PRACTICAL APPROACHES TO ORGANIZING SECURE DATA TRANSFER VIA TLS PROTOCOL USING OPENSSL MEANS
DOI:
https://doi.org/10.28925/2663-4023.2023.22.122133Keywords:
network, encryption, protocol, digital signature, data protectionAbstract
Information protection during message transmission is one of the most important tasks in the modern world. The workstations of a particular organization can be well protected using different software and hardware means, but when information is transferred to an open unprotected space, there is a high probability of data leakage, interception, and substitution. In most cases, the use of insufficiently effective security measures causes the loss of personal data of citizens, data of an enterprise or organization that is a commercial secret, information with limited access or even state secrets of the critical infrastructure sector. In this case, it is considered appropriate to use modern cryptographic methods to organize secure data transmission. Considering the ever-growing statistics of cyberattacks on information and telecommunication networks, after in-depth analysis and development of this issue, the authors of the article highlighted the current directions of protection of information and telecommunication networks and security solutions in information and telecommunication networks. The authors have comprehensively covered and investigated the basic principles of the modern state of data transmission security and the organization of information protection during its transmission using the TLS protocol, which made it possible to determine the directions for solving or modernizing existing information security means. Also, attention is paid to the development of a software implementation of the module for secure data transmission in the information and telecommunications network using the improved TLS protocol by means of OpenSSL, which made it possible to establish connections using digital signature algorithms. The authors are planning a series of scientific and technical solutions for the development and implementation of effective cryptographic methods to ensure the security of information and telecommunications networks
Downloads
References
Menezes, A., Paul, C., & Scott, A. (2018). Vanstone. Handbook of applied cryptography. CRC press.
Mollin, R. (2006). An introduction to cryptography. Chapman and Hall/CRC.
Aumasson, J.-P. (2017) Serious cryptography: a practical introduction to modern encryption. No Starch Press.
Aumasson, J.-P. (2021). Crypto Dictionary: 500 Tasty Tidbits for the Curious Cryptographer. No Starch Press.
Mihailescu, M., & Nita, S. (2021). Pro Cryptography and Cryptanalysis with C++ 20: Creating and Programming Advanced Algorithms. Apress.
Sklavos, N., et al. (2017). Wireless security and cryptography: specifications and implementations. CRC press.
Sen, J., et al. (2013). Theory and practice of cryptography and network security protocols and technologies. BoD–Books on Demand.
Devi, T. (2013). Importance of cryptography in network security. 2013 International conference on communication systems and network technologies.
Sarkar, A., Swagata R., & Mohuya C. (2021). Role of cryptography in network security. The Essence of Network Security: An End-to-End Panorama, 103–143.
Forouzan, B., & Mukhopadhyay D. (2015). Cryptography and network security, 12.
Wang, J., & Kissel, Z. (2015). Introduction to network security: theory and practice. John Wiley & Sons.
Viega, J., Messier M., & Chandra, P. (2002). Network security with OpenSSL: cryptography for secure communications. O’Reilly Media, Inc.
Acıiçmez, O., & Schindler, W. (2008). A vulnerability in RSA implementations due to instruction cache analysis and its demonstration on OpenSSL. The Cryptographers’ Track at the RSA Conference, 256–273.
Käsper, E. (2012). Fast elliptic curve cryptography in OpenSSL. Financial Cryptography and Data Security, 27–39.
Ilyenko, A., & Ilyenko, S. (2022). Program Module of Cryptographic Protection Critically Important Information of Civil Aviation Channels. In International Conference on Computer Science, Engineering and Education Applications, 235–247.
Kazmirchuk, S., Ilyenko, A., & Ilyenko, S. (2019) Digital signature authentication scheme with message recovery based on the use of elliptic curves. In International Conference on Computer Science, Engineering and Education Applications. 279–288.
Kazmirchuk, S., Ilyenko, A., & Ilyenko, S. (2020). The Improvement of Digital Signature Algorithm Based on Elliptic Curve Cryptography. In International Conference on Computer Science, Engineering and Education Applications, 327–337.
Published
How to Cite
Issue
Section
License
Copyright (c) 2023 Анна Ільєнко, Сергій Ільєнко, Олена Прокопенко, Ірина Кравчук
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
