Security
Terminology
Define the following terms:
1. Authentication – ability to identify who it is
a. ACL – (access control list) is associated w/ a given resource. Describes groups, users, machines and their permissions associated with that particular resource.
i. Token- one time only password key
b. CA- certificate of authority- creates certificates -system or entity trusted to generate and distribute digital certificates. Can be privately used or from a 3rd party e-commerce site. Verifies identity of user. Authentication method.
c. RA- Registration Authority-issues certificates-RA verifies credentials supplied by an agent and then sends the CA an okay to issue a certificate.
d. PKI- Public Key Infrastructure- Policies and behaviors that surround the deployment and management of key pairs. How you issue two keys at one time.
e. Kerberos- Authentication method used by Microsoft. Uses 3 different protocols, listed below
i. TGT- Ticket granting ticket. Allows you to request resources on the network from servers. ii. TGS- Ticket granting server. Accesses a particular network server for tickets. iii. AS- Authentication Server. Equivalent to a morning check-in at security desk of a hotel. Checks the identity of a server.
f. CHAP- Challenge handshake authentication protocol. Was designed to replace the PAP. Communication between server and client proving identity.
i. MS-CHAP- Microsoft CHAP
g. PAP- Password authentication protocol
h. X.509- digital certificate that uniquely identifies a party. Standard structure of a certificate.
i. KDC- Key distribution center
j. Biometrics- Authentications based on human anatomy.
k. Multifactor- Authentication based on 2 valid authentication methods.
l. Mutual Authentication- Client establishes identity to server. Server provides authentication information to client to ensure that illicit servers cannot masquerade as genuine servers. Both parties have to authenticate.
2. Encryption- hiding data using algorithms. protection, method of code, algorithms, formulas
a. Asymmetric keys- pair of key values one public and one private.
b. Symmetric keys- single encryption key generated.
c. DES- Data Encryption standard developed by government.
d. Diffie-hellman- encryption algorithm named after its two creators.
e. IPSec- used for encryption of TCP/IP traffic. Method of encrypting any IP transmissions.
f. PGP- Pretty good privacy- mainly used in email less secure than the PKI.
g. RSA- Rivest-Shamir-Adleman- encryption algorithm named after its 3 creators. Using two pair keys.
h. SSL- Secure Socket Loader- used mainly on web servers to transmit securely via HTTPS://
3. Network protocols and organization
a. DMZ- Demilitarized zone- Zone used for public access. Used with FTP, web servers and DNS servers.
b. IDS- Intrusion Detection System- 2 types: Active and Passive
c. NAT- Network Address Translation- Appends to your logical port. Protects internal hosts. Used with proxy servers. Translates internal IP to Real IP. Uses unique port table. There is 65,000 ports
d. Tunneling- ability to go to 1 point to another as though you are a single proprietary line.
The goal of Clark Consulting remains to help develop a more secure network for Harry and Mae’s Inc. in that vein, Clark Consulting has determined some final additions and changes to the Harry and Mae’s Inc. network. The additions include a Bastion server, Network Intrusion Detection System (NIDS), Host Intrusion Detection System (HIDS) and a Security Information and Event Management (SIEM) server. The changes will primarily revolve around passwords.
RPC: Remote Procedural Call allows a client to invoke services by making a local procedure call, instead of accessing remote services by message passing (sending and receiving messages).
DMZ – Demilitarized Zone - (sometimes referred to as a perimeter network) is a physical or logical subnetwork that contains and exposes an organization's external-facing services to a larger and untrusted network, usually the
A network can be based on either a peer-to-peer level or server-based, also referred to as domain-based. To distinguish the difference, a peer-to-peer network, also known as a workgroup, is a network in which a group of computers are connected together to share resources, such as files, applications, or peripherals. The computers in a peer-to-peer network are peers to one another, meaning no single computer has control over one another. There is also no central location for users to access resources, which means that each individual computer must share their files in order for other computers to have access (Muller, 2003, p.411). “In a peer-to-peer environment, access rights are governed by setting sharing permissions on individual machines.” (Cope, 2002) On the other hand, in a domain-based network, the computers connected together are either servers or clients. All of the other computers connected to the network are called client computers. The server is a dedicated machine that acts as a central location for users to share and access resources. The server controls the level of authority each user has to the shared resources. When logging on to the network, users on client machines are authenticated by the server, based on a user name and password (Lowe, 2004, p.13).
TCP/IP stands for Transmission Control Protocol/Internet Protocol, which is the protocol of the Internet. In a private network, TCP/IP can be used as a communications protocol; the TCP/IP can either be an intranet or extranet. A computer is provided with a copy of the TCP/IP program when it is set up with direct access to the Internet. (“What Is TCP/IP”)
Peer-to-peer is a communications model in which each party has the same capabilities and either party can initiate a communication session. Other models with which it might be contrasted include the client/server model and the master/slave model. In some cases, peer-to-peer communications is implemented by giving each communication node both server and client capabilities. In recent usage, peer-to-peer has come to describe applications in which users can use the Internet to exchange files with each other directly or through a mediating server.
After the above, it allows for initial contact between the users so that they may talk for the first time. Alternatively, this can be used to discuss meeting offline.
4. To communicate with other computers, either one at a time (Instant message) or many at once (chat rooms or discussion groups).
...vantage of the overall network design and implement usable subnets with virtual local area networks. Use encryption and encapsulation to secure communications of public segments to enable extranets and cross-Internet company traffic. Use items such as intrusion detection systems and firewalls to keep unauthorized users out and monitor activity. Taken together, these pieces can make a secure network that is efficient, manageable, and effective.
Authentication: The process of proving one's identity. (The primary forms of host-to-host authentication on the Internet today are name-based or address-based, both of which are notoriously weak.)
Interface, it is used to submit information on the internet. You can get a book
Peer-to-peer (P2P) is a substitute network design to the conventional client-server architecture. P2P networks utilize a decentralised model in which each system, act as a peer, and serve as a client with its own layer of server functionality. A companion plays the role of a client and a server in the meantime. That is, the node can send calls to other nodes, and at the same time respond to approaching calls from other companions in the system. It is different from the traditional client-server model where a client can just send requests to a server and then wait for the server’s response.
...departments makes it easier to keep a more secure network. Third ACL Layer is focus on allowing and denying access between hosts on networks. ACLs are written on both routers and firewalls. The key on creating strong ACLs is to concentrate on both ingress and egress ACLs.
* FTP or File Transfer Protocol. Allows your computer to rapidly retrieve complex files intact from a remote computer and view or save them on your computer.
Rayne, PB, Kulkarni, P, Patil, S & Meshram, BB 2012, ‘Authentication and Authorization:Tool for Ecommerce Security’, Engineering Science and Technology: An International Journal, vol. 2, no. 1, pp. 150-157.