SSL Web Proxy - A Secure and Inexpensive Remote Access Implementation
The demand for a secure, inexpensive, and multi-platform solution is gaining momentum. For years VPNs (Virtual Private Networks) using the IPSEC protocol have proven to be a stable and secure remote access solution. However, in addition to the initial cost of the implementation, the time and cost of maintaining the clients are becoming more apparent. Furthermore, the need to support clients other than 'Window PCs' has increased. Within this paper, I will outline a system that I developed using the proven technology of SSL (Secure Socket Layer), and the combination of stable, secure Open Source software with some custom programming. The objective of this system is to allow external clients without any configuration changes to securely access our internal web applications via the Internet. With criteria declared, my objectives set and a vast sea of information via the Internet and the Open Source community before me, I was eager and confident that this journey would be successful. I have included all the paths that my research took me, because each path resulted in a great system. However for one reason or another, the system did not meet all of the criteria. But after many hours of research and development, a system was created that met the criteria and satisfied our needs.
1055 (PDF, 1.90MB)
30 May 2003Related Content
Malware Function-based encryption technique
Research PaperRecent malware often uses techniques to evade detection by cybersecurity products. One of the...
- 22 Jun 2022
- Hirokazu Murakami
Detecting Unauthorized Behavior From Legitimate Accounts
Research PaperIncident Responders face an almost insurmountable amount of log events, and the move to the Cloud...
- 22 Jun 2022
- Rodney Caudle
Recover an RSA Private Key from a TLS v1.2 session
Research PaperCyberattacks happen every day.Most organizations have administrative and technical controls...
- 22 Jun 2022
- Johan Loos
Cyber Guardian Exercise: A Case Study in Brazil to Address Challenges in Cybersecurity and Protect Critical Infrastructure
Research PaperDiscussions of cybersecurity, in particular those associated with critical infrastructure (CI),...
- 22 Feb 2022
- Maxli Barroso Campos
Recommendations for small/medium-sized businesses enabling incident response
Research PaperSecurity incidents are inevitable. While large businesses can afford security teams to prepare and...
- 17 Jan 2022
- Luke Pearson
Black-Box Fuzzing for Android Native Libraries
Research PaperMany Android application developers are adopting C\C++ native language development in their Android...
- 12 Jan 2022
- Nawaf Alkeraithe
Machine Learning Techniques for Intrusion Detection
Research PaperThis paper aims to equip intrusion analysts with the basic techniques needed to apply machine...
- 9 Jun 2021
- Yih Han Tan
Detecting DLL Search Order Hijacking: How using a purple team approach can help create better defensive techniques and a more tactical SIEM
Research PaperMany SIEM analysts will recognize the feeling of being overwhelmed with security logs and alerts,...
- 4 May 2020
- Lasse Hauballe Jensen
Corporate Information Governance with Business Wisdom
Research PaperWhether a secret ingredient used for a lemonade stand across the street or the business strategies...
- 4 May 2020
- David Alexander Cruz Urena
Automated Detection and Disinfection of Ransomware Attacks using Roadblock Software
Research PaperWe often hear about ransomware locking data and demanding the ransom. Ransomware is a kind of...
- 18 Mar 2020
- Hemant Kumar
Assisted Security Investigations Using Cognitive Computing
Research PaperThe purpose of this research is to illustrate the application of cognitive computing and machine...
- 3 Dec 2019
- Lori Stroud
Leveraging the PE Rich Header for Static Malware Detection and Linking
Research PaperAn ever-increasing number of malware samples are identified and assessed daily. Malware researchers...
- 1 Jul 2019
- Maksim Dubyk
Analysis of a Multi-Architecture SSH Linux Backdoor
Research PaperA key aspect in any intrusion is to attempt to gain persistence on the compromised system. Threat...
- 17 Jun 2019
- Angel Alonso-Parrizas
Unpacking and Decrypting FlawedAmmyy
Research PaperMalware authors commonly utilize packers (Roccia, 2017) as a method of concealing functionality and...
- 22 Apr 2019
- Mike Downey
Continuous Security Monitoring in non-Active Directory Environments
Research PaperActive Directory-centric monitoring techniques, tools, and methodologies have dominated information...
- 20 Feb 2019
- Blair Gillam
Intrusion Prevention System Signature Management Theory
Research PaperThe intrusion prevention system (IPS) serves as one of the critical components for a...
- 5 Feb 2019
- Joshua Levine
SDN Southbound Threats
Research PaperSDN (Software-Defined Networks) technologies are based on three pillars: decoupling control and...
- 20 Nov 2018
- Mohamed Mahdy
Processing experimental protocols against IDS
Research PaperExperimental protocols such as TCP Fastopen, QUIC, and Multipath TCP are not uncommon on...
- 10 Aug 2018
- Tommy Adams
Extracting Timely Sign-in Data from Office 365 Logs
Research PaperOffice 365 is quickly becoming a repository of valuable organizational information, including data...
- 22 May 2018
- Mark Lucas
Automated Detection and Analysis using Mathematical Calculations
Research PaperA compromised system usually shows some form of anomalous behaviour. Examples include new processes,...
- 17 May 2018
- Lionel Teo
