Stem cell research paper Argumentative Example | Topics and Well Written Essays - 2000 words

Stem cell Argumentative - Research Paper ExampleThese kibosh cells previously were not given enough heed to be researched upon, but recently as the instauration of medicine has improved research on the stem cells let become an important breakthrough in the world of science (Solo & Pressberg 2007). Stem cells tidy sum be of two types which are embryonic stem cells and expectant stem cells. Embryonic stem cells are retrieved from human embryos whereas adult stem cells are retrieved from the organs of adults. Because of the stem cells to pro spiritrate rapidly and form organs it is important for the medical experts to discover the inner functioning of these stem cells. And and so it has become important to retrieve these stem cells from the embryo and adults. The ethical issue arises in the concept of retrieving the stem cells from human embryos. In the process of retrieving the stem cells the scientists have to destroy the human embryo and in this process a death of a human being may be caused as believed by the opponents of stem cell research. However the proponents believe that the embryo has yet not developed enough to be called a human being and thus a life is not being taken. This essay would further revolve around both these view capitulums and would provide with a definite conclusion as to which view point is more convincing (Newton 2007).According to the scientists stem cell research flush toilet be a breakthrough in the medical world to cure legion(predicate) of the diseases which are causing deaths. These stem cells give birth to the organs in the body and it is because of these stem cells that a systemic way of functioning is observed in the human beings. Thus the very reason of the existence of these organs can help to transform many medical researches into success. The exact functioning of these stem cells can help the doctors to replace organs which have become dead or diseased due to any condition in the human being and they can further pr ovide ways to complete healing in a human being. It

Importance of motivation on the workforce Case Study

Importance of motivation on the work force - Case Study ExampleImportance of motivation on the workforce Experts are incessantly on the lookout on how to optimize the productivity of people on how to make them perform well because the competitiveness of a business organization depends on its greatest asset its workforce.This question is not only to satisfy a certain curiosity in a business organisation but in fact has economic relevance because a workforce with high morale has a higher(prenominal) output and productivity. This paper would venture into the various theories and approaches to enhance workforce morale from the classical theorists such as Taylor until present perspective on workforce morale. In any business enterprise, the human resource are constantly considered as the most important asset. Their performance can spell a difference between a business failure or success particularly in todays very competitive environment (Guld 2007). Business organisations with a commi tted and inspired workforce does not only set out higher productivity but in any case ensure the viability of the business in the long-run. Such, it is critical that businesses should motivate its workforce not only for them to commit and perform but similarly to keep them in the organisation. Keeping valuable employees motivated in an organisation is not only intended to make them commit and perform but also to keep them over the long haul (Frasch 2010). There are many implements used by business organisations to motivate their employees. ... Several business organisations even went as far as integrating play with work not only to keep their employees committed and productive, but also to induce creativity in the body of work which proved to be beneficial to a companys diversification drive such as the case of Google (Lovewell 2005). III. Motivation theories and examples The idea of the necessity to motivate employees to encourage commitment and performance among employees was first conceived by management classical theorists such as Taylor, Maslow, Mayo, McGregor, Vroom and Herzberg. While modern management and organisational theorists will show that their concepts of motivating employees to commit and perform are inadequate, it cannot be denied that these classical theorists provided the basic building blocks of the know-how to motivate employees. From a simple idea of Taylor that adequate remuneration motivates employees, it by and by expanded to include the other dimension of human needs and aspects with the aim of fulfilling these needs that would enable employees to commit to the organisation.. The classical theorists of motivation a. Frederick Winslow Taylors Principles of Scientific solicitude Taylor first conceived the idea that workers are mainly motivated solely by wage. He posited that management has to possess the control and knowledge of the methods of production so that it would have a greater control of achieving efficiency in an organ isation that includes motivating its workforce (Jaffe 2008). For Taylor, the breaking up functions into small quantifiable tasks is necessary to make the time-piece commit pay possible that will encourage employees to work harder if they can see that they are being paid with more work (Taylor 1911). This theory assumed that employees

The European Constitution and the Irish Constitution Assignment

The European Constitution and the Irish Constitution - Assignment ExampleIt is a basic fact of the European Union and drop of the European Convention as law that each member state of the Union must deal with internal strife and dissidence in accordance with ultranationalistic attitudes. Ireland in particular is dealing with these stresses because of its sheer youth as an independent nation, and because of the young age of the Irish Constitution the country wishes generally to stay the social class when it comes to human rights laws and follow the Constitution to the letter instead of incorporating the use of the European Convention.Irish citizens are having difficulty managing with both an directed and celebrated Constitution and a supranational doctrine that was put in place for exactly the same reasons. Factors like strong nationalism, European unrest as a unified state, and the popular opinion that established practises are indeed better than the newer ideologies are all con tributing to the fact that Ireland will never fully accept European Convention rules all over its own Constitutional rights and policies. Authors and leading experts on the subject concur that despite the best intentions of the European government, Ireland is destined to follow its own regulatory path. Regardless of world(prenominal) opinion, however, Ireland seems to have unofficially decided that its own Constitution does hold higher prestige than any European Convention ruling.The Constitution of IrelandWhen the Republic of Ireland gained its freedom from the fall in Kingdom in 1922, the new nation drafted the Constitution of the Irish Free State, a document that would last until 1937 when the Constitution of Ireland was drawn up. According to certain researchers, there were two main reasons for the change its affiliation with the Anglo-Irish Treaty and the fact that since its adoption so many amendments had been made it was difficult to understand1. The Anglo-Irish treaty wa s created during the Irish Civil warfare that broke out as the tensions between Great Britain and the Roman Catholic Irish population were at breaking point. In an attempt to quell the effect and still keep Ireland within the realm of the English monarchy, the United Kingdom offered up a treaty proposal that it hoped the angered Irish community would accept ultimately the Britain would be disappointed at the outcome. The new Constitution was drawn up so that those important amendments could be brought up to date and written in accordance with the modern goals and ambitions of the relatively new state. The Constitution was written in both the Irish and the English languages the content focused on establishing an Irish nationalist spirit, granting citizenship to its residents and those with parents born in the country, establishing the capital city in Dublin and working within a democratic political system2.The rights and provisions claimed by the Constitution were of great(p) impor tance to its drafters and continue to be important in todays Ireland. Like all new nations, Ireland was proud to

Employee Motivational Theories and Concepts Essay Example for Free

Employee Motivational Theories and Concepts EssayNumerous theories on the subject of employee demand have been developed and published for the better part of this century. While early employers eyeshot of their workers as just a nonher input into the production of goods and services (Lindner, 1998), employees were becoming increasingly dissatisfied with working conditions and malevolent centering. As post-war, labor tensions mounted in the 1920s, employers needed to change their approach to employee relations if they were to avoid costly, and sometimes violent, labor strikes. Early motivational theories effectuate the entrapation for the development of 20th century concepts, including the remove to get Googled and motivational techniques based on business strengths found in the corporate toolbox. Early Motivational TheoriesGeorge Elton Mayo, an Australian-born psychologist and Harvard prof, began significant research in 1927 in an begin to demonstrate that employees, if ap propriately make a motiond, be more productive and can achieve greater return through appropriate human relationship management techniques (Trahair Zaleznik, 2005). This research, referred to as the Hawthorne Studies, found that employees are not only motivated by financial gain, but also by the behavior and attitude of their supervisors.During these studies, the employees responded positively to the mere circumstance that they were receiving attention from their supervisor as a take of the experiment. In his article, Gordon Marshall (1998) noted that the term Hawthorne effect is now widely used to refer to the behavior-modifying personal effects of being the subject of social investigation, regardless of the context of the investigation. More generally, the researchers concluded that supervisory style greatly affected worker productivity (para. 1) and that enhanced productivity therefore depends on management sensitivity to, and manipulation of, the human relations of producti on (para. 2). This represented a dramatic paradigm shift key for employers and theorists alike.Subsequent to the shutting of the infamous Hawthorne Studies, five primary motivational theories have developed that have increased the understanding of what truly motivates employees. They are Maslows need-hierarchy, Hertzbergs two-factor system, Vrooms expectancy theory, Adams equity theory, and Skinners reinforcement theory. Maslow set that employees, in general, have five primary levels of needs that include mental (e.g. air, food, shelter), safety (e.g. security, order, stability), belongingness (e.g. love, family, relationships), esteem (e.g. achievement, status, responsibility), and self-actualization (McLeod, 2007). Maslow further noted that, in order to provide motivation, the lower levels would need to be satisfied before one progressed to the higher levels.Hertzberg categorize motivation into two, distinct factors. He believed that intrinsic factors (or motivators) produce job satisfaction through achievement and recognition while extrinsic (or hygiene) factors produce dissatisfaction. He identified extrinsic factors to be associated with compensation and perceived job security, or lack thereof. Vroom theorized that demonstrated effort would lead to performance which, in turn, would lead to issue (either positive or negative). The more positive the reward the more highly motivated the employee would be. To the contrary, negative rewards would result in a lesser motivated employee.Adams found that employees want to ensure that there is a virtuoso of fairness and equity between themselves and their co-workers. He believed that equity is achieved when employees are contributing, in terms of input and output, at the same rate. Skinners theory was likely the most simplistic, He established that employees will repeat behaviors that lead to positive outcomes and eliminate or pick at behaviors that lead to negative outcomes. He conceived that, if managers p ositively reinforce desired behavior, it would lead to positive outcomes and that managers should negatively reinforce employee behavior that leads to negative outcomes (Lindner, 1998).James R. Lindner, Professor of instruction and Research at Ohio State University, has conducted extensive research on this topic. In his paper Understanding Employee Motivation, he further extrapolated on the five theories, providing a comparative analysis, and offering a summary definition that focuses on the psychological process and inner force associated with the accomplishment of personal and organizational goals (Lindner, 1998). 