DOCSLIB.ORG

Eyeball Any-Firewall™ Technology

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Eyeball Any-Firewall™ Technology Eyeball Any-Firewall™ Technology VoIP, video telephony, and the industry’s highest call completion rate www.eyeball.com Copyright 2005 Seamless VoIP and Video Telephony Internet-based VoIP and video telephony is poised for phenomenal growth in both consumer and enterprise markets. VoIP and video telephony services provide the following advantages over traditional PSTN systems: • Richer communication experience using voice, video, presence, and text • Robust feature set, including 3-way calls, call hold, call transfer, click-to-call, unified messaging etc. • Mobility - seamless access of unified service from anywhere, anytime • Potentially higher voice quality compared to PSTN • Better price Communication features such as voice calls, video calls, unified messaging, video conferencing and collaboration may be accessed from broadband or Wi-Fi phones, PCs, PDAs, mobile handsets, set-top-boxes or enterprise-class dedicated video conference endpoints. The widespread use of the Internet has spurred the growth of VoIP and video telephony services. Data transmission for voice and video between computers on the Internet is problematic, to say the least, as most end-points are protected by firewalls and other security aids. Firewalls block incoming packets from unknown sources and prevent reliable, on-the-fly communications. Since not all incoming calls can be from known, pre-established calling parties – a means to ensure successful calls given the realities of the Internet must be implemented. A critical issue for VoIP and video telephony communications is whether data packets can traverse NATs, firewalls, and proxies and connect callers using different firewall products and configurations, with zero intervention required by the calling parties. Regardless of the reason, calls blocked by firewalls translate into subscriber frustration, increased support costs, subscriber churn, and missed revenue opportunities. Unlike expensive, labor-intensive, and/or modest technical workarounds that often fail to work with all standard firewalls, or deliver a reliable call completion rate, Eyeball Networks’ exclusive Any-Firewall™ Technology provides the industry’s highest call completion rate regardless of firewalls traversed by all parties in a call. Any-Firewall™ Technology ensures that Internet calls can effectively traverse through firewalls, NAT (Network Address Translation), PAT (Port Address Translation), and proxy configurations without subscriber interaction or firewall reconfiguration. Critical advantages of Any-Firewall™ Technology include: □ Delivers the industry’s highest call completion rate □ Voice and video calls are completed regardless of the firewall product and network connection being used □ Interoperable with all standard firewall, NAT, PAT, and proxy products □ Connects callers even if they are using different firewall products (as well as modems, routers, proxies, NATs and PATs) □ Does not require any specific port or ports to remain open (a serious security breach), nor does it require any other firewall modifications Page 2 Eyeball Any-Firewall™ Technology □ Is fully compatible with IETF standards and drafts, including STUN, TURN and ICE as well as HTTP tunneling, each of which provide a limited means of enabling call completion □ Has been successfully tested against a complete range of NATs, firewalls, and proxies □ Requires no knowledge of firewalls □ Makes anywhere, any time VoIP and video telephony calling a reality Firewalls, IP Addresses, and Voice/Video Telephony Firewalls Firewalls protect computers and networks from intruders and potentially harmful network traffic. Firewalls typically sit at the border between one computer network and another, or, in the case of personal firewall products, they protect individual computers from harm. Although there are several different types of firewalls, the most common one is based on "packet filtering". This type of firewall examines network traffic at the packet level, deciding whether or not to let the packet enter or leave a network. If a packet passes a firewall's pre-defined filtering rules, it is forwarded on to its intended destination. If it doesn’t pass, the packet is simply discarded. Firewalls play a key role in voice/video telephony because of their ability to block data packets and because they can make changes to the IP addresses and port numbers contained in those packets. Global vs. Virtual IP Addresses Every computer connected to the Internet is assigned an IP address so that it can be uniquely identified. IP addresses are normally “global”, meaning that the address can be understood by any other computer on the Internet. However, on local area networks, or LANs, organizations may choose to use private, or virtual, IP addresses. Virtual IP addresses are not global, and can only be understood by other computers and components attached to the same LAN. Virtual IP addresses help alleviate the growing problem of insufficient