Protocol Architecture (2) Suguru Yamaguchi Nara Institute of Science and Technology Department of Information Science
|
|
|
- Jody Wilcox
- 6 years ago
- Views:
Transcription
1 Protocol Architecture (2) Suguru Yamaguchi Nara Institute of Science and Technology Department of Information Science
2 History of computer network protocol development in 20 th century.
3 Development of hierarchical protocol 1980s Industrial de facto standards IBM SNA, DECNET, Xerox XNS OSI AppleTalk, Novell Netware, NetBIOS CLNP, TP4, IS-IS, X400, TCP/IP RIP, EGP/BGP, OSPF TELNET, SMTP, DNS, FTP, SNMP, NTP,. DARPA adapted TCP/IP as a standard. ARPAnet, MILnet Information Network 1 /
4 Development of hierarchical protocol We knew the market winner of computer communication protocols in 1990 s TCP/IP Mistakes of OSI Slow standardization defeat of ISO standardization process by national delegates. Complex specifications Only 7 Layer Reference Model and X.500 are still widely used. Victory of TCP/IP Simple, open and fast process of standardization victory of IETF standardization process The United States continued using TCP/IP. simple specification and implementation oriented Information Network 1 /
5 Decline of vendor protocol Once standardized, but losing the game. DECNET OSI Protocol AppleTalk TCP/IP applications Netware, NetBios TCP/IP applications Xerox XNS: decline and lost Only IBM / SNA was survived Large scale general-purpose system known as legacy system Difficult to migrate mission-critical system to the other open platform Information Network 1 /
6 Development of hierarchical protocol 21 st century Development of upper layer protocol session layer presentation layer Demise of protocols processing platform Layer segmentation and sophistication MPLS J2EE,.NET, GRID. Information Network 1 /
7 Significant technologies Data Link Ethernet : LAN technology HDLC : classical packet switching technology TCP/IP Protocol Suite TCP/IP protocol is used most in the world. especially, IP and TCP Network Management Application Technology Information Network 1 /
8 Multiplexing, Demultiplexing, and Encapsulation Information Network 1 /
9 Multiplexing Application Presentation Session FTP DNS PAP Session Manager Transport TCP UDP TP4/AppleTalk Network Data Link Physical IP IEEE802.3 Ethernet CAT/5 cable AppleTalk Information Network 1 /
10 Demultiplexing Application Presentation Session FTP DNS PAP Session Manager Transport TCP UDP TP4/AppleTalk Network Data Link Physical IP IEEE802.3 Ethernet CAT/5 cable AppleTalk Information Network 1 /
11 Technical Aspect of Hierarchical Protocol Encapsulation Lower-level protocol encapsulates a packet of upper-level protocol (n-1) PDU = (n-1) header + (n)pdu stores upper layer packet in a data area Application Presentation Session Transport Network Data Link Physical Information Network 1 /
12 Pros & Cons Pro. Simple Easily understandable Separated & parallel implementations Concealment function and independent version up Interconnection between different networks Con. Hierarchical implementation can not improve quality and its performance. Memory and data managements are difficult by encapsulation process Data length flexibility is difficult to handle. Information Network 1 /
13 Network Layer Gateway ES (End System) Application Presentation Session Transport Network Data Link Physical Network layer gateway IPv4 ES (End System) Application Presentation Session Transport Network Data Link Physical Physical connection Physical connection Information Network 1 /
14 Transport Layer Gateway ES (End System) Application Presentation Session Transport Transport layer gateway 4/6 mapping ES (End System) Application Presentation Session Transport Network IPv4 IPv6 Network Data Link Data Link Physical Physical Physical connection Physical connection Information Network 1 /
15 Application Layer Gateway ES (End System) Application Presentation Session Application layer gateway SMTP X400 ES (End System) Application Presentation Session Transport TCP TCP Transport Network IPv4 IPv6 Network Data Link Data Link Physical Physical Physical connection Physical connection Information Network 1 /
16 Virtual Private Network (VPN) Information Network 1 /
17 VPN A VPN is a private network that uses a public network (usually the Internet) to connect remote sites or users together using advanced encryption and tunnels to protect: Confidentiality of information Integrity of data Authentication of users The primary benefits include: Security Private on public infrastructure: encryption & authentication Reduced cost Elimination of expensive dedicated WAN circuits Scalability Corporate network availability can be scaled quickly with minimal cost Information Network 1 /
18 VPN Classification Remote access VPN Targeted at mobile users and home telecommutes Site-to-Site VPN Used to connect remote offices and branch offices to the headquarters internal network over a shared infrastructure Information Network 1 /
19 VPN Technologies Layer 2 VPNs Operate at Layer 2 of the OSI reference model Point-to-point connection Common protocols: Point-to-Point Tunneling Protocol (PPTP) Layer 2 Tunneling Protocol (L2TP) Layer 2 Forwarding Connectivity between sites over a virtual circuit A virtual circuit is a logical end-to-end connection between two endpoints in a network Popular Layer 2 VPNs ATM Frame Relay Information Network 1 /
