Security + Chapter 2 Infrastructure And Connectivity

Front 1

TCP/IP

Back 1

Set of protocols used for different systems to communicate over a network.

Standard language for all parties involved.

Front 2

4 Layers to TCP/IP Suite or DoD Model

Back 2

4. Application Layer
3. Host-to-Host or Transport Layer
2. Internet Layer
1. Network Access Layer (also known as the Network Interface layer or the Link layer)

Front 3

Host

Back 3

Any device connected to the network that runs a TCP/IP protocol suite, or stack.

Ex. Laptop, Desktop, Smartphone, PDA, Printer, etc.

Front 4

Application Layer

Back 4

Highest layer of suite. It allows applications to access services or protocols to exchange data.

Application/Presentation/Session Layers

Front 5

Commonly Used Application Protocol Layers

Back 5

Hypertext Transfer Protocol (HTTP)
HTTP Secure (HTTPS)
File Transfer Protocol (FTP)
Simple Mail Transfer Protocol (SMTP)
Telnet
Domain Name System (DNS)
Routing Information Protocol (RIP)
Simple Network Management Protocol (SNMP)
Post Office Protocol (POP3)

Front 6

Hypertext Transfer Protocol (HTTP)

Back 6

(80) – web pages and urls

Front 7

HTTP Secure (HTTPS)

Back 7

(443) – secure web pages

Front 8

File Transfer Protocol (FTP)

Back 8

(20 and 21) – allows connections to ftp servers for file uploads/downloads.

Front 9

Secure File Transfer Protocol (SFTP)

Back 9

(115) – secure FTP

Front 10

Simple Mail Transfer Protocol (SMTP)

Back 10

SMTP (25) – standard for email communication (sending email)

Front 11

Telnet

Back 11

(23) – terminal emulation that allows remote users to access a client through a telnet server as if they were logged on locally, not secure because info is sent in plaintext

Front 12

Domain Name System (DNS)

Back 12

(53) – allows for hosts to resolve hostnames to IP addresses and vice versa. Ex. Google.com is associated with an IP address

Front 13

Routing Information Protocol (RIP)

Back 13

(520) – allows routing info to be exchanged between routers on a network

Front 14

Simple Network Management Protocol (SNMP)

Back 14

(161) – allows communication between network devices and a management console (routers, bridges, hubs use SNMP) by mapping the network

Front 15

Post Office Protocol (POP3)

Back 15

(110) – used to receive email

Front 16

Host-to-Host Layer

Back 16

Also called the Transport layer, provides the Application layer with session and datagram communications services.

Front 17

Commonly used Host to Host Protocols

Back 17

The Transmission Control Protocol (TCP)
User Datagram Protocol (UDP)

Front 18

The Transmission Control Protocol (TCP)

Back 18

Responsible for providing a reliable, one-on-one, connection-oriented session.

3 Way Handshake

Front 19

User Datagram Protocol (UDP)

Back 19

Provides an unreliable connection-less communication method between hosts.

Ex. Youtube

Front 20

Internet Layer

Back 20

Responsible for routing, IP addresses, and packaging.

Network Layer

Front 21

Commonly used Internet Layer Protocols

Back 21

Internet Protocol (IP) (IPv4, IPv6)
Address Resolution Protocol (ARP)
Internet Control Message Protocol (ICMP)
Internet Group Management Protocol (IGMP)

Front 22

Internet Protocol (IP)

Back 22

Responsible for IP addressing (routable addressing).

Front 23

Address Resolution Protocol (ARP)

Back 23

Resolving IP addresses to Network Access layer addresses (MAC addresses).

Front 24

Internet Control Message Protocol (ICMP)

Back 24

Maintenance and control functions – used by PING to test connectivity to hosts.

Front 25

Internet Group Management Protocol (IGMP)

Back 25

Managing IP multicast groups, sending messages to specified groups of hosts.

Front 26

Network Access Layer

Back 26

Responsible for placing and removing packets on the physical network through communications with the network adapters in the host.

Cabling and MAC addresses.


Data Link/Physical Layers

Front 27

Encapsulation

Back 27

Allows a transport protocol to be sent across the network and utilized by the equivalent service or protocol at the receiving host.

"Some services use both TCP and UDP ports"

Front 28

Port

Back 28

Special addresses that allow communication between hosts, end to end connections. Applications and services are associated with ports.

Is nothing more than a bit of additional information added to either the TCP or UDP message in the header of the packet.

Front 29

Application Programming Interface (API)

Back 29

Allow programmers to create interfaces to the protocol.

Front 30

Security Topology

Back 30

Defines the network design and implementation from a security perspective.

Front 31

4 Primary Areas of Security Topology

Back 31

1. Design Goals
2. Security Zones
3. Technologies
4. Business Requirements

Front 32

Design Goals

Back 32

Dealing with confidentiality, Payroll, integrity, availability, and accountability to ensure tighter security.