IP address spaces to meet demand. Virtual IP addresses are important to Internet-based communications because connection problems can arise when one or more users in a session are using a virtual IP address. NAT/PAT Firewalls Computers on a LAN normally cannot communicate with systems on the Internet directly because they have not been assigned global IP addresses. Network Address Translation (NAT) and Port Address Translation (PAT) are specifications that enable computers using virtual IP addresses on a LAN to access the public Internet. This technique in effect allows an organization to share one or more global IP addresses among many computers that each use virtual IP addresses. NAT/PAT is supported by many common enterprise and personal firewalls in use today. Page 3 Eyeball Any-Firewall™ Technology NAT/PAT firewalls use multiple IP addresses, both internal and external, to communicate with computers on the LAN and the Internet. The firewall performs the function of mapping each virtual IP address to one or more global IP addresses. Network packets have headers containing network information, including the source IP address and port number as well as the destination IP address and port number of the packet. Packets that are sent through NAT/PAT firewalls will have the source IP address and port number altered by the firewall. This process is also known as port masquerading. Figure 1: VoIP packets passing through NAT/PAT firewalls have the source IP address altered before being routed to their destination. Figure 1 above highlights what happens when a LAN user with a virtual IP address tries to communicate with another user on the Internet. Outgoing packets sent by the LAN user are modified by the NAT/PAT firewall so that the virtual IP address and port number are replaced with a global IP address and port number. The same process also happens in reverse, with incoming packets having their destination IP address and port number modified to the virtual IP address of the LAN user. If the firewall of the LAN user were to forward outgoing packets without modifying the header, incoming packets for the LAN user would be incorrectly addressed to the virtual IP address. The firewall would filter these packets out because it will only forward packets addressed to the LAN user’s global IP address. This causes the call to fail. Network and port address translation techniques have a direct impact on whether two or more users are able to connect for voice/video calls. A communications solution that is not designed to account for the effects of NAT/PAT will not consistently connect calls. Page 4 Eyeball Any-Firewall™ Technology Why VoIP Data Packets Get Blocked by Firewalls There are numerous reasons why VoIP calls may not be able to pass through a firewall. Sometimes callers are behind firewalls that explicitly block any type of connection that isn’t simply a request for a web page. Or, the VoIP endpoint may use proprietary protocols that require special support from a firewall before functioning correctly. Both of these situations require firewall configuration by administrators, which is not always possible or desirable when VoIP and video calls take place amongst a wide-ranging Internet population. Figure 2: Connection failure for voice and video call resulting from a NAT/PAT firewall. Another common reason data packets are blocked is that an endpoint is unable to determine the correct “global” IP address and port number of the other endpoint because of the use of NAT/PAT firewalls and virtual IP addresses. Figure 2 illustrates this problem using a scenario where two participants try to connect for a call with endpoints and server software that do not incorporate Any-Firewall™ Technology. In this scenario both users are on LANs using virtual IP addresses and both are behind NAT/PAT firewalls. When users login to the video communications server, the server takes note of each endpoint’s public IP address and TCP port number. If a user tries to call another user, the server informs each endpoint of the other’s IP address and port number so the endpoints know where they should try to connect. In this example, the data packets sent by user A are altered by the NAT/PAT firewall and user A’s internal IP address and port number are replaced by a public IP address and port number. User B’s firewall will reject the packet because it is being sent unsolicited to user B’s internal IP address and port number. The same process happens in reverse when user B tries to send a packet to user A. The end result is that neither user is able to connect because each is unable to send packets to the right destination port number because of port masquerading by the firewall. Again the call fails. Page 5 Eyeball Any-Firewall™ Technology Solving NAT/PAT Issues Some video communications solutions and protocols address such port masquerading problems by requiring certain firewall conditions be met before calls can be completed. A common solution is that the video software or protocol will require specific port numbers be left “open” in the firewall.