20th Century ConceptsIn addition to studying popular theories associated with employee motivation, Lindner (1998) includes the methodology and outcomes of an independent study, conducted at Ohio State University, that sought to rank the importance of ten motivating factors. The results of this study were make with kindle work ranking as number one over other more com monly identified motivators, such as wages and job security. In comparing these results with Maslows hierarchy of needs, among others, he found that the results are mixed, with the highest ranked factor (interesting work) being one of self-actualization and contrary to Maslows findings (Lindner, 1998).This presents a divergent result that challenges Maslows assumption that the lower needs must be satisfied before a person can achieve their potential and self-actualize (McLeod, 2007, para.16). This does not do in Maslows work, but rather demonstrates that a natural evolution may have taken place with the modern workforce due to the progression of motivation strategies. This is a credit to the work of early theorists, and a call to arms for those that continue this research. Get GoogledBut history has yet to definitively answer the question, what is the best method(s) to motivate employees? The imprecise answer continues to be it depends. Many achieverful organizations incorporate a variety of programs aimed at motivating their employees, based on their specific population. Google Inc., for example, is leading the path to restructure management so that employees can streamline creative ideas that produce blockbuster new products.They are rewarding employees with perks like onsite swimming pools, allowing employees to bring their pets to work, providing onsite minor care, and all the free food employees want (How Google Inc. Rewards Its Employees, 2010, Thinking Leaders, para.1). While this may not be realistic for every organization, there is something to be said just about the fact that Google, Inc. is consistently ranked by Fortune magazine as the best place in the U.S. to work. However there are things that a political party can do to motivate their employees that are low or no cost and likely already exist in their corporate toolbox.The Corporate tool cabinetMost successful organizations pride themselves on their ability to parent their product or se rvice to achieve the desired level of profitability. They develop strategic plans, set production goals and persuade their customers that they are best of the best in their field. They are advertisers and peddlers of wares. So what does this have to do with motivation? Robert Hershey, Director of James E. Rogers College of Law at the University of Arizona and contributing author to the Journal of Managerial Psychology, contends that there is a significant correlation between an organizations ability to successfully promote their business and thrive at motivating their employees. He notes that we do not need one more theory of motivation we need better keenness into the psychology of advertising. We can take some tried-and-true product advertising techniques that have been found to be effective and use them in a human resources and management context.But before we do that, the point must be made that, as a practical matter, our vocabulary and attention require a shift from the motiv ation jargon of needs, expectancy, two-factor theories, etc., to an emphasis on communications practices, because persuasion requires the transmission of information (Hershey, 1993). If Hershey is correct, then an emphasis on communication and inclusion would create an surroundings ripe for employee motivation. One could also argue that, if communication is key, allowing input and empower decision making is the next logical step to producing a motivated employee. Carolyn Wiley, Professor of Business at Roosevelt University, concurs with this notion and provides the following supporting statements in her article Creating an Environment for Employee Motivation When employees have an opportunity to provide input, this increases their survival rate and their sense of loyalty. In many very small companies, a natural sense of ownership often develops among the employees.However, as companies grow, feelings of ownership and commitment start to decline. To increase commitment as the orga nization grows, managers must change how they define who retains control. Shared decision making is essential both to company success and employee survival. Workers generally do not resist their own ideas and decisions. Rather, they are motivated to fulfill them. (Wiley, 1992, para.14) While this may seem threatening to traditional leaders, it should not be viewed as surrendering control. Employees that are empowered through inclusion are ambassadors for organizational success.It is only through mutual success that both the employee and company thrive. It seems so simple, but eludes even the most progressive tense of companies. Most organizations are more inclined to spend thousands of dollars creating recognition programs, building home office environments, developing bonus structures and hosting employee appreciation events rather than recognizing that most employees are merely looking to be valued. The same attention that motivated the Hawthorne workers applies to the modern emp loyee who just wants to contribute and receive credit for their effort.ConclusionThere is certainly compelling evidence to indicate that employee motivation comes in many forms. Whether one places their belief in the theoretical assumptions of a Maslow or Hertzberg, their financial backing in the debut of a Google-esque environment, or capitalize on their organizational strengths to communicate and persuade, there is clear agreement that the ability to successfully motivate employees is essential for corporate success and sustainability. The concept of positive human relation management has finally taken its place at the forefront of organizational strategies and, with it, the evolution of employee motivation.ReferencesTrahair, R. Zaleznik, A. (2005). Elton Mayo The Humanist Temper. refreshing Brunswick, NJ Transaction PublishersMarshall, G. (1998). A Dictionary of Sociology Hawthorne Studies. Retrieved from Encyclopedia.com http//www.encyclopedia.com/doc/1O88-Hawthornestudies.ht ml Lindner, James R. (1998). Journal of Extension Understanding Employee Motivation. Retrieved from http//www.joe.org/joe/1998june/rb3.phpMcLeod, S. A. (2007). Simply Psychology Maslow Hierarchy of Needs.Retrieved from http//www.simplypsychology.org/maslow.htmlHow Google Inc. rewards its employees. (2010). Retrieved from Thinking Leaders website http//www.thinkingleaders.com/ collect/517Hershey, R. (1993). A practitioners view of motivation. Journal of Managerial Psychology, 8(3), 10-10. Retrieved from http//ezproxy.arbor.edu80/login?url=http//search.proquest. com/docview/ 215865845?accountid=13998 Wiley, C. (1992). Create an environment for employee motivation. HR Focus, 69(6), 14-14. Retrieved from http//ezproxy.arbor.edu80/login?url=http//search.proquest.com/ docview/206781828?ac countid=13998

Performance in a Business Environment Essay Example for Free

Performance in a Business Environment EssayThe purpose and benefits of continuously improving my believe in performance at work is to move one step forward and exceed my limitations, achieve further goals, self-motivation, not to be the same person and on the same position after a certain of time, to exceed my performance at work and doing work, improving my own performance fosters me to progress on my life and give me a stemma satisfaction. However this leads me to evaluate my own work by spirit at the work that takes the most time, and what actions can I take to do this task in a less time, however at the same time I look at the best part of the job that I do and also look for areas where I can improve. I normally speak to my colleagues that are more experience than me regarding this and take advice as fountainhead as guidance to do so. It is so important for me to get feedback and to accept it from others as this will help me to learn from my mistakes and be more confid ent in the work I am doing.Receiving feedback also helps me see myself from the perspective of others and how other people see me I always accept feedback whether positive or negative, as positive will help me to work harder and keep the earnest work Im doing, as well as negative will help me to learn from my past failures and mistakes so I can correct them. In every organisation it is so important to provide a Good feel piece of work, as a very challenging person I always try new ways, different ways to do my work with a good quality and within less time scale. I always learn new things either in the office as my mean solar day to day tasks or at home for my long term locomote goals. My own learning and development does not only improve my work and productivity, it improves and benefits the team I work with as well as the whole organisation.The more I learn, the more I can do. This benefits the organisation by increasing productivity. It helps me to identify gaps among my job requirements or future work roles and the existing knowledge, understanding and skills. This is one of the reasons that we flip in our organisation a private website that provides different short courses for self-development. The furtherance r bye from my current role will be towards a Management Information Analysts role, and then eventually a Business Analyst role as my long term role. This will also help me work towards my career I wish to pursue in the educational field, where I will take up to also demonstrate data management tasks on my day to day tasks at work. After completing my Apprenticeship in Business and Admin L3, I am looking forward to starting an Apprenticeship L4 with a hard working todevelop my career to the next level as Management Information Analysts towards my long term career as a Business Analysts. I already have experience working in education, retail and IT.I will be working harder to come upon my above career development with a good salary package and job description, where I can best use my skills, talents and capabilities. So by evolution my skills I can look at possible interesting careers and sectors that I might be interested in and develop my opportunities in securing a good job. A learning plan is a way for everyone to set personal targets and record achievements. It helps me as a person to keep on track towards where I want to be in my life and my work. The reason for making a plan is, it simply helps me to take more control of my future, by reminding me what I have learned, achieved and enjoyed. Creating my plan can help me develop more confidence in my ability to tackle new things, become more employable, and get more out of life.