Ex. SSN, Payroll, Correct data, Data Accessibility, Responsibility.

Front 33

Security Zone

Back 33

Describes design methods that isolate systems from other systems or networks.

Front 34

4 Common Security Zones

Back 34

1. Internet
2. Intranet
3. Extranet
4. Demilitarized zone (DMZ)

Front 35

Internet

Back 35

It is a network of networks that consists of millions of private, public, academic, business, and government networks, of local to global scope, that are linked by a broad array of electronic, wireless, and optical networking technologies.

Front 36

Intranet

Back 36

Generic term for a collection of private computer networks within an organization.

Front 37

Extranet

Back 37

Extension of intranet, mostly for allowing remote access to the network.

Front 38

Demilitarized zone (DMZ)

Back 38

Physical or logical sub-network that contains and exposes an organization's external-facing services to a larger and untrusted network, usually the Internet.

Front 39

4 Newer Technologies

Back 39

1. Virtualization
2. Virtual local area networks (VLANs)
3. Network Address Translation
4. Tunneling

Front 40

Virtualization

Back 40

VMWare, allowing you to run multiple items on one device as individual systems, without making changes to the actual device.

Front 41

Virtual local area networks (VLANs)

Back 41

Allows you to create users and system groups and segment them on a network. Used by switches reduces the size of broadcast domains, increases security.

Front 42

Network Address Translation

Back 42

Saved IPv4 addresses provides IP addresses to host systems in a network to access the internet using a single IP address.

Acts as a proxy, or boundary, between the LAN and the internet, allowing devices with private IP addresses access by issuing them public addresses.

Front 43

Tunneling

Back 43

Virtual connections between two systems or networks.

Encapsulating data in a mutually agreed protocol for transmission.

Front 44

Infrastructure

Back 44

Everything your organization is using, including computers, phones, and the physical layout.

Front 45

Firewall

Back 45

First line of defense in a network isolating one network from another.

Front 46

Packet Filter Firewall

Back 46

The packet filter doesn't analyze the data of a packet; it decides whether to pass it based on the packet's addressing information.

Front 47

Proxy Firewall

Back 47

Process requests from an outside network; the proxy firewall examines the data and makes rule-based decisions about whether the request should be forwarded or refused.

Increased intelligence also offering caching.

Front 48

Stateful Inspection Firewall

Back 48

Records are kept using state table that tracks every communications channel.

Occurs at all levels of the network provides additional security for connectionless protocols (UDP and ICMP).

"Vulnerable to DoS attacks due to flooding state table"

Front 49

Hub

Back 49

Dumb device. No intelligence.

Front 50

Modem

Back 50

Converts analog to digital and vice versa computer to telephone line.

Front 51

Remote Access Service (RAS)

Back 51

Any server service that offers the ability to connect remoter systems.

Dial-up, VPNs, ISDN, DSL, and cable modems.

Front 52

Router

Back 52

Instrument used to for connectivity between 2 or more networks.

Front 53

Routing Protocols

Back 53

Routing Information Protocol (RIP)
Border Gateway Protocol (BGP)
Open Shortest Path First (OSPF)

Front 54

Switch

Back 54

Makes forwarding decisions to get packets to their destination based on MAC addresses in its MAC table.

Front 55

Load Balancer

Back 55

Distribute work loads.

Front 56

Telecom/PBX System

Back 56

Phone system that allows you to have less phone numbers (like NAT, except with phone numbers).

Front 57

Virtual Private Networks (VPN)

Back 57

Created using tunneling (encapsulation. inside encapsulation).

Front 58

Web Security Gateway

Back 58

Thought of as a proxy server with web protection software built in.

Real time protection and analysis.

Can detect/prohibit include inappropriate content.

Block known HTTP/HTML exploits, strip Active X tags, strip Java applets, and block/strip cookies.

Front 59

Spam Filter

Back 59

Filtering out unsolicited emails.

Front 60

Tunneling Protocols

Back 60

Point –to-point Protocol (PPP)
Point-to-Point Tunneling Protocol (PPTP)
Layer 2 Forwarding (L2F)
Layer 2 Tunneling Protocol (L2TP)
Secure Shell (SSH)

Front 61

Point –to-point Protocol (PPP)

Back 61

1994 Offers support for multiple protocols works with POTS, ISDN, T1.

Doesnt provide data security but authenticates using CHAP.

Front 62

Secure Shell (SSH)

Back 62

Uses encryption to establish a secure connection between 2 systems.

Front 63

Internet Protocol Security (IPSec)

Back 63

Isn't a tunneling protocol, but is used in conjunction with tunneling protocols.

Provide encryption for either the header AND the data (tunneling mode) or just the data (transport mode).