Mis Slides From Chapter 4

Front 1

Telecommunications

Back 1

Transmission of all forms of communication including digital data, voice, fax, sound, and video from one location to another over some type of network

Front 2

Networks

Back 2

A group of computers and peripheral devices connected by a communication channel capable of sharing information and other resources among users

Front 3

Bandwidth

Back 3

Is the carrying capacity of a telecommunications network. (i.e. the size of the telecommunications channel or the pipe)

Front 4

ARPANET

Back 4

(Advanced Research Project Agency Network
Created in the 1960s by DARPA (Defense Advance Research Projects Agency)
Used by government and universities as a means of communicating for research purposes

Front 5

NSFNET

Back 5

(National Science Foundation Network)
Created in 1986 by the National Science Foundation for connecting research institutions
Connected to ARPANET and many others (BITNET, CSNET, etc) to become a major component of the Internet

Front 6

Internet Support

Back 6

Ongoing support comes from many universities, federal and state governments, and national international research institutions and industry

Front 7

Packet Switching

Back 7

Allows millions of users to send large and small chucks of data across the Internet concurrently
Based on the concept of turn taking, packets from each user are alternated in the shared network (below)
Networks connected to the Internet use this concept

Front 8

TCP – Transmission Control Protocol

Back 8

Breaks information into small chucks called data packets
Manages the transfer of the packets from computer to computer
Reassembles data packets into a message at the destination

Front 9

IP – Internet Protocol

Back 9

Controls how data packets are formed
Addresses each packet with the source and destination address
A data packet conforming to the IP spec is called an IP datagram

Front 10

Routers

Back 10

Connect one network to another
Identify each device on a network as unique using IP protocol
Serve as the “Traffic Cop” directing packets to their destination

Front 11

Backbone Network

Back 11

Manages the bulk of network
Typically a higher speed protocol than individual LAN segments (e.g. uses fiber-optic cable which transfers data at 2 gigabits/second vs. LAN speed at 10 megabits/second)

Front 12

Domain

Back 12

Identifies the Website (host)
Comes in many suffixes such as:
.edu (educational institutions)
.org (organizations; non-profit)
.mil (military)
.net (network organizations)
Example: microsoft.com

Front 13

IP Address

Back 13

Each domain is associated with one or more IP addresses
Format: a 32-bit address written as 4 numbers (from 0-255) separated by periods
Example: 1.160.10.240

Front 14

(URL) Uniform Resource Locator

Back 14

Identifies particular Web pages within a domain
Example: http://www.microsoft.com/security/default.mspx

Front 15

Internet Registry

Back 15

Central repository of all Internet-related information
Provides central allocation of all network system identifiers
Managed by Internet Assigned Numbers Authority (IANA)

Front 16

Domain Name System (DNS)

Back 16

Maintained by the Internet Registry
Used to associates hosts or domains with IP addresses
Root DNS database is replicated across the Internet

Front 17

InterNic Registration Service

Back 17

Assigns Internet Domains and IP addresses
Internet Corp. for Assigned Names and Number (ICANN) has responsibility for managing IP Addresses, domain names, and root server system management

Front 18

Modem (stands for Modulate/Demodulate)

Back 18

A modem convert signals back and forth from digital to analog for transmission and receipt between computers
A computer requires a modem to get access to the Internet

Front 19

Internet Service Provider (ISP)

Back 19

These companies provides access to the Internet for a fee
A computer is connected to an ISP through a modem to allow Internet access

Front 20

Network Access Points (NAPs)

Back 20

NAP’s connect ISP’s together
They serve as Internet access points for the ISPs and serve as exchange points for Internet traffic

Front 21

Internet Backbone

Back 21

Collection of main network connections and telecommunications lines that make up the Internet

Front 22

POTS (Plain Old Telephone Service)

Back 22

Also called PSTN Public Switched Telephone Network
Uses a dial-up modem and existing copper telephone wires
Has the slowest transmission rates for access

Front 23

ISDN (Integrated Services Digital Network)

Back 23

A universal digital network standard used around the world
Usually no modem required and uses existing copper wires
Much faster than POTS…requires an exchange within 22k ft.