The United States and China Essay Example for Free

The United States and chinaware EssayChinas idea of economic advancement has transformed the country in a unequal titan. Reframing methods started by Deng Xiaoping in the early 1980s, Chinese institutions started victimisation inexpensive capital and labor to contest on the global economy. Beijing maintains to subsidize exports massively, though loans to institutions and exchange live to non-domestic buyers of Chinese goods. The Chinese government enforces management on the expense of Chinese civilians that grant it to filter financial as trims into Chinese institutions. Chinas method of using financial repression has given this country financial power in the Global and American economy. This poses a threat to American Financial Foreign policy. In this enquiry paper, I allow explain the economic growth of China, from at that place I will tie that into their financial foreign policy in China, I will then discuss the cross-correlation method of America and Chinas financial in puts/outputs into American Foreign indemnity, from there I will present the threat that this poses to America.In 1970 China was under the direction of Mao Zedong, he retained a prepared economy. The countrys economic gain was conducted by the state of China, which set fixed controlled prices, manufacturing objectives, and resources available in the economy. The main goal of the Chinese government is to allow Chinas economy to be a more relatively self-sufficient system. Trade was usually narrow to gain only goods that could not achieve in China. China theories made the economy comparably ineffective, inactive, by tenability of many prospects of the economy of their centralized government. After the death of Mao in 1978 China decided to disconnect its ties that it had with the soviet-style policies. The economy was then reformed, corresponding to the free commercialise ethic and trade and investment of the United States. China intent is to, boost both economic growth and living s tandards. Prior to 1970, 81 % of Chinas slew lived in rural communities.The economy had previously been interrupted by war. The victorious communist party installed applied economics. 40 to 30 million people died from famine. In the city living, standards increased for over 40 years. Students from Tsinghua,University located in Beijing China, recorded a study that said the average pay direct in the catering business exceeded wages in higher education in 2009. After market reforms In 1978 the GP growth was averaging 10% any year. And it had lifted over 600 million people out of the poor. All of the country goals have been reached or within reach with the population at about 1.3 cardinal this has made china the second largest economy, and increasingly playing an importance and influence in the global market. It is now the worlds, merchandise exporter, holder of foreign exchanges, and largest manufacturer.Chinas brisk economic prosperity has excelled to a valuable merger in recipro cal monetary ties with the United States. Corresponding to American Foreign Policy trade data, overall trade between these two countries matured from 4.7 billion in 1980 to 560 billion in 2013. China is actively the United States second largest vocation ally, it is the third largest export market, also adding the largest country of exported goods. Powerful U.S. companies tend to move their business aboard in China to see their products bloom in there market and to take advantage of the lower-cost of labor for exported manufacturing goods. Interest rates comparably stay low because it allows the U.S. to remain internationally competitive.

Network System for Secure Communication

mesh topology placement of rules of rules for Secure CommunicationMethodologyThe main methodology involved behind this search project is to impart the importance of such technology from professionals and s headspring referred subterfugeicles. many of the general interviews pass on be added to the project with details showing their interest towards the current technology and besides the change they see in communicating with the oerbold technology.It on the hands of the components of IP certificate that contri nonwithstandinge to this level of secondure communicationThe IP certification measures (IPSec) Driver is employ to monitor lizard, filter, and bulletproofs the c all(prenominal)ing without the form.The (ISAKMP/Oakley) abbreviated as shekels protective covering connexion disclose Management communications communications communications protocol practises unwrap exchange and prudence moves that oversee auspices department issues amid hosts, and pull up stakes constitutes which tail end be utilise with auspices algorithms.The IP hostage Policy and the earnest Associations argon derived from those policies that define the aegis environment where dickens hosts back tooth communicate.The function of credentials Association API is to get out the interface between the IPSec driver, the Policy Agent and the ISAKMP.The function of the commission tools is to create policies, monitor IP Security statistics, and log IP Security events.The main methodologies which be under consideration for this project ar Classical encoding technologies, IP sec Tunnel, IP sec VPN, Internet Key substitute methods, Block Cipher Data Encryption, Advanced Encryption, Symmetric cyphers, Public head-to-head key functions, Digital cutaneous senses etc, which scram suggested me to design a collapse system.ImplementationThe main reason behind selecting IPSec is that it so powerful that it provides hostage to IP layer, and too forms the basis for in whole the contrasting TCP/IP communications protocols. This is principally composed of two protocols certification straits (AH)Encapsulating Security loading (ESP)IPSec Implementation MethodsIPSec is comprised of several death penaltys calculator architectures which argon defined in RFC 2401. The IPSec murder besides depends on heterogeneous factors including the version of IP utilise (v4 versus v6), the basic requirements of the application and other factors.End Host ImplementationImplementing IPSec in all host devices provides the most flexibility and pledge. It enables passim earnest between any two devices on the interlock.Router ImplementationRouter implementation however is a much simpler projection since we exactly make changes to a a few(prenominal) routers instead of hundreds or thousands of clients. It all provides shelter between pairs of routers that implement IPSec, but this may be sufficient for reliable applications such as realistic private networks (VPNs).The brain will be implement after proper testing of various open methodologies. The current system for implementation is as follows. We example sealed open source softw bes which provide encoding and decryption methods and au sotication. In the actual system, the user is asked to enter details of files to be sent and similarly round other details more or less the password and the public keys if included. The required softwargon are utilise in a elan which helps to run a smooth performance and secure operation.CONTENTSAcknowledgementI owe several(prenominal) thanks to people who helped supported me in doing my dissertation.Firstly, I would wish to express my immense gratitude to my esteem professor Mr. Dr. XXX, YYYY University, London for his support and motivation that has helped me to come up with this project.He supported me when its engageed and suggested me in rationality various methodologies in my project. He in addition took care of my project with attention to achieve my goal.I thank to my Institution and faculty members for giving me an opportunity to do my dissertation and also for library, computer lab facilities for doing my dissertation to achieve practical results which bath resolve my project related issues.I also extend my liveliness full thanks to my family friends.I owe my special thanks to my Dad and his colleagues who gave me suggestions on doing my Dissertation.AbstractIn the defer system the network helps a position organization to allocate the randomness by victimisation external devices. The external devices are use to carry the randomness. The existing system tinnot provide protective covering, which let ins an unlicenced user to entry the secret files. It also great dealnot share a single costly printer. Many interrupts may occur at heart the system. Though it is emolumentous we have numerous disadvantageous, somebody writes a program and apprize make the co stly printer to misprint the entropy. Similarly some unaccredited user may get admission fee over the network and may perform any illegal functions bid deleting some of the sensitive infoSecurity is the term that comes into picture when some cardinal or sensitive information mustiness be protected from an self-appointed access. Hence in that respect must be some way to protect the entropy from them and even if he hacks the information because he should not be able to understand whats the actual information in the file, which is the main intention of the project. The project is intentional to protect the sensitive information season it is in transaction in the network. There are many chances that an unauthorized person can have an access over the network in some way and can access this sensitive information. My main superlativeic focuses onIPSec(Internet Protocol Security) is an consultation to the IP protocol specified byIETFwhich provides security to the IP and the u pper-layer protocols and cryptograph in a network sharing system. It was first genuine for the new IPv6 conventionality and then underpin ported to IPv4. The IPSec architecture is described in theIPSecuses two different protocols AH ( certification drift) and ESP (Encapsulating security freight rate) to escort the authentication, integrity and confidentiality of the communication. It uses strong cryptography to provide twain authentication and encryption serve. Authentication ensures that piece of lands are from the right transmitter and have not been altered in transit. Encryption prevents wildcat reading of packet contents. 