Network Security

Network Security

1. Not Virtual Segments

   • A server may belong to more than one security group.
   • No server in EC2 can see the network traffic bound for other servers.
   • Servers in the same security group may not be able to talk to each other at all

2. SSL/TLS

   • 3 Basic phases
     • Peer negotiation for algorithm support.
     • Key exchange and authentication.
     • Symmetric cipher encryption and message authentication.
   • Allows client/server applications to communicate across a network in a way specifically designed to prevent eavesdropping, tampering, and message forgery.

3. Advantages

   • Quick access to your serversto manage them from critical locations.
   • An intruder does not have a single target to attack, as he does with a physical firewall
   • Don’t have the opportunity to accidentally destroy your network rules and thus permanently remove everyone’s access to a given network segments

4. Host Security

   • Preventing attacks.
   • Minimizing the impact of a successful attack on the overall system.
   • Responding to attacks when they occur.
   • Patch AMI with the new security fixes.
   • Test the results.
   • Relaunch virtual servers.
   • Features
     • System Hardening
     • Antivirus protection
     • Host Intrusion Detection
     • Data Segmentation
     • Cridential Management
     • Compromised Response