Load more

Recommended publications
  • Usability and Security of Personal Firewalls
    Usability and Security of Personal Firewalls Almut Herzog^ and Nahid Shahmehri^ Dept. of Computer and Information Science, Linkopings universitet,Sweden {almhe, nahsh}@ida.liu.se Abstract. Effective security of a personal firewall depends on (1) the rule granularity and the implementation of the rule enforcement and (2) the correctness and granularity of user decisions at the time of an alert. A misconfigured or loosely configured firewall may be more dangerous than no firewall at all because of the user's false sense of security. This study assesses effective security of 13 personal firewalls by comparing possible granularity of rules as well as the usability of rule set-up and its influence on security. In order to evaluate usability, we have submitted each firewall to use cases that require user decisions and cause rule creation. In order to evaluate the firewalls' security, we analysed the created rules. In ad­ dition, we ran a port scan and replaced a legitimate, network-enabled application with another program to etssess the firewalls' behaviour in misuse cases. We have conducted a cognitive walkthrough paying special attention to user guidance and user decision support. We conclude that a stronger emphasis on user guidance, on conveying the design of the personal firewall application, on the principle of least privilege and on implications of default settings would greatly enhance both usability and security of personal firewalls. 1 Introduction In times where roaming users connect their laptops to a variety of public, pri­ vate and corporate wireless or wired networks and in times where more and more computers are always online, host-based firewalls implemented in soft­ ware, called personal firewalls, have become an important part of the security armour of a personal computer.
    [Show full text]
  • EC-Council Network Security Administrator (Exam 312-38)
    Product Information Sheet Exam 312-38 EC-Council Network Security Administrator (Exam 312-38) Page | 1 ENSAv4 Copyright © by EC-Council All Rights Reserved. Reproduction is Strictly Prohibited. Product Information Sheet Exam 312-38 EC-Council NSA is CNSS 4011 Certified The Committee on National Security Systems (CNSS)/National Security Agency (NSA) of the United States of America certified EC-Council’s Network Security Administrator (ENSA) course as having met 100% of the requirements as set out by the Committee on National Security Systems (CNSS) National Standards 4011. This certification is managed by the Information Assurance Courseware Evaluation (IACE) Program, National INFOSEC (Information Security) Education and Training Program and is administered by the U.S. National Security Agency (NSA). The Committee on National Security Systems (CNSS) and National Security Agency (NSA) has developed a nationally recognized certification program based on NSTISSI standards. The CNSS/NSA Certification is a government class certification that is recognized as the National Training Standard for Information Security Professionals Students who have obtained these certifications would have demonstrated a solid grasp of the principles as outlined in the 4011 standard. With this, EC-Council has joined the ranks of the organizations United States Air Force Academy, United States Military Academy, Air Force Institute of Technology and Carnegie Mellon University; all of whom have attained the National Training Standard for Information Security Professionals - the CNSS 4011. Introduction The EC-Council's Network Security Administrator certification looks at the network security in defensive view while the CEH certification program looks at the security in offensive mode. The ENSA program is designed to provide fundamental skills needed to analyze the internal and external security threats against a network, and to develop security policies that will protect an organization’s information.
    [Show full text]
  • 8 How Do I Open a Range of Ports on My DI-624M Using Firewall Rules?
    DI-624M User’s Manual Frequently Asked Questions 8 How do I open a range of ports on my DI-624M using Firewall rules? Step 1: Access the router’s Web configuration by entering the router’s IP Address in your Web browser. The default IP Address is 192.168.0.1. Login using your password. The default username is “admin” and the password is blank. If you are having difficulty accessing Web management, please see the first question in this section. Step 2: From the Web management Home page, click the Advanced tab then click the Firewall button. Step 3: Click on Enabled and type in a name for the new rule. Step 4: Choose WAN as the Source and enter a range of IP Addresses out on the internet that you would like this rule applied to. If you would like this rule to allow all internet users to be able to access these ports, then put an Asterisk in the first box and leave the second box empty. Step 5: Select LAN as the Destination and enter the IP Address of the computer on your local network that you want to allow the incoming service to. This will not work with a range of IP Addresses. D-Link Systems, Inc. 91 DI-624M User’s Manual Frequently Asked Questions Step 6: Enter the port or range of ports that are required to be open for the incoming service. Step 7: Click Apply and then click Continue. Note: Make sure DMZ host is disabled. Because our routers use NAT (Network Address Translation), you can only open a specific port to one computer at a time.