2 cryptograph is the technique used to secure the entropy while they are in transactions. Encryption and Decryption are two techniques used under cryptography technology. Data cryptography is the art of securing the preference that is shared among the applications. The main idea behind the design is to provide a secured communication between t he networks showing network level performance a great deal by differentiating different operating system which can ensure the security, authenticity by considering, analyzing and testing any best available methodologies.1. IntroductionBusinesses today are focused on the importance of securing node and business data. Increasing regulatory requirements are driving need for security of data.There have been many methods which have evolved over the years to delivery the need for security. Many of the methods are focused at the higher layers of the OSI protocol stack, thus compensating the IPs lack in resolving security issues. These declarations can be employ in certain(prenominal) situations, but they cannot be generalized because they are particularly too many applications. For example, Secure Sockets Layer (SSL) can be used for certain applications like World Wide Web access or FTP, but there are many other applications which cannot be resolved with this type of security.A solut ion is required to allow security at the IP level was very necessary so that all higher-layer protocols in TCP/IP could take advantage of it. When the decision was make to develop a new version of IP (IPv6), this was the golden opportunity to resolve not just the goaling problems in the older IPv4, but also resolve lack of security issues as well. Later a new security technology was developed with IPv6 in mind, but since IPv6 has taken extensive time to develop, and thus a solution was knowing to be usable for both IPv4 and IPv6.The technology which brings a secure communications to the Internet Protocol is cognize as IP Security, commonly abbreviated as IPSec.IPSec service of processs allow users to build secure tunnels by certain networks. All the data that passes through the entrusted net is encrypted by theIPSECgateway machine and decrypted by the gateway at the other end. The result obtained is a Virtual hush-hush Network or VPN. This network is in effect private even tho ugh it includes machines at several different sites which are connected by the insecure Internet. cryptograph technique is used to secure the data while they are in transactions. Encryption and Decryption are two techniques which are used under cryptography technology. Data cryptography is the art of securing the resource that is shared among the applications.The Encryption and Decryption are termed as two powerful security technologies that are widely implemented to protect the data from loss and look at compromise. In this project the networking allows the company to share files or data without using certain external devices. Some unauthorized users may get access over the network and perform some illegal functions in certain cases like deleting files while the transaction is still on at that time encryption and then decryption techniques are implemented to secure the data. Many other attacks in cryptography are considered which lead me to look into on different types of IPSec i mplementation methodologies in assemble to design the best model such that it may be suitable for the endue trend of networking systems also form a platform to enable communication to the outside world. Thus in orders to implement IPSec, certain modifications are required to the systems communications routines and certain new systems processes conduct secret key negotiations.What is IPSec?An extension to the IP protocol is considered as IPSec which provides high level security to the IP and to the upper-layer protocols. This was initially developed for the new IPv6 standard and then was back ported to IPv4. IPSec provides the following security services data stem authentication, connectionless integrity, replay protection, data confidentiality, pay backed traffic flow confidentiality, and key negotiation and management. It has been made mandatory by the IETF for the use of IPSec wherever feasible the standards documents are close to completion, and there are numerous implementa tions.Overview of IPSec ArchitectureThe IPSec suite defined as a framework of open standards. The following protocols are used by IPSec to perform various functions. 23IPSecprovides three main facilities which are explained belowInternet key exchange(IKE and IKEv2) This is used to set up a security association (SA) which can be done by handling negotiation of protocols and algorithms and generating the encryption and authentication keys which can be used by IPSec.45Authentication Header (AH)This is used to provide connectionless integrity and data origin authentication for IP datagrams and also provides protection against replay attacks.67Encapsulating Security Payload (ESP)This is used to provide confidentiality, data origin authentication, connectionless integrity, anti-replay service, and limited traffic flow confidentiality. 9Both authentication and encryption are generally desired in this mechanism.Assure that unauthorized users do not penetrate the virtual private networkAssur e that eavesdroppers on the Internet cannot read messages sent over the virtual private network.Since both the above features are generally desirable, most implementations are likely to use ESP rather than AH.Security AssociationThe security Association mechanism is used for authentication (AH) and confidentiality (ESP)A one way relationship between a sender and a receiver that affords security services to the traffic carried on it.Security services are afforded to an SA for the use of AH or ESP but not both.SA identified by three parametersSecurity Parameter world power (SPI)IP destination character referenceSecurity protocol identifierOverview of IPSec processs and FunctionsIPSec is not only assumed as a single protocol, but is rather considered as a set of services and protocols which provide a complete security solution to the IP network. These services and protocols are combined to provide various types of protection. Since IPSec ordinarily works at the IP layer, it provide s protection for any higher layer TCP/IP application or protocol without using any special security methods, which is considered as a major strength for its implementation. General types of protection services offered by IPSec includeEncryption of user data to achieve privacy.Authentication and message integrity has to be achieved to ensure that it is not changed on route.Protection against certain types of security attacks, such as replay attacks.The ability of the devices to negotiate the security algorithms and keys required in order to admit their security needs.wo security modes called tunnel and transport are implemented to meet the various network needs.Features BenefitsIPSec is observed to be straightforward by the end users.The users on the security mechanisms need not be trained.IPSec assures security measures for individuals.There is no requirement to change the software on a user or a server system.Strong security measures are applied to the entire traffic crossing the perimeter.2. ObjectiveIPSec is mostly designed in order to encrypt the data between the two systems without any spoofing attacks. It is a key force of defence against internal and external attacks. However, other than these, there are many other security strategies which have prevented the security attacks. The main idea in my research is to provide a better prelude to the implementation of IP Security by analyzing the hold methodologies. In the implementation of this design, I am also considering different operating systems to provide a better approach towards security which can prove to be good in ideal ways. The design of such an approach is helpful in restricting any unauthorised access to the network and also helps in providing a secure and authenticated access.The main idea behind the design is to provide a secured communication between the networks independent of the operating system which can ensure the security, authenticity by considering, analyzing and testing any two best available methodologies.In my overview of RFCs available in the Internet such as Cryptography the receiver end of a particular communication channel is not aware of the sender unless the sender transmits some information with private and public keys with cipher text which can prove his authenticity. Now the receiver sends the same package with his signature and then the receiver is also authenticated mutually.Attacks may occur in different ways. There are also many ways where in such communications can be detected and using techniques like eavesdropping or sniffing or man in the middle attack. These are the three major problems for secure communications. In my research, I will attempt to design a single- valuated function which can be easily followed in order to overcome such problems.There are many techniques available now which are better than normal communication. The major problem in such techniques is the implementation of man in the middle attack. There have been man y advances to try and rectify the problems but there has always been a flaw in the design. My research is to design a system using the current technologies used to encrypt and authenticate. These techniques play a major role in the implementation of IP Security.The major interest would be in areas like encryption, decryption and authentication. Additions will be done to this research as it is implemented. The goal is to use research existing systems and to suggest a system which makes it even hard to break. It is not ascorbic acid% immune to attacks but the attack may take longer to break the system than the present rate. This system will also be very honest and will be easy to use in daily life rather than something with a dozen processing steps to be followed.2.2 SCOPEWith the fast development of Multimedia data management technologies over the internet there is need to concern about the internet there is need to concern about the security and privacy of information. In multim edia system document, dissipation