VPN & SECURITY

A virtual private network (VPN) extends a private network across a public network, and enables users to send and receive data across shared or public networks as if their computing devices were directly connected to the private network. Applications running on a computing device, e.g., a laptop, desktop, smartphone, across a VPN may therefore benefit from the functionality, security, and management of the private network. Encryption is a common, though not an inherent, part of a VPN connection.[1]

Image result for vpn"

VPN technology was developed to allow remote users and branch offices to access corporate applications and resources. To ensure security, the private network connection is established using an encrypted layered tunneling protocol, and VPN users use authentication methods, including passwords or certificates, to gain access to the VPN. In other applications, Internet users may secure their connections with a VPN to circumvent geo-restrictions and censorship or to connect to proxy servers to protect personal identity and location to stay anonymous on the InternetVPN apps are often used by individuals who want to protect data transmissions on their mobile devices or visit web sites that are geographically restricted. Secure access to an isolated network or website through a mobile VPN should not be confused with private browsing, however. Private browsing does not involve encryption; it is simply an optional browser setting that prevents identifiable user data, such as cookies, from being collected and forwarded to a third-party server. Some websites, however, block access to known VPN technology to prevent the circumvention of their geo-restrictions, and many VPN providers have been developing strategies to get around these roadblocks.

Image result for nord vpn"

A VPN is created by establishing a virtual point-to-point connection through the use of dedicated circuits or with tunneling protocols over existing networks. A VPN available from the public Internet can provide some of the benefits of a wide area network (WAN). From a user perspective, the resources available within the private network can be accessed remotely.

Early data networks allowed VPN-style connections to remote sites through dial-up modem or through leased line connections utilizing X.25, Frame Relay and Asynchronous Transfer Mode (ATM) virtual circuits provided through networks owned and operated by telecommunication carriers. These networks are not considered true VPNs because they passively secure the data being transmitted by the creation of logical data streams.[3]VPNs are used to provide remote corporate employees, gig economy freelance workers and business travelers with access to software applications hosted on proprietary networks. To gain access to a restricted resource through a VPN, the user must be authorized to use the VPN app and provide one or more authentication factors, such as a password, security token or biometric data. They have been replaced by VPNs based on IP and IP/Multi-protocol Label Switching (MPLS) Networks, due to significant cost-reductions and increased bandwidth[4] provided by new technologies such as digital subscriber line (DSL)[5] and fiber-optic networks.

Image result for proton vpn"

VPNs cannot make online connections completely anonymous, but they can usually increase privacy and security. To prevent disclosure of private information, VPNs typically allow only authenticated remote access using tunneling protocols and encryption techniques.

The VPN security model provides:

Image result for spy"

The life cycle phases of an IPSec Tunnel in a virtual private network.

Secure VPN protocols include the following:

Image result for hacking"

Virtual LAN (VLAN) is a Layer 2 technique that allow for the coexistence of multiple local area network (LAN) broadcast domains interconnected via trunks using the IEEE 802.1Q trunking protocol. Other trunking protocols have been used but have become obsolete, including Inter-Switch Link (ISL), IEEE 802.10 (originally a security protocol but a subset was introduced for trunking), and ATM LAN Emulation (LANE).Virtual private LAN service (VPLS)

Developed by Institute of Electrical and Electronics Engineers, Virtual LANs (VLANs) allow multiple tagged LANs to share common trunking. VLANs frequently comprise only customer-owned facilities. Whereas VPLS as described in the above section (OSI Layer 1 services) supports emulation of both point-to-point and point-to-multipoint topologies, the method discussed here extends Layer 2 technologies such as 802.1d and 802.1q LAN trunking to run over transports such as Metro Ethernet.

As used in this context, a VPLS is a Layer 2 PPVPN, emulating the full functionality of a traditional LAN. From a user standpoint, a VPLS makes it possible to interconnect several LAN segments over a packet-switched, or optical, provider core, a core transparent to the user, making the remote LAN segments behave as one single LAN.[17]

Image result for hacking"

In a VPLS, the provider network emulates a learning bridge, which optionally may include VLAN service.Pseudo wire (PW)

PW is similar to VPLS, but it can provide different L2 protocols at both ends. Typically, its interface is a WAN protocol such as Asynchronous Transfer Mode or Frame Relay. In contrast, when aiming to provide the appearance of a LAN contiguous between two or more locations, the Virtual Private LAN service or IPLS would be appropriate.Ethernet over IP tunneling

EtherIP (RFC 3378)[18] is an Ethernet over IP tunneling protocol specification. EtherIP has only packet encapsulation mechanism. It has no confidentiality nor message integrity protection. EtherIP was introduced in the FreeBSD network stack[19] and the SoftEther VPN[20] server program.IP-only LAN-like service (IPLS)

A subset of VPLS, the CE devices must have Layer 3 capabilities; the IPLS presents packets rather than frames. It may support IPv4 or IPv6.

Image result for virus infected"

OSI Layer 3 PPVPN architectures[edit]

This section discusses the main architectures for PPVPNs, one where the PE disambiguates duplicate addresses in a single routing instance, and the other, virtual router, in which the PE contains a virtual router instance per VPN. The former approach, and its variants, have gained the most attention.

One of the challenges of PPVPNs involves different customers using the same address space, especially the IPv4 private address space.[21] The provider must be able to disambiguate overlapping addresses in the multiple customers’ PPVPNs.BGP/MPLS PPVPN

In the method defined by RFC 2547, BGP extensions advertise routes in the IPv4 VPN address family, which are of the form of 12-byte strings, beginning with an 8-byte route distinguisher (RD) and ending with a 4-byte IPv4 address. RDs disambiguate otherwise duplicate addresses in the same PE.

