Segurança e Auditoria de Sistemas
Virtual Private Network Prof. Wairisson Gomes
Introdução • !"# %&'()*&+,& -./ '&0&- 1'23(0(-
2*1)&*&+,(0(- -/4'& ( 5+,&'+&, • 6-(0(- 1('( 7/*8+27(9./ -&%8'( &+,'& -2,&- &
1('( 7/+&:./ -&%8'( 0& 8-8;'2/- +(- '&0&7/'1/'(<3(• ='2%2+()*&+,& &'(* 7/+-<,8>0(- ( 1('<' 0/ 8-/
0(- 7?(*(0(- @&(-&0 @2+&- /8 @2+?(- ()8%(0(/8 1'23(<3(-
Introdução • K/2- %'(+0&- 1'/4)&*(- 0(- @" -./ / 78-,/ & (
&-7()(42)20(0& • D/*/ (- !"#- 8-(* / )2+L 0& 2+,&'+&, &:2-,&+,&
/ 78-,/ E7( 3(+,(M/-/ 1('( (- 7/'1/'(9N&-O &-1&72()*&+,& 1('( )2+L- IB#
Implementações • P&*/,& (77&- – = 8-8;'2/ ( 1('<' 0& 8* ?/-, 7/* 7)2&+,& (0&Q8(0/
1/0& -& 7/+&7,(' +( '&0& 7/'1/'(<3( – 6-8;'2/ ,'(4()?( 7/*/ -& &-<3&--& 0&+,'/ 0( '&0&
0& 1'/089./ 0( &*1'&-( 1/0&+0/ 2*1'2*2'O 8<)2R(' -&'320/'&- & 0&*(2- -&'329/- 02-1/+>3&2-
Implementações • P&*/,& (77&--
Implementações • A2,&C,/CA2,& – A/)89./ Q8& -84-<,82 (- @" – K2-1/-2<3/- 7/+7&+,'(0/'&- 0& 4/'0(O G(R&* (
7/+&:./ &+,'& /- -2,& – S/0/ / ,';G&%/ 1(--(+,& &+,'& /- -2,&- 1(--( ( -&'
7'21,/%'(G(0/
Implementações • A2,&C,/CA2,&
Implementações • A2,&C,/CA2,&
Implementações • !"# &* '&0&- @B# – T 1/-->3&) 7'2(' -&%*&+,/- 0& '&0&- 1'23(0(- +( '&0&
@B# ( 1('<' 0( 2*1)&*&+,(9./ 0& -&'320/'&- !"# – = B0*2+2-,'(0/' 1/0& 0&E+2' -&'329/- 02-1/+>3&2-
1('( 8* %'81/ '&-,'2,/ 0& 8-8;'2/ – =- 8-8;'2/- 0&3&* (8,&+<7(' +/ -&'320/' 1('( ,&'
(7&--/ (/ -&%*&+,/ 1'23(0/ 0( '&0&
Requisitos básicos • B8,&+<7(9./ 0& 8-8;'2/ – !&'2E7(9./ 0( 20&+<0(0&O '&-,'2+%20/ / (7&--/ U
1&--/(- (8,/'2R(0( – K&3& 02-1/' 0& *&7(+2-*/- 0& (802,/'2( • V8&*W = Q8& W V8(+0/
• D'21,/%'(E( 0& 0(0/ – =- 0(0/- 0&3&* ,'(G&%(' +( '&0& 1X4)27( 0& G/'*(
72G'(0( %('(+<+0/ ( 7/+E0&+72()20(0& 0(2+G/'*(9N&-
Requisitos básicos • A81/',& ( *X)<1)/- 1'/,/7/)/ – D/* ( 023&'-20(0& 0& 1'/,/7/)/- Y 2+,&'&--(+,& Q8&
/ 1(0'./ -81/',& 023&'-/- 0&)&- 7/*/ 5"3ZO 5"3[ & 5"\
Tunelamento • B- !"# 4(-&2(*C-& +/ '&78'-/ 0& ,8+&)(*&+,/ • • • •
Q8& 7/+-2-,& &* ] #( "#$%&'O &+7(1-8)(' 8* 1'/,/7/)/ 0&+,'/ 0& /8,'/ (+,&- 0/ &+7(1-8)(*&+,/ /7/''& ( 7'21,/%'(E( 0/- 0(0/#/ 0&-<+/ /- 0(0/- -./ 0&-&+7(1-8)(0/- & 0&7'21,/%'(G(0// 1'/7&--/ 0& ,8+&)(*&+,/ &+3/)3& &+7(1-8)(*&+,/O ,'(+-*2--./ (/ )/+%/ 0( '&0& 2+,&'*&02;'2( & 0&-&+7(1-8)(*&+,/ 0/ 1(7/,&H