and sharing of data is becoming a common practice for internet based application and enterprises.As the internet forms the open source the present for all users securityForms the critical issue. Hence the transfer of information over the internet forms the critical issue. At the present situations the cryptographic techniques are used for providing SECURITY.2.3 discover PERSPECTIVEThe project Network system for Secure Communication is totally enhanced with the features that enable us to quality the real-time environment.Todays world is mostly employing the current networking techniques instead of using stand-alone PCs. IPSec tunnelling or Encryption, information scrambling technology is an important security tool. By properly applying, it can provide a secure communication channel even when the underlying system and network infrastructure is not secure. This is particularly important when data passes through the shared systems or network segments where eight-fold people may have access to the information. In these situations, sensitive data and especially passwords should be encrypted in order to protect it from unintended disclosure or modification.2.4 PROPOSED SYSTEMIn this system security is the term that comes into picture when some important or sensitive information must be protected from an unauthorized access. Hence there must be some way to protect the data from them and even if he hacks the information,The proposed system provides the security and it does not allow unauthorized users to access the secret files.As per the ISO standards the security parameters areConfidentialityAuthenticationIntegrityKey distributionAccess obtainCONFIDENTIALITYConfidentiality is the protection of patrimonial data from peaceful attacks. It can protect the data from unauthorized disclosure.AUTHENTICATIONA process used to verify the integrity of the transmitted data, especially a message. It is the process of proving ones indistingu ishability to someone else.INTEGRITYThe sender and the receiver want to ensure that the content of their communication is not altered during transmission. advert DISTRIBUTIONKey distribution can be defined as a term that refers to means of delivering a key to the communicating parties, without allowing others to see the key. penetration CONTROLIt is a ability to limit and control the access to host systems and applications via communication links.3.Literature ReviewThis project emphasis design and evaluates a computer-based system using appropriate process and tools. Most of the assiduity wide routers in the network implement their functionality in hardware and therefore we believe that hardware based routers are more efficient than a software-based router implementation besides that most of the work is in the research community which will be performed, using software-based routers utilizing off-the-shelf PCs. heterogeneous works have to be seek which evaluates different protocol stack, however none of them use hardware-based routers, has such a wide range of metrics, and none investigated mechanisms.My research methodology emphasis surveys, forums from the internet and articles from IEEE (Institute of electric and Electronics EngineersorIEEE) a quantitative approach in advance technology. I also consider various other thesis and books which are best suitable for my project. here following are the network related definitions, and few protocols from application layer, network and internet layer also discussed which in truth gives clear idea of understanding the concepts.3.1 IPSec StandardsIPSec is genuinely a collection of techniques and protocols it is not defined in a single Internet standard. Instead, a collection of RFCs defines the architecture, services and specific protocols used in IPSec. Some of the most important of these are shown belowRFC 2401 Security Architecture for the Internet Protocol(IPSec overview)The main IPSec document describes the a rchitecture and general operation of the technology, and showing how the different components fit together.RFC 2402 IP Authentication HeaderIt defines the IPSec Authentication Header (AH) protocol used for ensuring data integrity and origin verification.RFC 2403 The Use of HMAC-MD5-96 within ESP and AHDescribes a particular encryption algorithm for use by AH and ESP called Message Digest 5 (MD5), HMAC variant.RFC 2404 The Use of HMAC-SHA-1-96 within ESP and AHDescribes a particular encryption algorithm for use by AH and ESP called Secure Hash Algorithm 1 (SHA-1), HMAC variant.RFC 2406 IP Encapsulating and Security payload (ESP)It describes the IPSec Encapsulation Security Payload (ESP) protocol that provides data encryption for confidentiality.RFC 2408 Internet Security Association and Key Management Protocol (ISAKMP)It defines methods for exchanging keys and negotiating security associations.RFC 2409 The Internet Key Exchange (IKE)Describes the Internet Key Exchange (IKE) protocol used to negotiate security associations and exchange keys between devices for secure communications. It is based on ISAKMP and OAKLEY.RFC 2412 The OAKLEY Key Determination ProtocolIt describes a generic protocol for key exchange.RFC 2131 Dynamic Host Configuration Protocol (DHCP) DHCP allows a host to obtain an IP address automatically, as well as to learn additional information about subnet mask, the address of its first-hop router, and the address of its local DNS server.RFC 2131 RFC 3022 Network Address Translation (NAT)-In an attempt to provide transparent routing to hosts, NAT devices are used to connect an quarantined address realm with private unregistered addresses to an external realm with globally unique registered addresses.Domain Name System (DNS) It is a hierarchical naming system for computers, services, or any resource connected to the Internet or a private network. It associates various other information with domain label assigned to from each one of the participa nts. Most importantly, it translates domain names meaningful to humans into the numerical (binary) identifiers associated with networking equipment for the purpose of locating and addressing these devices worldwide. For example, www.example.com translates to 208.77.188.166.Windows Internet Name Service (WINS) It is Microsofts implementation of NetBIOS Name Service (NBNS), a name server and service for NetBIOS computer names. Effectively WINS is to NetBIOS names, like DNS is to domain names in fact its a central mapping of host names to network addresses. Like DNS it is broken into two parts, a Server Service (that manages the encoded Jet Database, server to server replication, service requests, and conflicts) and a TCP/IP customer component which manages the clients registration and renewal of names, and takes care of queries.VPN (Virtual Private Network) It is a virtual computer network that exists over the top of an existing network. The purpose of a VPN is to allow communication s between systems connected to the VPN using an existing shared network infrastructure as the transport, without the VPN network be aware of the existence of the underlying network backbone or without the VPN interfering with other network traffic on the backbone. A VPN between two networks is a great deal referred to as a VPN Tunnel. Most VPN technologies can be separated into two broad categories, Secure VPNs and Trusted VPNs.Internet Protocol version 6 (IPv6)It is the following-generation Internet Protocol version designated as the transposition to IPv4. It is an Internet Layer protocol for packet-switched internetworks. The main driving force for the redesign of Internet Protocol was the foreseeable IPv4 address exhaustion. IPv6 was defined in December 1998 by the Internet Engineering Task Force (IETF) with the publication of an Internet standard specification,RFC 2460.IPv6 has a vastly larger address space than IPv4. This results from the use of a 128-bit address, whereas I Pv4 uses only 32 bits. This expansion provides flexibility in allocating addresses and routing traffic and eliminates the primary need for network address translation (NAT), which gained general deployment as an effort to alleviate IPv4 address exhaustion. Due to its security and flexibility entire Internet will be deployed byIPv6 in 2012 as expected.TunnellingIn computer networks tunnelling protocol (delivery protocol) encapsulates the different payload protocol i.e., It carries a payload over an incompatible delivery-network. It can also provide a secure path through an untrusted network without any data loss. take Layer Security (TLS)Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), are cryptographic protocols that provide security for communications over networks such as the Internet. TLS and SSL encrypt the segments of network connections at the Transport Layer end-to-end.EncryptionIn cryptography, encryption is the process of transforming informa tion (referred to as plaintext) using an algorithm (called cipher) to make it indecipherable to anyone except those possessing special knowledge, usually referred to as a key. The result of the process is encrypted information (in cryptography, referred to as cipher text).In many contexts, the word encryption also implicitly refers to the reverse process, decryption.Internet Key ExchangeInternet Key Exchange (IKE or IKEv2) is the protocol used to set up a security association (SA) in the IPSec protocol suite. IKE uses a Diffie-Hellman key exchange to set up a shared posing secret, from which cryptographic keys are derived. Public key techniques or, alternatively, a pre-shared key, are used to mutually authenticate the communicating parties.4.IPSec System ArchitectureAuthentication Header and Encapsulating Security Payload are commonly called protocols, though this is another case where the validity of this term is debatable. They are not really distinct protocols but are implement ed as headers that are inserted into IP datagrams, as we will see. They thus do the grunt work of IPSec, and can be used together to provide both authentication and privacy.IPSec protocolsThe IPSec protocol family consists of two protocols Authentication Header (AH) andEncapsulated Security Payload (ESP). Both these protocols are independent IP. AH is the