SUPPORTING DYNAMIC SECURITY NEEDS WITH VPN TOOLS

Abstract

The article examines the problems of supporting the dynamic security needs of a hybrid environment. It was determined that an important aspect of remote work is the training of employees on common cyber security threats. Threat types such as phishing attacks, social engineering, and malware are explored. The components of information technology security in a hybrid working environment are defined. The levels of protection of corporate information were studied. VPN features are analyzed. Security procedures for using VPN, which creates opportunities to reduce the risks of hacking a remote work environment, have been analyzed. Requirements to reduce the risks of unauthorized access to confidential information have been established. Disadvantages and limitations of VPN usage are explored. The criteria for reducing the connection speed due to additional cryptographic processing and the distance to the VPN server were analyzed. Methods and methods of blocking and limiting access to VPNs are considered, with the aim of reducing their effectiveness in some contexts. The features of a set of protocols that protect Internet Protocol (IP) communication by authenticating and encrypting all IP packets in the data stream are investigated. The principles of the VPN service are defined. Ways to prevent data misuse when working in a hybrid environment are proposed. Requirements for invulnerability of network traffic to attacks are defined. a set of protocols is explored, thanks to which it is possible to authenticate and check the integrity and encrypt IP packets. Analyzed protocols for secure key exchange on the Internet. The design of key information management protocols is proposed, requiring the development of the Internet Key Management Protocol. In the process of research, key management concepts were analyzed and improved using the ISAKMP specifications and the Oakley Key Determination Protocol. The criteria for the successful functioning of the ISAKMP specification, which describes the mechanisms for matching the attributes of the protocols used, have been established.