Evasion of Security Policies by VPN Clients Poses Great Risk to Network Operators

guest · Jun 27, 2019

Evasion of Security Policies by VPN Clients Poses Great Risk to Network Operators
June 26, 2019
https://unit42.paloaltonetworks.com...lients-poses-great-risk-to-network-operators/

Researchers with Palo Alto Networks Unit 42 investigated the tunneling software X-VPN, which uses various evasion techniques to bypass security and policy enforcement mechanisms. X-VPN is a type of Virtual Private Network (VPN) that can be used to bypass internet censorship and traffic policy enforcement points, which poses a great risk to network operators as well as VPN users.

X-VPN is currently one of the most evasive VPN clients, mimicking various popular protocols and services to bypass security policies. As a consequence, protection systems are not able to inspect the data packets, which can allow malicious traffic to enter the network or sensitive information to leave network.
X-VPN Evasion Techniques
X-VPN’s evasion techniques are based on using custom encryption of TCP and UDP payloads as well as mimicking other application layer protocols such as HTTP, SSL, FTP, NTP, and SMTP.

In addition to using deceptive HTTP and SSL packets to tunnel data through policy enforcement systems, X-VPN applies the same principle to FTP, SMTP and NTP traffic and hides custom encoded data within fields embedded in packets that appear as benign protocols.
Click to expand...

Log in or Sign up

Evasion of Security Policies by VPN Clients Poses Great Risk to Network Operators

guest Guest

Log in or Sign up

Evasion of Security Policies by VPN Clients Poses Great Risk to Network Operators

guest Guest

Useful Searches