IP protocol 51 and ESP is the IP protocol 50Authentication HeaderThis is a member of the IPSec protocol suite. Authentication Header provides connectionless data integrity and data origin authentication of IP packets. Further, it can also provide protection against the replay attacks by using the sliding window technique and by discarding the old packets. Authentication Header also gives protection for the IP payload and all the header fields of an IP datagram.AH generally operates on the stop of IP, by using the IP protocol name 51.An AH packet draw is shown below which describes how an AH packet can be constructed and interpret edField meaningsNext headerThis field is an 8-bit field that mainly identifies the type of the next payload obtained after the Authentication Header. The value of this field can be chosen from the set of defined IP Protocol Numbers.RESERVEDThese fields are usually reserved for the future use.Payload lengthThis defines the size of Authentication Header packet.Sequence numberThis field represents a monotonically increasing number which is used to prevent certain replay attacks.Security parameters index (SPI)This field is used to identify the security parameters, in combination with the IP address, and then identify the security association techniques implemented with this packet.Authentication dataThis field contains the integrity check value (ICV) which is necessary to authenticate the packet. This field may also contain padding.Encapsulating Security PayloadESP which can be expanded as Encapsulating Security Payload is a member belonging of the IPSec protocol suite. IPSec achieves i ntegrity, origin authenticity, and confidentiality protection of packets. This protocol also supports encryption-only and authentication-only configurations. However usage of only encryption technique without authentication is not recommended because it is termed insecure.ESP does not protect the IP packet header like the Authentication Header (AH) does. The packet diagram below shows how an ESP packet is constructed and interpretedField meaningsSecurity parameteNetwork System for Secure CommunicationNetwork System for Secure CommunicationMethodologyThe main methodology involved behind this research project is to provide the importance of such technology from professionals and well referred articles. Some of the general interviews will be added to the project with details showing their interest towards the current technology and also the change they see in communicating with the new technology.It on the hands of the components of IP Security that contribute to this level of secure c ommunicationThe IP Security (IPSec) Driver is used to monitor, filter, and secures the traffic throughout the system.The (ISAKMP/Oakley) abbreviated as Internet Security Association Key Management Protocol performs key exchange and management functions that oversee security issues between hosts, and provide keys which can be used with security algorithms.The IP Security Policy and the Security Associations are derived from those policies that define the security environment where two hosts can communicate.The function of Security Association API is to provide the interface between the IPSec driver, the Policy Agent and the ISAKMP.The function of the management tools is to create policies, monitor IP Security statistics, and log IP Security events.The main methodologies which are under consideration for this project are Classical encryption technologies, IP sec Tunnel, IP sec VPN, Internet Key Exchange methods, Block Cipher Data Encryption, Advanced Encryption, Symmetric ciphers, Pu blic private key functions, Digital signature etc, which have suggested me to design a better system.ImplementationThe main reason behind selecting IPSec is that it so powerful that it provides security to IP layer, and also forms the basis for all the other TCP/IP protocols. This is generally composed of two protocolsAuthentication Header (AH)Encapsulating Security Payload (ESP)IPSec Implementation MethodsIPSec is comprised of several implementations architectures which are defined in RFC 2401. The IPSec implementation also depends on various factors including the version of IP used (v4 versus v6), the basic requirements of the application and other factors.End Host ImplementationImplementing IPSec in all host devices provides the most flexibility and security. It enables end-to-end security between any two devices on the network.Router ImplementationRouter implementation however is a much simpler task since we only make changes to a few routers instead of hundreds or thousands of clients. It only provides protection between pairs of routers that implement IPSec, but this may be sufficient for certain applications such as virtual private networks (VPNs).The idea will be implemented after proper testing of various available methodologies. The current strategy for implementation is as follows. We use certain open source softwares which provide encryption and decryption methods and authentication. In the actual system, the user is asked to enter details of files to be sent and also some other details about the password and the public keys if included. The required software are used in a way which helps to run a smooth process and secure operation.CONTENTSAcknowledgementI owe many thanks to people who helped supported me in doing my dissertation.Firstly, I would like to express my immense gratitude to my respected professor Mr. Dr. XXX, YYYY University, London for his support and motivation that has helped me to come up with this project.He supported me when i ts needed and suggested me in understanding various methodologies in my project. He also took care of my project with attention to achieve my goal.I thank to my Institution and faculty members for giving me an opportunity to do my dissertation and also for library, computer lab facilities for doing my dissertation to achieve practical results which can resolve my project related issues.I also extend my Heart full thanks to my family friends.I owe my special thanks to my Dad and his colleagues who gave me suggestions on doing my Dissertation.AbstractIn the present system the network helps a particular organization to share the data by using external devices. The external devices are used to carry the data. The existing system cannot provide security, which allows an unauthorized user to access the secret files. It also cannot share a single costly printer. Many interrupts may occur within the system. Though it is advantageous we have numerous disadvantageous, somebody writes a progr am and can make the costly printer to misprint the data. Similarly some unauthorized user may get access over the network and may perform any illegal functions like deleting some of the sensitive informationSecurity is the term that comes into picture when some important or sensitive information must be protected from an unauthorized access. Hence there must be some way to protect the data from them and even if he hacks the information because he should not be able to understand whats the actual information in the file, which is the main intention of the project. The project is designed to protect the sensitive information while it is in transaction in the network. There are many chances that an unauthorized person can have an access over the network in some way and can access this sensitive information. My main topic focuses onIPSec(Internet Protocol Security) is an extension to the IP protocol specified byIETFwhich provides security to the IP and the upper-layer protocols and cryp tography in a network sharing system. It was first developed for the new IPv6 standard and then back ported to IPv4. The IPSec architecture is described in theIPSecuses two different protocols AH (Authentication Header) and ESP (Encapsulating security payload) to ensure the authentication, integrity and confidentiality of the communication. It uses strong cryptography to provide both authentication and encryption services. Authentication ensures that packets are from the right sender and have not been altered in transit. Encryption prevents unauthorised reading of packet contents. 2Cryptography is the technique used to secure the data while they are in transactions. Encryption and Decryption are two techniques used under cryptography technology. Data cryptography is the art of securing the resource that is shared among the applications. The main idea behind the design is to provide a secured communication between the networks showing network level performance practically by differ entiating different operating system which can ensure the security, authenticity by considering, analyzing and testing any best available methodologies.1. IntroductionBusinesses today are focused on the importance of securing customer and business data. Increasing regulatory requirements are driving need for security of data.There have been many methods which have evolved over the years to address the need for security. Many of the methods are focused at the higher layers of the OSI protocol stack, thus compensating the IPs lack in resolving security issues. These solutions can be implemented in certain situations, but they cannot be generalized because they are particularly too many applications. For example, Secure Sockets Layer (SSL) can be used for certain applications like World Wide Web access or FTP, but there are many other applications which cannot be resolved with this type of security.A solution is required to allow security at the IP level was very necessary so that all higher-layer protocols in TCP/IP could take advantage of it. When the decision was made to develop a new version of IP (IPv6), this was the golden opportunity to resolve not just the addressing problems in the older IPv4, but also resolve lack of security issues as well. Later a new security technology was developed with IPv6 in mind, but since IPv6 has taken long time to develop, and thus a solution was designed to be usable for both IPv4 and IPv6.The technology which brings a secure communications to the Internet Protocol is known as IP Security, commonly abbreviated as IPSec.IPSecservices allow users to build secure tunnels through