    [Show full text]
  • Personal Firewalls Are a Necessity for Solo Users
    Personal firewalls are a necessity for solo users COMPANY PRODUCT PLATFORM NOTES PRICE Aladdin Knowledge Systems Ltd. SeSafe Desktop Windows Combines antivirus with content filtering, blocking and $72 Arlington Heights, Ill. monitoring 847-808-0300 www.ealaddin.com Agnitum Inc. Outpost Firewall Pro Windows Blocks ads, sites, programs; limits access by specific times $40 Nicosia, Cyprus www.agnitum.com Computer Associates International Inc. eTrust EZ Firewall Windows Basic firewall available only by download $40/year Islandia, N.Y. 631-342-6000 my-etrust.com Deerfield Canada VisNetic Firewall Windows Stateful, packet-level firewall for workstations, mobile $101 (Canadian) St. Thomas, Ontario for Workstations users or telecommuters 519-633-3403 www.deerfieldcanada.ca Glucose Development Corp. Impasse Mac OS X Full-featured firewall with real-time logging display $10 Sunnyvale, Calif. www.glu.com Intego Corp. NetBarrier Personal Firewall Windows Full-featured firewall with cookie and ad blocking $50 Miami 512-637-0700 NetBarrier 10.1 Mac OS X Full-featured firewall $60 www.intego.com NetBarrier 2.1 Mac OS 8 and 9 Full-featured firewall $60 Internet Security Systems Inc. BlackIce Windows Consumer-oriented PC firewall $30 Atlanta 404-236-2600 RealSecure Desktop Windows Enterprise-grade firewall system for remote, mobile and wireless users Varies blackice.iss.net/ Kerio Technologies Inc. Kerio Personal Firewall Windows Bidirectional, stateful firewall with encrypted remote-management option $39 Santa Clara, Calif. 408-496-4500 www.kerio.com Lava Software Pty. Ltd. AdWare Plus Windows Antispyware blocks some advertiser monitoring but isn't $27 Falköping, Sweden intended to block surveillance utilities 46-0-515-530-14 www.lavasoft.de Network Associates Inc.
    [Show full text]
  • Ethical Hacking and Countermeasures Version 6
    Ethical Hacking and Countermeasures Version 6 Modu le LX Firewall Technologies News Source: http://www.internetnews.com/ Copyright © by EC-Council EC-Council All Rights Reserved. Reproduction is Strictly Prohibited Module Objective This modu le will fam iliar ize you wihith: • Firewalls • Hardware Firewalls • Software Firewalls • Mac OS X Firewall • LINUX Firewall • Windows Firewall Copyright © by EC-Council EC-Council All Rights Reserved. Reproduction is Strictly Prohibited Module Flow Firewalls Mac OS X Firewall Hardware Firewalls LINUX Firewall Software Firewalls Windows Firewall Copyright © by EC-Council EC-Council All Rights Reserved. Reproduction is Strictly Prohibited Firewalls: Introduction A firewall is a program or hardware device that protects the resources of a private netw ork from users of other networks It is responsible for the traffic to be allowed to pass, block, or refuse Firewall also works with the proxy server It helps in the protection of the private network from the users of the different network Copyright © by EC-Council EC-Council All Rights Reserved. Reproduction is Strictly Prohibited Hardware Firewalls Copyright © by EC-Council EC-Council All Rights Reserved. Reproduction is Strictly Prohibited Hardware Firewall Har dware Firewa lls are place d in the perime ter of the networ k It employs a technique of packet filtering It reads the header of a packet to find out the source and destination address The information is then compared with the set of predefined and/orand/ or user created rules that determine whether the packet is forwarded or dropped Copyright © by EC-Council EC-Council All Rights Reserved. Reproduction is Strictly Prohibited Netgear Firewall Features: • ItInterne t shar ing broa dbddband router and 4-port switch • 2x the speed and 4x times the coverage of a Wireless-G router • Configurable for private networks and public hotspots • Double Firewall protection from external hackers attacks • Touchless WiFi Security makes it easy to secure your network Copyright © by EC-Council EC-Council All Rights Reserved.
