Security Verification of a Virtual Private Network over MPLS
Cédric Llorens, Ahmed Serhrouchni · 2007
We present in this paper how to assess a VPN (Virtual Private Network) security implemented over the Multi Protocol Label Switching (MPLS) protocol. This assessment is based on the definition of a MPLS/VPN security policy and on a reverse-engineering process performed on the network routers configurations. This paper details the algorithms as well as their asymptotic time complexity required to assess this security policy. Moreover, this paper also suggests an approach to rank a VPN perimeter. These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.