certain networks. All the data that passes through the entrusted net is encrypted by theIPSECgateway machine and decrypted by the gateway at the other end. The result obtained is a Virtual Private Network or VPN. This network is effectively private even though it includes machines at several different sites which are connected by the insecure Internet. Cryptography technique is used to secure the data while they are in transactions. Encryption and Decryption are two techniques which are used under cryptography technology. Data cryptography is the art of securing the resource that is shared among the applications.The Encryption and Decryption are termed as two powerful security technologies that are widely implemented to protect the data from loss and deliberate compromise. In this project the networking allows the company to share files or data without using certain external devices. Some unauthorized users may get access over the network and perform some illegal functions in certain cases like deleting files while the transaction is still on at that time encryption and then decryption techniques are implemented to secure the data. Many other attacks in cryptography are considered which lead me to research on different types of IPSec implementation methodologies in order to design the best model such that it may be suitable for th e present trend of networking systems also form a platform to enable communication to the outside world. Thus in orders to implement IPSec, certain modifications are required to the systems communications routines and certain new systems processes conduct secret key negotiations.What is IPSec?An extension to the IP protocol is considered as IPSec which provides high level security to the IP and to the upper-layer protocols. This was initially developed for the new IPv6 standard and then was back ported to IPv4. IPSec provides the following security services data origin authentication, connectionless integrity, replay protection, data confidentiality, limited traffic flow confidentiality, and key negotiation and management. It has been made mandatory by the IETF for the use of IPSec wherever feasible the standards documents are close to completion, and there are numerous implementations.Overview of IPSec ArchitectureThe IPSec suite defined as a framework of open standards. The follow ing protocols are used by IPSec to perform various functions. 23IPSecprovides three main facilities which are explained belowInternet key exchange(IKE and IKEv2) This is used to set up a security association (SA) which can be done by handling negotiation of protocols and algorithms and generating the encryption and authentication keys which can be used by IPSec.45Authentication Header (AH)This is used to provide connectionless integrity and data origin authentication for IP datagrams and also provides protection against replay attacks.67Encapsulating Security Payload (ESP)This is used to provide confidentiality, data origin authentication, connectionless integrity, anti-replay service, and limited traffic flow confidentiality. 9Both authentication and encryption are generally desired in this mechanism.Assure that unauthorized users do not penetrate the virtual private networkAssure that eavesdroppers on the Internet cannot read messages sent over the virtual private network.Since bo th the above features are generally desirable, most implementations are likely to use ESP rather than AH.Security AssociationThe security Association mechanism is used for authentication (AH) and confidentiality (ESP)A one way relationship between a sender and a receiver that affords security services to the traffic carried on it.Security services are afforded to an SA for the use of AH or ESP but not both.SA identified by three parametersSecurity Parameter Index (SPI)IP destination addressSecurity protocol identifierOverview of IPSec Services and FunctionsIPSec is not only assumed as a single protocol, but is rather considered as a set of services and protocols which provide a complete security solution to the IP network. These services and protocols are combined to provide various types of protection. Since IPSec usually works at the IP layer, it provides protection for any higher layer TCP/IP application or protocol without using any additional security methods, which is consider ed as a major strength for its implementation. General types of protection services offered by IPSec includeEncryption of user data to achieve privacy.Authentication and message integrity has to be achieved to ensure that it is not changed on route.Protection against certain types of security attacks, such as replay attacks.The ability of the devices to negotiate the security algorithms and keys required in order to meet their security needs.wo security modes called tunnel and transport are implemented to meet the various network needs.Features BenefitsIPSec is observed to be transparent by the end users.The users on the security mechanisms need not be trained.IPSec assures security measures for individuals.There is no requirement to change the software on a user or a server system.Strong security measures are applied to the entire traffic crossing the perimeter.2. ObjectiveIPSec is mostly designed in order to encrypt the data between the two systems without any spoofing attacks. I t is a key force of defence against internal and external attacks. However, other than these, there are many other security strategies which have prevented the security attacks. The main idea in my research is to provide a better approach to the implementation of IP Security by analyzing the present methodologies. In the implementation of this design, I am also considering different operating systems to provide a better approach towards security which can prove to be good in ideal ways. The design of such an approach is helpful in restricting any unauthorised access to the network and also helps in providing a secure and authenticated access.The main idea behind the design is to provide a secured communication between the networks independent of the operating system which can ensure the security, authenticity by considering, analyzing and testing any two best available methodologies.In my overview of RFCs available in the Internet such as Cryptography the receiver end of a particula r communication channel is not aware of the sender unless the sender transmits some information with private and public keys with cipher text which can prove his authenticity. Now the receiver sends the same package with his signature and then the receiver is also authenticated mutually.Attacks may occur in different ways. There are also many ways where in such communications can be detected and using techniques like eavesdropping or sniffing or man in the middle attack. These are the three major problems for secure communications. In my research, I will attempt to design a procedure which can be easily followed in order to overcome such problems.There are many techniques available now which are better than normal communication. The major problem in such techniques is the implementation of man in the middle attack. There have been many advances to try and rectify the problems but there has always been a flaw in the design. My research is to design a system using the current technolo gies used to encrypt and authenticate. These techniques play a major role in the implementation of IP Security.The major interest would be in areas like encryption, decryption and authentication. Additions will be done to this research as it is implemented. The goal is to use research existing systems and to suggest a system which makes it even hard to break. It is not 100% immune to attacks but the attack may take longer to break the system than the present rate. This system will also be very safe and will be easy to use in daily life rather than something with a dozen processing steps to be followed.2.2 SCOPEWith the rapid development of Multimedia data management technologies over the internet there is need to concern about the internet there is need to concern about the security and privacy of information. In multimedia document, dissipation and sharing of data is becoming a common practice for internet based application and enterprises.As the internet forms the open source the present for all users securityForms the critical issue. Hence the transfer of information over the internet forms the critical issue. At the present situations the cryptographic techniques are used for providing SECURITY.2.3 PROJECT PERSPECTIVEThe project Network system for Secure Communication is totally enhanced with the features that enable us to feel the real-time environment.Todays world is mostly employing the latest networking techniques instead of using stand-alone PCs. IPSec tunnelling or Encryption, information scrambling technology is an important security tool. By properly applying, it can provide a secure communication channel even when the underlying system and network infrastructure is not secure. This is particularly important when data passes through the shared systems or network segments where multiple people may have access to the information. In these situations, sensitive data and especially passwords should be encrypted in order to protect it from unintended di sclosure or modification.2.4 PROPOSED SYSTEMIn this system security is the term that comes into picture when some important or sensitive information must be protected from an unauthorized access. Hence there must be some way to protect the data from them and even if he hacks the information,The proposed system provides the security and it does not allow unauthorized users to access the secret files.As per the ISO standards the security parameters areConfidentialityAuthenticationIntegrityKey distributionAccess controlCONFIDENTIALITYConfidentiality is the protection of transmitted data from passive attacks. It can protect the data from unauthorized disclosure.AUTHENTICATIONA process used to verify the integrity of the transmitted data, especially a message. It is the process of proving ones identity to someone else.INTEGRITYThe sender and the receiver want to ensure that the content of their communication