Integration and configuration of the selected demonstration scenarios.
- Verification of the demonstrator functionality and the measurement results over real satellite and Internet links.
- Provision of an Implementation Handbook and training of ESTEC personnel.
Current Status
Nearly all the tasks to address within the project objectives are completed:
- The demonstrator has been procured, integrated, configured, tested and delivered to ESTEC.
- A huge variety of applications has been installed.
- Security functionality has been integrated and appropriate security attacks have been performed.
- Performance enhancement has been integrated and appropriate performance measurements have been performed.
- A verification of the results obtained by using a network simulator has been done using real satellite and Internet links.
- The Final Presentation has been given at ESTEC.
- A draft version of the Executive Summary has been provided.
- Implementation Handbook and Final Report are nearly completed.
The remaining tasks are:
- Finalisation of Implementation Handbook and Final Report
- Provision of a training for ESTEC on the IP Security Demonstrator
Companies
