Network Security Controls - created from Mind Map

Página 1

Access controls

Honeypot

Intrusion Detecton System (IDS)

Type

ACLs on router

fffff

Firewalls

Function

Problems

Router directs traffic

Routers convert external (network-wide) IP address into internal (subnetwork-wide) MAC address of hosts on a local subnetworks

ACL on a router to deny access to particular host D from particular host S

Packet-checking overhead for router

Logging overhead for router

Inability of router to detect all spams

Function

screening

access filtering

auditing

examining packets

Functions As

Goal

Observe

Trace

Divert

Learn how intruders probe and attempt to gain access to your computer

Gather forensic information to aid in procesution

Types of IDS

Ways To Protect

Network & Host Based System

Misuse & Anomaly Detection System

Passive vs Reactive

Raise alert -detect reconaissance, prevent real attack

Raise alarm - system recovery actions