Front 24

DSL (Digital Subscriber Line)

Back 24

Uses special modulation schemes to fit more data into existing telephone copper wires
Up to 12x faster than ISDN with same distance requirements.
Requires a modem but allows simultaneous phone service

Front 25

Cable Modem

Back 25

Uses cable television coaxial cable to transmit the signal and can be used while simultaneously watching TV
Requires a modem and offers speeds comparable to DSL

Front 26

IoS (Internet over Satellite)

Back 26

Uses a satellite dish to connect a computer to the Internet
IoS is usually slower than land-based options (DSL, Cable)
Many times the only option in remote areas

Front 27

Wireless

Back 27

Fixed wireless access points allow computers with access cards to access ground-based networks (e.g. DSL, cable)
Mobile wireless devices (e.g. phones, PDAs) can access networks using mobile wireless networks (e.g. cellular)

Front 28

T1/T3 (Trunk Level 1 or 3)

Back 28

Dedicated digital lines that are used for high volume traffic by large organizations who purchase from exchange carriers
T1 is 28 times faster than POTS,T3 is 28 times faster than T1

Front 29

ATM (Asynchronous Transfer Mode)

Back 29

A method of transmitting voice, video, and data over high-speed LANS at very fast rates (28 times faster than T3)
Packet-based method with the potential to eliminate routers, allocated bandwidth, and communications media contention

Front 30

SONET (Synchronous Optical Network)

Back 30

Not used for typical business activity
Up to a 1000 times faster than T1
Used in high volume transmission activities

Front 31

Internet Research User Frustration

Back 31

After 1995, increases in personal and business traffic began congesting the network primarily used for research

Front 32

Internet2

Back 32

University Corporation for Advanced Internet Development (UCAID) was formed to lead the design and development of an private high-speed alternative to the public Internet

Front 33

Abilene network backbone

Back 33

A new network has been developed connecting IS researchers by use of GigaPop (Gigabit Point of Presence) network access points to a high-speed private network (currently operating at 10Gbps with a goal of 100Gbps)

Front 34

Hypertext

Back 34

A Web page stored on a Web server
Contains information and links to other related information (hyperlinks)

Front 35

HTML (Hypertext Markup Language)

Back 35

A standard method used to specify the format of Web pages
Uses codes/tags which stipulate how the content should appear to the user

Front 36

Web Browser

Back 36

A software program used to locate and display Web pages
Includes text, graphics, and multimedia content

Front 37

HTTP (Hypertext Transfer Protocol)

Back 37

A protocol used to process user requests for displaying Web pages from a Web server

Front 38

Web Servers

Back 38

A special computer that is specifically designed to store and “serve up” Web pages
This machine contains special hardware and software to perform its many specialized functions

Front 39

Electronic Brochure

Back 39

A display-only site that allows a company to disseminate sales and marketing information

Front 40

Online Ordering

Back 40

A function in addition to Electronic Brochure that allow customers to order and pay for products and service online

Front 41

Electronic Marketplaces

Back 41

A mechanism to bring together buyers and sellers providing a vehicle for them to trade with each other (e.g. eBay)

Front 42

Online Customer Service

Back 42

Used to enhance traditional customer service but providing information on the Website to help customers resolve issues

Front 43

IS Security

Back 43

Precautions taken to keep all aspects of information systems safe from unauthorized use access

Front 44

Managerial Methods

Back 44

Several techniques are commonly used to manage information systems security:
Risk Assessment
Controlling Access
Organizational Policies and Procedures
Backups and Recovery

Front 45

Security Resources

Back 45

A number of organizations exist to raise awareness, research, develop standards, and advise on solutions for Internet security (e.g. CERT/CC, CSD, CSIT)

Front 46

Security Audit

Back 46

Security Audit identifies all aspects of information systems and business processes that use them

Front 47

Risk Analysis

Back 47

assesses the value of assets being protected
Alternatives based on

Front 48

Risk Analysis:

Back 48

Risk Reduction, Risk Acceptance, Risk Transference

Front 49

Risk Reduction

Back 49

implementing active counter measures to protect systems (e.g. firewalls)

Front 50

Risk Acceptance

Back 50

implementing no counter measures

Front 51

Risk Transference

Back 51

transferring risk…buying insurance

Front 52

Controlling Access

Back 52

Keeping information safe by only allowing access to those that require it to do their jobs

