Protecting Integrity and Confidentiality of Network Traffic with Media Access Control Security (MACsec)

Simple item page
dc.contributor.authorAbdin, Zain
dc.contributor.supervisorGulliver, Aaron
dc.date.accessioned2021-04-15T19:32:05Z
dc.date.available2021-04-15T19:32:05Z
dc.date.copyright2021en_US
dc.date.issued2021-04-15
dc.degree.departmentDepartment of Electrical and Computer Engineeringen_US
dc.degree.levelMaster of Engineering M.Eng.en_US
dc.description.abstractNetworks have increasingly become subject to sophisticated attacks to either interrupt network services in the form of Denial of Service (DoS) attacks or to steal information in the form of Man-in-the-Middle (MITM) attacks. According to the IBM X-Force Threat Intelligence 2018 index, 35% of exploitation activities involved MITM attacks [4]. To prevent networks from attacks such as MITM and to protect data integrity and confidentiality, a security solution is required to provide seamless layer 2 encryption in Local Area Networks (LANs) and Wide Area Networks (WANs). Media Access Control Security (MACsec) secures an Ethernet link for traffic including Dynamic Host Configuration Protocol (DHCP), Address Resolution Protocol (ARP), and other protocols that are not typically secured by other security solutions such as Internet Protocol Security (IPsec) which operates at layer 3 or Secure Socket Layer (SSL) which protects layer 7 of the Open System Interconnection (OSI) model. In this work, MACsec is implemented to secure LANs and WANs. Network performance analysis is performed to evaluate the impact of MACsec on network performance. MACsec is also used to protect networks against MITM attacks. Results are presented which show that MACsec successfully protects networks from MITM attacks and provides end-to-end encryption to protect network traffic.en_US
dc.description.scholarlevelGraduateen_US
dc.identifier.urihttp://hdl.handle.net/1828/12851
dc.language.isoenen_US
dc.rightsAvailable to the World Wide Weben_US
dc.subjectMACsecen_US
dc.subjectIntegrity and confidentiality of network trafficen_US
dc.subjectProtecting network trafficen_US
dc.subjectLayer 2 encryptionen_US
dc.subjectLayer 2 securityen_US
dc.subjectSecuring Ethernet linksen_US
dc.subjectDenial of service and man-in-the-middle attacken_US
dc.subjectMAC spoofingen_US
dc.subjectNetwork performanceen_US
dc.subjectLocal Area Networksen_US
dc.subjectWide Area Networksen_US
dc.subjectVLAN tagen_US
dc.subjectData integrity and authenticityen_US
dc.titleProtecting Integrity and Confidentiality of Network Traffic with Media Access Control Security (MACsec)en_US
dc.typeprojecten_US

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
Abdin_Zain_MEng_2021.pdf
Size:
3.91 MB
Format:
Adobe Portable Document Format
Description:
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
2 KB
Format:
Item-specific license agreed upon to submission
Description:
Download

Collections

Graduate Projects (Electrical and Computer Engineering)
 
University of Victoria Libraries

We acknowledge and respect the Lək̓ʷəŋən (Songhees and Esquimalt) Peoples on whose territory the university stands, and the Lək̓ʷəŋən and W̱SÁNEĆ Peoples whose historical relationships with the land continue to this day.