Fichas
(2.1) Security Components Flash Cards
Fichas del conjunto (19)
- 1Firewalls-Controls flow of traffic into and out of network
-Controls type of content / bad traffic
-Filtered by TCP/UDP port numbers
-OSI Layer 4(Transport) OR
-OSI Layer 7 if filtered based on App
-Layer 3 Device(Network) - 2Stateless Firewall-Each packet is individually examined"packet filter"
-Does NOT keep track of active sessions, just bc traffic can go out, does not mean it can come back in unless on list
-Compares traffic to a list of controls - 3Stateful Firewall- More intelligent
-Everything within a valid flow is allowed
-Firewall makes a note of active session, when web server replies, the firewall checks session table for active sessions then allows traffic back through
-Most firewalls are STATEFUL
-Allows traffic to be built
-Keep track of active flows
-Checks returning traffic on session table - 4Application Aware Devices-Examine data in all packets/deep inspection
-OSI Layer 7 (Application)
- Application Layer Gateway - 5Network Based Firewall-Controls traffic flow based on application
- 6Intrusion Prevention System-Identifies an application , applies specific vulnerability signatures to traffic
- 7Host Based Firewall- Already in the Operating System
-Designate specific rules
-knows what application is being used - 8ACLAccess Control List
-Group of varibles to compare to traffic - 9Tuples-Grouping of categories
(EXAMPLE: Soruce IP,Port Number, Destination IP, Application, Time of day) - 10Implied DenyIf traffic does not match it is dropped
- 11VPN ConcentratorsEncrypted tunnel between 2 points
- 12Concentrator-Encryption/ Decryption
-Access Device
-Can be built into firewall
-Sits in front of network - 13SSL VPN(Secure Socket Layer)
-TCP/43
-Almost no firewall issues
-Runsfrom browser to concentrator - 14Full TunnelAll traffic (regardless of its destination) will go through tunnel
- 15IPSECInternet Protocol Security
-OSI Layer 3(Network) encryption
-Integrity check to ensure traffic is not being replayed
- AH
-ESP - 16Transport Mode[IP Header][IP SEC Header][DATA][IPSECTraliers]
- 17Tunnel Mode[New IP Header][IPsec Header][IP Header][DATA][IPSec Trailer]
-IP destination encrypted - 18AHAUTHENTICATION HEADER
-Will take IP header and Data combined with shared key and ass it topacket header (MD5, SHA-1, SHA-2 are common hashes) - 19ESPENCAPSULATION SECURITY PAYLOAD
-3DES or AES for encryption
-Adds header
-Adds trailer
-Integrity Check Value
Información
- Descripción
- Fichas sobre (2.1) Security Components Flash Cards, creado por Brianna Conway el 08/03/2020.
- Creado por
- Brianna Conway
- Visitas
- 3
- Valoración