    [Show full text]
  • Firewalls Firewall I Firewall Sono Una Componente O Un Insieme Di Componenti Che Limitano L'accesso Tra Una Rete Protetta Ed In
    For TIC Pagina 1 di 4 Firewalls Firewall I firewall sono una componente o un insieme di componenti che limitano l'accesso tra una rete protetta ed Internet. Essi proteggono le organizzazioni in Internet fornendo accessi sicuri: garantendo che utenti validi possano accedere alle risorse di rete di cui hanno bisogno. Determinare chi sia un utente valido è compito del sistema di autenticazione; mentre determinare quali risorse un utente possa accedere è compito del sistema di autorizzazione (Access Control). Per fornire meccanismi di Access Control, un firewall richiede una comprensione profonda dei servizi e delle applicazioni utilizzati in rete. Ci sono fondamentalmente due tipi di firewall, quelli personali e quelli commerciali. I firewall personali I firewall personali sono programmi che proteggono un computer quando questo è collegato ad una rete. Un personal firewall analizza i canali di comunicazione, negando l'elaborazione del traffico ritenuto rischioso sia in ingresso che in uscita. Di seguito si analizzano le caratteristiche di alcuni prodotti molto diffusi e si riassumono le caratteristiche comparate, in una tabella. z Tiny Personal Firewall è un prodotto facile da configurare ed utilizzare che protegge completamente un computer dagli attacchi. Tiny Personal Firewall include dei wizard semplici per il rilevamento delle intrusioni che individuano attività sconosciute e chiedono all'utente di impostare i parametri del firewall. Appositi wizard rilevano i tentativi di connessione alle porte di comunicazione e creano delle regole di filtering in base all'indicazioni dell'utente. Per garantire che dei cavalli di Troia non si nascondano all'interno di applicazioni viene utilizzata la firma digitale con algoritmo MD5.
    [Show full text]
  • "Service Unavailable" Error, Contact Norton at to Find out How to Configure It Correctly
    Service Unavailable, Offline, or Action Cancelled errors When I try to sign in to RealPlayer, I get a "Service Unavailable," "You are currently offline," or "Action cancelled" error. How can I fix this? You may need to unblock the program in your computer's firewall if: - You get a 'Service Unavailable' or 'you are working offline, click here to refresh' error while trying to sign in or view pages, or an 'Action cancelled' message when you try to play a clip (or view a live video feed such as Big Brother). - It is having problems retrieving CD information Norton, McAfee, ZoneAlarm, Freedom, BlackIce, Windows Firewall, and Microsoft ISA server are some of the most common brands of firewall software. Instructions for these follow: Norton Firewall: 1. Close the program. 2. Double-click the Norton Firewall icon in the Windows task bar. 3. Click the Configure button on the right side. 4. Click the Program Control tab at the top. 5. Locate the program (RealPlayer or Rhapsody). 6. Highlight and click Remove. 7. Close Norton Personal Firewall. 8. Open the program and you will get a prompt to grant access to the Internet. 9. Choose Permit and check Always use this action. 10. Restart the computer. If you are still receiving a "Service Unavailable" error, contact Norton at http://www.symantec.com/techsupp/ to find out how to configure it correctly. McAfee Personal Firewall: There are two possible methods for McAfee Personal Firewall. You can choose either one: First method: 1. Double-click the firewall icon in the Windows task bar.