Tunelamento
Protocolos de Tunelamento • "('( -& &-,(4&)&7&' 8* ,X+&) Y +&7&--;'2/ Q8& (-
-8(- &:,'&*20(0&- 8<)2R&* / *&-*/ 1'/,/7/)/ 0& ,8+&)(*&+,/H • = ,8+&)(*&+,/ 1/0& /7/''& +(- 7(*(0(- ^ & _ 0/ */0&)/ =A5 – K& D(*(0( ^ • (()( `!"#$%&%"&!"#$% ()$$*+#$, !-"%"."+ a *#"*#$&+,#$" 0(
b27'/-/c 1&'*2,& Q8& / ,';G&%/ 5"O 5"\ & #&,de65 • -.)( `/01*- 2 ()$$*+#$, !-"%"."+ a Y 8* */0#1" /2+" 0( 5eSf `3$%*-$*% 4$,#$**-#$, (056 7"-.* a -81/',( ,';G&%/5"O 5"\ & #&,de65
Protocolos de Tunelamento • = ,8+&)(*&+,/ 1/0& /7/''& +(- 7(*(0(- ^ & _
0/ */0&)/ =A5 – K& D(*(0( _ • = 3! 8*.)-#%1 ()$$*+ 9":* `3(4&5a 0( 5eSf C =- 1(7/,&- 5"
-./ 7'21,/%'(G(0/- & &+7(1-8)(0/- 7/* 7(4&9()?/ (0272/+() 0&-,& *&-*/ 1'/,/7/)/ 5" 1('( -&'&* ,'(+-1/',(0/• "'/,/7/)/ +(<3(*&+,& -81/',(0/ 1&)/ 5"3[ ,&+0/ -20/ (0(1,(0/ 1('( / 5"3[
IPSec • "'/,/7/)/ 0& 7(*(0( _ 1'/M&,(0/ 1&)/ 5eSf 1('(
8-/ &* !"#• Y 8* 7/+M8+,/ 0& 1(0'N&- & 1'/,/7/)/- 1('( -&%8'(+9( '&)(72/+(0( ( 8*( '&0& !"# 7'2(0( -/4'& 8*( '&0& 5"O & G/2 0&E+20/ 1&)/ %'81/ 0& ,'(4()?/ 0&+/*2+(0/ 5" A&78'2,gO 0/ 5eSfH • =G&'&7& 7'21,/%'(E(O (8,&+<7(9./ & 2+,&%'20(0& +( 2*1)&*&+,(9./ !"#
IPSec • A&'329/- & 1'/,/7/)/- 5"A&7] – =- 1'/,/7/)/- -./ '&-1/+-;3&2- 1&)/ G/'+&72*&+,/
0/- -&'329/• = 67+8&9:5/:"9 ;&/0 C Bh Y 8* *&7(+2-*/ Q8& 1'/3i
2+,&%'20(0& & (8,&+<7(9./ & 1'&3&+9./ 7/+,'( '&1&<9./ 0/- 0(,(%'(*(- 5"H • = <95/*=7>/:9% 4&57#$+? (/?>"/0 F eA" – 5+272()*&+,& G/'+&72( (1&+(- D'21,/%'(E(O 1/' 2--/ &'( 8-(0/ M8+,/
7/* Bh – B,8()*&+,& Y / *(2- 7/*1)&,/ 1'/3&+0/ 2+,&%'20(0&O (8,&+<7(9./O 1'/,&9./ 7/+,'( '&1&<9./ & 7/+E0&+72()20(0& (,'(3Y- 0( 7'21,/%'(E( 0/- 1(7/,&- 21 – 6-( 7'21,/%'(E( -2*Y,'27( 7/* _KeA & BeA 1/' &:&*1)/
IPSec • A&'329/- & 1'/,/7/)/- 5"A&7] • 5+,&'+&, j&g e:7?(+%& C 5je – D/*1/+&+,& 0/ 5"A&7 '&-1/+-;3&) 1&)( (8,&+<7(9./
*X,8(O &-,(42)2R(9./ & *(+8,&+9./ 0(- 8*.)-#%1 ;55".#0<"$ `ABa – B- AB 8* ,&'*/ %&+Y'27/ 1('( 8*( -Y'2& 0& 3()/'&Q8& 0&E+&* (- 7('(7,&'>-<7(- 0/ 5"A&7 & (1'/,&9N&- (1)27(0(- &* 8*( 7/+&:./ – = 5je G/2 7'2(0/ 1('( +&%/72(' /19N&- 0& -&%8'(+9( & %&'(' 02+(*27(*&+,& / *(,&'2() 0& 7?(3& 7'21,/%';E7( -&7'&,( 7/*1('<)?(0(