Network Security Controls

Network Security Controls

1. Access controls

   • Type
     • ACLs on router
       • fffff
       • Function
         • Router directs traffic
         • Routers convert external (network-wide) IP address into internal (subnetwork-wide) MAC address of hosts on a local subnetworks
         • ACL on a router to deny access to particular host D from particular host S
       • Problems
         • Packet-checking overhead for router
         • Logging overhead for router
         • Inability of router to detect all spams
     • Firewalls
       • Function
         • screening
         • access filtering
         • auditing
         • examining packets

2. Honeypot

   • Functions As
     • Observe
     • Trace
     • Divert
   • Goal
     • Learn how intruders probe and attempt to gain access to your computer
     • Gather forensic information to aid in procesution

3. Intrusion Detecton System (IDS)

   • Types of IDS
     • Network & Host Based System
     • Misuse & Anomaly Detection System
     • Passive vs Reactive
   • Ways To Protect
     • Raise alert -detect reconaissance, prevent real attack
     • Raise alarm - system recovery actions