Question

Subject: Network Security

2. Secure Socket Layer protocol (SSL):

(a) Compare the Secure Socket Layer protocol (SSL) to IPsec. Show where would you place both in the Internet protocol stack. Which one is better suited for credit card transactions? [10 marks]

(b) Is a man-in-the-middle attack possible on the Secure Socket Layer protocol (SSL)? [10 marks]

(c) What is the difference between session and connection and why do we need both? [5 marks]

Answer 1

​​​​​​

Sl.No IPSEC Secure Sockets Layer(SSL) IPSec works on layer 3 of OSI model SSL works on layer 7 of OSI model The entire data that is travelled between two end points is secured irrespective of the application. It provides security for the application that uses it. It is a protocol that is used to provide secure web-based communication. 3 SSL uses two sub protocols one for establishing a secure connection and other one for using it. IPSec adds headers to provide security. It is called security association and operates in to modes Transport mode and Tunnel mode. In transport mode header is attached after the IP header. In tunnel mode an extra IP header is added. IPSec provides security at the network layer. IPSec introduces the trouble of changing all applications to have end-to-end security, encryption and integrity checks. It is developed to provide security for transactions like financial transaction, stock trading etc. It provides simplicity in providing security. For credit card transactions SSL security is best suited.

As per HomeworkLib rule, I have given you a part of the question.

Thanking you, keep HomeworkLibing.