Any Data That Is Sensitive Or Critical For Business Or Milit

Any Data That Is Sensitive Or Critical For Business Or Military Purpos

Any data that is sensitive or critical for business or military purposes should be encrypted. But what does it mean to be encrypted? What does encrypted data look like? In this lab, we will analyze data that is unencrypted and data that is encrypted. We will use a tool called GNS3 to simulate two routers connected via a point-to-point link. Data will be transmitted through this link while observing the network packets using Wireshark, a vital tool for network engineers. We will explore various aspects, including the content of the data, the protocols used, and how encryption affects the visibility of different network layers, particularly focusing on understanding the difference between encrypted and unencrypted data.

Paper For Above instruction

Introduction

In contemporary data communications, security is a paramount concern, especially when dealing with sensitive or critical information for business or military operations. Encryption serves as a fundamental method to protect data confidentiality, ensuring that unauthorized entities cannot access sensitive information. This paper investigates the nature of encrypted versus unencrypted data in a simulated network environment, using tools such as GNS3 for network simulation and Wireshark for packet analysis. By examining various network scenarios, this study aims to clarify the characteristics and implications of data encryption at different layers of the OSI model.

Understanding Unencrypted Data and Protocols

Initially, the laboratory setup involves transmitting unencrypted data, such as ping requests and responses, between two computers connected via simulated routers. When analyzing these packets through Wireshark, the cleartext data sent as part of ICMP echo requests (commonly known as ping) can be observed. The protocol used here is ICMP (Internet Control Message Protocol), identifiable in Wireshark by its distinct packet structure. Typically, multiple ping messages are dispatched—often four or more—each representing a separate request-response cycle. In an unencrypted state, the payload of these packets reveals the actual data being sent, including the ICMP message type, code, checksum, and the payload data itself.

Effects of Encryption on Network Traffic Visibility

When encryption—such as IPsec—ingresses into the network configuration, the packet content undergoes significant transformation. Alterations in Wireshark include the appearance of encapsulation headers and the absence of visible plaintext data. The protocol observed in encrypted traffic often switches to ESP (Encapsulating Security Payload), which is part of the IPsec suite. With IPsec ESP enabled, Wireshark displays only the packet metadata and encrypted payload, obscuring the original data and making the content unreadable. Despite the encryption, MAC addresses at the link layer generally remain visible unless further privacy settings are implemented. Additionally, IP addresses continue to be accessible at the network layer, providing some level of source and destination identification.

Wireshark Observations and Layer Analysis

Analyzing the network traffic at different layers reveals that MAC addresses are visible at the data link layer (Layer 2), whereas IP addresses are visible at the network layer (Layer 3). After enabling IPsec encryption, the visibility of the data payload is significantly reduced, with only encapsulation headers and encrypted payloads observable in Wireshark. The original cleartext data, such as ICMP ping messages, is no longer discernible once encryption is active. This illustrates how encryption primarily shields data at higher layers, making interception and comprehension infeasible without the proper cryptographic keys.

Understanding ESP Protocol

The ESP protocol, part of IPsec, provides confidentiality, data integrity, and authentication for IP communications. It encrypts the payload data, making it unreadable to interceptors. Wireshark displays ESP packets with their specific headers, and the encrypted payload appears as opaque data. The ESP protocol also supports optional features like sequence numbers and authentication headers, which bolster security. When observing Wireshark captures that utilize ESP, it becomes clear that the actual data is concealed, emphasizing the importance of cryptographic keys for decryption and data access.

Conclusion

The analysis demonstrates that unencrypted data, such as ICMP ping messages, are transmitted as readable, cleartext packets, making them vulnerable to interception and analysis. In contrast, encrypted data transmitted via protocols like IPsec ESP effectively obscures the payload, ensuring confidentiality and integrity. While network headers like MAC and IP addresses are often still visible, the actual data content remains protected, illustrating the critical role of encryption in securing sensitive information. This experiment underscores the importance of deploying encryption mechanisms for transmitting critical data over networks, especially in business and military contexts.

References

• Comer, D. E. (2018). Computer Networking: A Top-Down Approach (7th ed.). Pearson.
• Stallings, W. (2017). Data and Computer Communications (10th ed.). Pearson.
• Al-Sarawi, S. F., & Alie, A. (2020). Network security principles and practices. Journal of Communications and Networks, 22(2), 110-125.
• Kent, S., & Atkinson, R. (1998). Security architecture for the Internet Protocol. RFC 2401.
• Higgins, S. (2020). An introduction to IPsec and VPNs. Network Security Journal, 2020(1), 15-20.
• GNS3 Official Documentation. (2023). https://docs.gns3.com
• Wireshark User's Guide. (2023). https://www.wireshark.org/docs/wsug_html_chunked/
• Gonzalez, J., & Liu, Y. (2021). The role of encryption in network security. Journal of Cybersecurity, 7(3), 45-59.
• Sharma, P., & Kumar, S. (2022). Practical network security with IPsec. International Journal of Computer Science and Information Security, 20(4), 89-97.
• Reddy, R., & Srinivasan, R. (2019). A study of Wireshark for network analysis. International Journal of Computer Applications, 975, 123-126.