    [Show full text]
  • Downloads.Php
    Lawrence Berkeley National Laboratory Lawrence Berkeley National Laboratory Title Error Detection and Error Classification: Failure Awareness in Data Transfer Scheduling Permalink https://escholarship.org/uc/item/4sh9h5zn Author Balman, Mehmet Publication Date 2010-11-26 Peer reviewed eScholarship.org Powered by the California Digital Library University of California Error Detection and Error Classification: Failure Awareness in Data Transfer Scheduling ∗ Mehmet Balman1 and Tevfik Kosar2 1 Computational Research Division, Lawrence Berkeley National Laboratory Berkeley, CA 94720, USA 2 Department of Computer Science, Louisiana State University Baton Rouge, LA 70803, USA Email: [email protected] [email protected] 2010 Abstract Data transfer in distributed environment is prone to frequent failures resulting from back-end system level problems, like connectivity failure which is technically untraceable by users. Error messages are not logged efficiently, and sometimes are not relevant/useful from users' point-of-view. Our study explores the possibility of an efficient error detection and reporting system for such environments. Prior knowledge about the environment and awareness of the actual reason behind a failure would enable higher level planners to make better and accurate decisions. It is necessary to have well defined error detection and error reporting methods to increase the usability and serviceability of existing data transfer protocols and data management systems. We investigate the applicability of early error detection and error classification techniques and propose an error reporting framework and a failure-aware data transfer life cycle to improve arrangement of data transfer operations and to enhance decision making of data transfer schedulers. Keywords: error detection, error classification, network exploration, data movement between distributed repositories, scheduling bulk data transfer operations Reference to this paper should be made as follows: Balman, M.
    [Show full text]
  • Paul Collins Status Name/Startup Item Command Comments X System32
    SYSINFO.ORG STARTUP LIST : 11th June 2006 (c) Paul Collins Status Name/Startup Item Command Comments X system32.exe Added by the AGOBOT-KU WORM! Note - has a blank entry under the Startup Item/Name field X pathex.exe Added by the MKMOOSE-A WORM! X svchost.exe Added by the DELF-UX TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder X SystemBoot services.exe Added by the SOBER-Q TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a HelpHelp subfolder of the Windows or Winnt folder X WinCheck services.exe Added by the SOBER-S WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "ConnectionStatusMicrosoft" subfolder of the Windows or Winnt folder X Windows services.exe Added by the SOBER.X WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "WinSecurity" subfolder of the Windows or Winnt folder X WinStart services.exe Added by the SOBER.O WORM! Note - this is not the legitimate
    [Show full text]
  • Ethical Hacking of a Smart Plug
    DEGREE PROJECT IN TECHNOLOGY, FIRST CYCLE, 15 CREDITS Stockholm, Sweden 2021 Ethical Hacking of a Smart Plug RAMI ACHKOUDIR ZAINAB ALSAADI 2 Ethical Hacking of a Smart Plug RAMI ACHKOUDIR ZAINAB ALSAADI Bachelor in Computer Science First Cycle, 15 Credits Supervisor: Pontus Johnson Examiner: Robert Lagerström School of Electrical Engineering and Computer Science 3 4 Abstract The number of Internet of Things (IoT) devices is growing rapidly which introduces plenty of new challenges concerning the security of these devices. This thesis aims to contribute to a more sustainable IoT environment by evaluating the security of a smart plug. The DREAD and STRIDE methods were used to assess the potential threats and the threats with the highest potential impact were penetration tested in order to test if there were any security preventions in place. The results from the penetration tests presented no major vulnerabilities which bring us to the conclusion that the Nedis Smart Plug has implemented enough security measures. Keywords - Internet of Things, IoT, penetration test, ethical hacking, IoT ​ ​ security, threat model 5 Sammanfattning Antalet Internet of Things (IoT) -enheter växer snabbt vilket medför många nya utmaningar när det gäller säkerheten för dessa enheter. Denna avhandling syftar till att bidra till en mer hållbar IoT-miljö genom att utvärdera säkerheten för en smart plug. Metoderna DREAD och STRIDE användes för att bedöma de potentiella hoten och hoten med störst potentiell påverkan penetrerades för att testa om det fanns några säkerhetsförebyggande åtgärder. Resultaten från penetrationstesterna presenterade inga större sårbarheter som ledde oss till slutsatsen att Nedis Smart Plug har genomfört tillräckliga säkerhetsåtgärder.