is not altered during transmission.KEY DISTRIBUTIONKey distribution can be defin ed as a term that refers to means of delivering a key to the communicating parties, without allowing others to see the key.ACCESS CONTROLIt is a ability to limit and control the access to host systems and applications via communication links.3.Literature ReviewThis project emphasis design and evaluates a computer-based system using appropriate process and tools. Most of the industry wide routers in the network implement their functionality in hardware and therefore we believe that hardware based routers are more efficient than a software-based router implementation besides that most of the work is in the research community which will be performed, using software-based routers utilizing off-the-shelf PCs. Various works have to be attempted which evaluates different protocol stack, however none of them use hardware-based routers, has such a wide range of metrics, and none investigated mechanisms.My research methodology emphasis surveys, forums from the internet and articles from IEEE (Institute of Electrical and Electronics EngineersorIEEE) a quantitative approach in advance technology. I also consider various other thesis and books which are best suitable for my project.Here following are the network related definitions, and few protocols from application layer, network and internet layer also discussed which actually gives clear idea of understanding the concepts.3.1 IPSec StandardsIPSec is actually a collection of techniques and protocols it is not defined in a single Internet standard. Instead, a collection of RFCs defines the architecture, services and specific protocols used in IPSec. Some of the most important of these are shown belowRFC 2401 Security Architecture for the Internet Protocol(IPSec overview)The main IPSec document describes the architecture and general operation of the technology, and showing how the different components fit together.RFC 2402 IP Authentication HeaderIt defines the IPSec Authentication Header (AH) protocol used for ensuring d ata integrity and origin verification.RFC 2403 The Use of HMAC-MD5-96 within ESP and AHDescribes a particular encryption algorithm for use by AH and ESP called Message Digest 5 (MD5), HMAC variant.RFC 2404 The Use of HMAC-SHA-1-96 within ESP and AHDescribes a particular encryption algorithm for use by AH and ESP called Secure Hash Algorithm 1 (SHA-1), HMAC variant.RFC 2406 IP Encapsulating and Security payload (ESP)It describes the IPSec Encapsulation Security Payload (ESP) protocol that provides data encryption for confidentiality.RFC 2408 Internet Security Association and Key Management Protocol (ISAKMP)It defines methods for exchanging keys and negotiating security associations.RFC 2409 The Internet Key Exchange (IKE)Describes the Internet Key Exchange (IKE) protocol used to negotiate security associations and exchange keys between devices for secure communications. It is based on ISAKMP and OAKLEY.RFC 2412 The OAKLEY Key Determination ProtocolIt describes a generic protocol for key exchange.RFC 2131 Dynamic Host Configuration Protocol (DHCP) DHCP allows a host to obtain an IP address automatically, as well as to learn additional information about subnet mask, the address of its first-hop router, and the address of its local DNS server.RFC 2131 RFC 3022 Network Address Translation (NAT)-In an attempt to provide transparent routing to hosts, NAT devices are used to connect an isolated address realm with private unregistered addresses to an external realm with globally unique registered addresses.Domain Name System (DNS) It is a hierarchical naming system for computers, services, or any resource connected to the Internet or a private network. It associates various other information with domain names assigned to each of the participants. Most importantly, it translates domain names meaningful to humans into the numerical (binary) identifiers associated with networking equipment for the purpose of locating and addressing these devices worldwide. For example, ww w.example.com translates to 208.77.188.166.Windows Internet Name Service (WINS) It is Microsofts implementation of NetBIOS Name Service (NBNS), a name server and service for NetBIOS computer names. Effectively WINS is to NetBIOS names, like DNS is to domain names in fact its a central mapping of host names to network addresses. Like DNS it is broken into two parts, a Server Service (that manages the encoded Jet Database, server to server replication, service requests, and conflicts) and a TCP/IP Client component which manages the clients registration and renewal of names, and takes care of queries.VPN (Virtual Private Network) It is a virtual computer network that exists over the top of an existing network. The purpose of a VPN is to allow communications between systems connected to the VPN using an existing shared network infrastructure as the transport, without the VPN network being aware of the existence of the underlying network backbone or without the VPN interfering with other network traffic on the backbone. A VPN between two networks is often referred to as a VPN Tunnel. Most VPN technologies can be separated into two broad categories, Secure VPNs and Trusted VPNs.Internet Protocol version 6 (IPv6)It is the next-generation Internet Protocol version designated as the successor to IPv4. It is an Internet Layer protocol for packet-switched internetworks. The main driving force for the redesign of Internet Protocol was the foreseeable IPv4 address exhaustion. IPv6 was defined in December 1998 by the Internet Engineering Task Force (IETF) with the publication of an Internet standard specification,RFC 2460.IPv6 has a vastly larger address space than IPv4. This results from the use of a 128-bit address, whereas IPv4 uses only 32 bits. This expansion provides flexibility in allocating addresses and routing traffic and eliminates the primary need for network address translation (NAT), which gained widespread deployment as an effort to alleviate IPv4 address exh austion. Due to its security and flexibility entire Internet will be deployed byIPv6 in 2012 as expected.TunnellingIn computer networks tunnelling protocol (delivery protocol) encapsulates the different payload protocol i.e., It carries a payload over an incompatible delivery-network. It can also provide a secure path through an untrusted network without any data loss.Transport Layer Security (TLS)Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), are cryptographic protocols that provide security for communications over networks such as the Internet. TLS and SSL encrypt the segments of network connections at the Transport Layer end-to-end.EncryptionIn cryptography, encryption is the process of transforming information (referred to as plaintext) using an algorithm (called cipher) to make it unreadable to anyone except those possessing special knowledge, usually referred to as a key. The result of the process is encrypted information (in cryptography, refe rred to as cipher text).In many contexts, the word encryption also implicitly refers to the reverse process, decryption.Internet Key ExchangeInternet Key Exchange (IKE or IKEv2) is the protocol used to set up a security association (SA) in the IPSec protocol suite. IKE uses a Diffie-Hellman key exchange to set up a shared session secret, from which cryptographic keys are derived. Public key techniques or, alternatively, a pre-shared key, are used to mutually authenticate the communicating parties.4.IPSec System ArchitectureAuthentication Header and Encapsulating Security Payload are commonly called protocols, though this is another case where the validity of this term is debatable. They are not really distinct protocols but are implemented as headers that are inserted into IP datagrams, as we will see. They thus do the grunt work of IPSec, and can be used together to provide both authentication and privacy.IPSec protocolsThe IPSec protocol family consists of two protocols Authentica tion Header (AH) andEncapsulated Security Payload (ESP). Both these protocols are independent IP. AH is the IP protocol 51 and ESP is the IP protocol 50Authentication HeaderThis is a member of the IPSec protocol suite. Authentication Header provides connectionless data integrity and data origin authentication of IP packets. Further, it can also provide protection against the replay attacks by using the sliding window technique and by discarding the old packets. Authentication Header also gives protection for the IP payload and all the header fields of an IP datagram.AH generally operates on the stop of IP, by using the IP protocol number 51.An AH packet diagram is shown below which describes how an AH packet can be constructed and interpretedField meaningsNext headerThis field is an 8-bit field that mainly identifies the type of the next payload obtained after the Authentication Header. The value of this field can be chosen from the set of defined IP Protocol Numbers.RESERVEDThese f ields are usually reserved for the future use.Payload lengthThis defines the size of Authentication Header packet.Sequence numberThis field represents a monotonically increasing number which is used to prevent certain replay attacks.Security parameters index (SPI)This field is used to identify the security parameters, in combination with the IP address, and then identify the security association techniques implemented with this packet.Authentication dataThis field contains the integrity check value (ICV) which is necessary to authenticate the packet. This field may also contain padding.Encapsulating Security PayloadESP which can be expanded as Encapsulating Security Payload is a member belonging of the IPSec protocol suite. IPSec achieves integrity, origin authenticity, and confidentiality protection of packets. This protocol also supports encryption-only and authentication-only configurations. However usage of only encryption technique without authentication is not recommended beca use it is termed insecure.ESP does not protect the IP packet header like the Authentication Header (AH) does. The packet diagram below shows how an ESP packet is constructed and interpretedField meaningsSecurity paramete