PEs understand the topology of each VPN, which are interconnected with MPLS tunnels either directly or via P routers. In MPLS terminology, the P routers are Label Switch Routers without awareness of VPNs.Virtual router PPVPN

Image result for wifi"

The virtual router architecture,[22][23] as opposed to BGP/MPLS techniques, requires no modification to existing routing protocols such as BGP. By the provisioning of logically independent routing domains, the customer operating a VPN is completely responsible for the address space. In the various MPLS tunnels, the different PPVPNs are disambiguated by their label but do not need routing distinguishers.

Unencrypted tunnels[edit]

Some virtual networks use tunneling protocols without encryption for protecting the privacy of data. While VPNs often do provide security, an unencrypted overlay network does not neatly fit within the secure or trusted categorization.[24] For example, a tunnel set up between two hosts with Generic Routing Encapsulation (GRE) is a virtual private network but is neither secure nor trusted.[25][26]

Native plaintext tunneling protocols include Layer 2 Tunneling Protocol (L2TP) when it is set up without IPsec and Point-to-Point Tunneling Protocol (PPTP) or Microsoft Point-to-Point Encryption (MPPE).[27]

Image result for ip"

Trusted delivery networks[edit]

Trusted VPNs do not use cryptographic tunneling; instead they rely on the security of a single provider’s network to protect the traffic.[28]

From the security standpoint, VPNs either trust the underlying delivery network or must enforce security with mechanisms in the VPN itself. Unless the trusted delivery network runs among physically secure sites only, both trusted and secure models need an authentication mechanism for users to gain access to the VPN.

{{{{{How can you feel safe on hidden web..and on surface::}}}

If you browse the deep web — even if it’s just to check out your dental bill — it’s a good idea to equip your device with trusted security software and keep it up to date. We already talked about using a VPN on public networks.

Here are a few tips and tools to help stay safe when using Tor and other browsers. There’s a lot more to consider, but this should give you an idea of some of the issues — good and bad — to consider.

  • Tor is known for providing online anonymity, so it can be effective for sharing sensitive information with family or reporting corruption or abuse.
  • Keep Tor and Tor applications updated. Make sure your device’s operating system is also up to date.
  • Don’t use your regular email on websites when using Tor. While Tor is designed with anonymity in mind, providing your regular email address could expose your identity.
Image result for antivirus"

The presence of illegal activity calls into question the “character” of some dark web denizens. That’s why it’s important to take care to help protect your personal information and identity.

Poking around on the dark web is where some people get themselves into trouble. Unlike the deep web, which contains important and useful information, the dark web is riddled with illegal and unconscionable activity.

Because Tor servers keep users and publishers completely anonymous, there’s no way to regulate or control the content, products, and services being offered inside the dark web. Plus, there’s no way to trace communications or keep financial tabs on responsible parties because all payments are made and received using Bitcoin, a digital currency that operates independently of a central bank.

server

On the flip side, there are publications on the dark web that believe it’s the only way to obtain and sustain a truly free press.

Before you get lost in the dark, be sure to educate yourself on the dangers of the dark web. Make sure you install and run strong security software on your computer and devices to help ensure the privacy and security of your data.

To learn more about how the deep and dark webs work, check out the documentary “The Most Dangerous Town on the Internet – Episode 2: Where Cybercrime Goes to Hide.”

Image result for tor"

In general, don’t underestimate the darkest side of the dark web. Here are a few additional things to keep in mind.

Browsing the dark web can be dangerous

There are people and things on the dark web that you’ll want to avoid. Here are a few of them:

  • Viruses. Some websites could infect your devices with viruses, and there are a lot of different types of viruses to watch out for. Remember to never download anything from websites you don’t trust.
  • Hackers. You can find hacker forums on the dark web. You can hire computer hackers to do illegal activities. Not surprisingly, a lot of these people would be willing to hack your devices.
  • Webcam hijacking. A website on the dark web may try to get a remote administration tool — also known as a “RAT” — onto your device. That can lead to someone hijacking your webcam — essentially, letting them see what you’re up to through your device’s camera lens. It’s a smart practice to cover your webcam with a piece of paper or tape if you’re not using it.
Image result for hackers"

Dark web content may be illegal

Anytime you’re in the company of illegal drugs, illegal content, and other sordid online activities, you could risk landing in legal trouble.

A mistaken keystroke or simple curiosity might not be a reliable defense. Here are two examples of dark web content and activities that would raise legal concerns.

  • Sharing pictures and videos of child pornography. In one FBI arrest, the perpetrator traded material on a website with more than 100,000 registered users. The FBI busted him.
  • Purchasing illegal goods or services. If you buy illegal drugs or hire a hit man, you can be arrested for committing an illegal act. But browsing a website that offers those two things would not be illegal.
Image result for cyber crime"

Dos and don’ts on the dark web

Law enforcement officials have an interest in stopping illegal activity on the dark web. When they do, there are legal consequences.

Here are some notable cases where law enforcement took down criminals doing business on the dark web.

Silk Road. This online black market sold illegal drugs. It was launched in 2011. Total revenue was estimated at US$1.2 billion. Founder Ross Ulbricht was convicted and sentenced to life in prison.

AlphaBay. This was another online black market, launched in 2014. It grew to an estimated 10 times the size of Silk Road. Merchandise ranged from drugs to breached data. Alleged founder Alexandre Cazes was arrested. He was found dead in a Thai jail cell, apparently by suicide, several days later.

Hansa. This online black market expanded after AlphaBay was shut down and vendors moved to the platform. But Dutch police had already infiltrated the marketplace and seized information tied to its operation. Police shut down Hansa in 2017.