    [Show full text]
  • CEH Study Guide
    CEH Study Guide Exam Code 312-50v8 Version 8 Study Guide Provided by TrainACE© The Certified Ethical Hacker Certification covers the fundamentals of hacking, footprinting and scanning. A CEH certification indicates than an individual possess the skills, knowledge and ability to effectively exploit and defend their own systems. This study guide focuses on Trojans, Linux, Servers, Networks and other forms of hacking to equip future Ethical Hackers with the tools to pass the CEHv8 exam and succeed in their field. Study Guide Provided by TrainACE© Q: Robert hopes to start a career in computer security. As a new college-level student, he has just learned the term ethical hacking, which is a key part of secure information systems. Of the below options, choose which will be key areas of expertise for Robert’s future career. Answer is complete. Select more than one answer if applicable. a. Robert needs to gain a large body of knowledge about how computers function, with special regard to networking and programming. b. Operating systems are very important to Robert’s career. Because companies utilize varying operating systems, including Windows (multiple versions), Mac (multiple versions), UNIX, and Linux, he must develop an advanced understanding of each of the major operating systems. c. Robert should gain familiarity with computing and hardware platforms, which are key to software development. d. Robert should be able to write reports related to his field and have great expertise in communication relating to computer security. Solution: All of the above are correct. Breakdown: Each of the above areas is important for Robert’s future career.
    [Show full text]
  • Lecture 16: TCP/IP Vulnerabilities and Dos Attacks: IP Spoofing, SYN Flooding, and the Shrew Dos Attack
    Lecture 16: TCP/IP Vulnerabilities and DoS Attacks: IP Spoofing, SYN Flooding, and The Shrew DoS Attack Lecture Notes on “Computer and Network Security” by Avi Kak ([email protected]) March 16, 2021 5:43pm ©2021 Avinash Kak, Purdue University Goals: • To review the IP and TCP packet headers • Controlling TCP Traffic Congestion and the Shrew DoS Attack • The TCP SYN Flood Attack for Denial of Service • IP Source Address Spoofing Attacks • BCP 38 for Thwarting IP Address Spoofing for DoS Attacks • Python and Perl Scripts for Mounting DoS Attacks with IP Address Spoofing and SYN Flooding • Troubleshooting Networks with the Netstat Utility CONTENTS Section Title Page 16.1 TCP and IP 3 16.2 The TCP/IP Protocol Stack 5 16.3 The Network Layer (also known as the Internet 14 Layer or the IP Layer) 16.4 TCP, The Transport Layer Protocol for Reliable 25 Communications 16.5 TCP versus IP 34 16.6 How TCP Breaks Up a Byte Stream That 36 Needs to be Sent to a Receiver 16.7 The TCP State Transition Diagram 38 16.8 A Demonstration of the 3-Way Handshake 44 16.9 Splitting the Handshake for Establishing 52 a TCP Connection 16.10 TCP Timers 58 16.11 TCP Congestion Control and the Shrew DoS Attack 60 16.12 SYN Flooding 68 16.13 IP Source Address Spoofing for SYN Flood 71 DoS Attacks 16.14 Thwarting IP Source Address Spoofing With BCP 38 84 16.15 Demonstrating DoS through IP Address Spoofing and 89 SYN Flooding When The Attacking and The Attacked Hosts Are in The Same LAN 16.16 Using the Netstat Utility for Troubleshooting 103 Networks 16.17 Homework Problems 113 Computer and Network Security by Avi Kak Lecture 16 Back to TOC 16.1 TCP and IP • We now live in a world in which the acronyms TCP and IP are almost as familiar as some other computer-related words like bits, bytes, megabytes, etc.
    [Show full text]