Front 53

Authentication

Back 53

verifying identity before granting access (e.g. passwords)

Front 54

Access Control

Back 54

Granting access to only those system areas where the user is authorized (e.g. accouting)

Front 55

Organizational Policies and Procedures

Acceptable Use Policies

Back 55

formally document how systems should be used, for what, and penalties for non-compliance

Front 56

Backups

Back 56

taking periodic snapshots of critical systems data and storing in a safe place or system (e.g. backup tape)

Front 57

Disaster Recovery Plans

Back 57

spell out detailed procedures to be used by the organization to restore access to critical business systems (e.g. viruses or fire)

Front 58

Disaster Recovery

Back 58

executing Disaster Recovery procedures using backups to restore the system to the last backup if it was totally lost

Front 59

Security Threats

Back 59

Today we hear about many security breaches that affect organizations and individuals.

Some recently in the news:
Identity Theft, Denial of Service, & Spyware, Spam, Wireless Access, Viruses

Front 60

Identity Theft

Back 60

gaining access to some ones personal information allowing them to imitate you (stolen laptop)

Front 61

Denial of Service

Back 61

attacks on websites using zombie computers that overwhelm the site and shuts it down

Front 62

Security Technologies

Back 62

Companies and research organizations continue to develop and refine technologies to prevent security breaches. Some Include:
Firewalls
Biometrics
VPN and Encryption

Front 63

Firewalls

Back 63

A system of software, hardware or both designed to detect intrusion and prevent unauthorized access to or from a private network

Front 64

Packet Filter

Back 64

examine each packet entering and leaving network and accept/reject based on rules

Front 65

Application Level Control

Back 65

Performs certain security measures based on a specific application (e.g. file transfer)

Front 66

Circuit Level Control

Back 66

detects certain types of connections or circuits on either side of the firewall

Front 67

Proxy Server

Back 67

acts as, or appears as an alternative server that hides the true network addresses

Front 68

Spyware

Back 68

Any software that covertly gathers information about a user through an Internet connection without the users knowledge
Problems: uses memory resources, uses bandwidth, and can cause system instability
Prevention: Firewalls and Spyware software

Front 69

Spam

Back 69

Electronic junk mail or junk newsgroup postings usually for purpose of advertising for some product and/or service
Problems: nuisance, wastes time deleting, uses storage
Prevention: Spam Blocker software

Front 70

Cookies

Back 70

A message passed to a browser from a Web server. Used by legitimate programs to store state and user information
Problems: can be used to track user activities
Prevention: browser settings, firewall

Front 71

Biometrics

Back 71

A sophisticated authentication technique used to restrict access to systems, data and/or facilities
Uses biological characteristics to identify individuals such as fingerprints, retinal patterns in the eye, etc. that are not easily counterfeited
Has great promise in providing high security

Front 72

Unauthorized Access to Wireless Networks

Back 72

With the prevalence in use of wireless networks this threat is increasing

Front 73

Problems - Drive-by hacking

Back 73

an attacker accesses the network, intercepts data from it, and can use network services and/or sends attack instructions without entering the building

Front 74

Prevention - Encryption

Back 74

Prevention - Encryption between network and user devices

Front 75

VPN (Virtual Private Network)

Back 75

Called a secure tunnel
Dynamically generated network connection to connect users or nodes
This approach uses both authentication and encryption
Used extensively for remote access by employees

Front 76

Encryption

Back 76

The process of encoding messages before they enter the network or airwaves, and then decoding at the receiving end

Front 77

Public Key

Back 77

known and used to scramble messages (SSL)

Front 78

Private Key

Back 78

not known and used by receiver to descramble

Front 79

Certificate Authority

Back 79

a third party that issues keys

Front 80

Viruses

Back 80

Programs that can attack a computer and/or a network and delete information, disable software, use up all system resources, etc.

Front 81

AntiVirus software:

Back 81

install this software which is designed to block all known viruses and offers automatic or manual updates to virus patterns to block future viruses

Front 82

No Disk Sharing

Back 82

Viruses can be transferred to clean computers by inserting disks containing infected files

Front 83

Delete Suspicious Email Messages

Back 83

Do not open suspicious e-mail messages…Delete Only!

Front 84

Report Viruses

Back 84

If you get a virus, report it to you network administrator immediately!