20 VPN Technologies Layer 3 VPNs The delivery header of a connection between two sites is at Layer 3 of the OSI model Generic Routing Encapsulation (GRE) Tunnels: RFC 1701 MPLS VPNs (RFC 2547) Use labels to encapsulate the original data or payload Key advantage: flexibility to configure arbitrary technologies Scalability: no point-to-point tunnels IPSec VPNs IPSec is a suite of protocols developed under the auspices of the IETF to achieve secure services over IP packet-switched networks Services: authentication, integrity, access control, confidentiality Information Network 1 /
21 VPN Technologies Transport Layer VPNs (SSL/TLS) Used to provide security with single HTTP-based applications Secure Socket Layer (SSL) Developed by Netscape for secure authentication connection between browsers and servers SSL Version 3, open standard in 1999 and called Transport Layer Security (TLS) Version 1 Use of certificates is fundamental Server-only authentication Server-client authentication Protocols: SSL Handshake SSL Record SSL Cipher Change SSL Alert Information Network 1 /
22 VPN Technologies Application Layer Provide protection for only a single application Secure Shell (SSH): Remote login protection S-MIME Pretty Good Privacy (PGP) Information Network 1 /
23 Encryption & Security Protocol IPSec (Internet Protocol Security) Network layer Protects and authenticates IP packets Framework of open standard Provides CIA (Confidentiality, Integrity, and Authentication) It consists of two sub-layers Encapsulating Security Payload (ESP): encrypts the packet s payload with a symmetric key It provides confidentiality, data integrity, data origin authentication, and antireply services Authentication Header (AH): uses hashing operation to hide packet information It provides connectionless integrity, data authentication, and replay protection but does not provide confidentiality Information Network 1 /
24 Encapsulation First layer: L2TP encapsulation A PPP frame (an IP datagram) is wrapped with an L2TP header and a UDP header. Second layer: IPsec encapsulation The resulting L2TP message is then wrapped with an IPsec ESP header and trailer, an IPsec AH, and a final IP header. Information Network 1 /
25 IPSec (RFC2401) Overview Encryption A cryptographic algorithm is the mathematical function used for encryption and decryption. Two categories of cryptographic algorithms Symmetric: the same key is used to encrypt and decrypt the message Problem of key distribution DES, 3DES, AES Asymmetric: use separate keys one for encryption and another for decryption The encryption key is called public key and is available for anyone The decryption key is called private key and should be kept secret The two keys are mathematically related Hash: To attest the content of a message and the identity of the sender, a digital signature is created by the message with a private key Information Network 1 /
26 IPSec (RFC2401) Overview Transport mode In this mode an IPSec header (AH or ESP) is inserted between the IP header and the upper layer protocol header Original IP Header TCP DATA Original IP Header AH TCP DATA Authenticated Original IP Header ESP Header TCP DATA ESP Header ESP Authentication Authenticated Encripted Information Network 1 /
27 IPSec (RFC2401) Overview Tunnel mode The original IP packet is encapsulated in another IP datagram, and an IPSec header (AH or ESP) is inserted between the outer and inner headers, Original IP Header TCP DATA Original IP Header Original IP AH TCP DATA Header Authenticated New IP Header ESP Header Original IP Header TCP DATA ESP Trailer ESP Auth, Authenticated Encripted Information Network 1 /
28 IPSec (RFC2401) Overview Key Management and Security Association Diffie-Hellman Key Exchange Security association (SA) Basic building block of IPSec Internet Key Exchange (IKE) SA: Default IPSec method for secure key negociation Phase 1: mutual authentication of systems, session key establishment Phase 2: negociation and establishment of IPSec SA Information Network 1 /
29 Assignment 1 Information Network 1 /
30 Network Simulation(1) Goal: To be able to understand the network topology of the Mandara Network and to learn how to use Packet Tracer. What to do: Obtain a copy of the Packet Tracer installer from the Mandara network: ~noppawat-c/network2012/ Windows: PacketTracer533_setup.exe Linux: PacketTracer533_* Mac: please use the VM image "network2012.tar.gz"» (user: network2012, password: 1234) Install the application on your machine and refer to the link below on how to use it: Tracer Tutorials.html Replicate the Mandara system (refer to the diagram in the next slide) in Packet Tracer Information Network 1 /
31 Network Simulation(2) Essay: Identify the different equipment used in the network Explain briefly the function of each device Categorize which device(s) belong to which OSI layer Information Network 1 /
32 Mandara Network Architecture Information Network 1 /
33 Submission Deadline: May 2, 2012 (Wed) at 17:00 JST Compress your Packet Tracer file and essay in one folder with your name and student ID (e.g., DoudouFall zip) then send it to: For questions and concerns about the assignment, you may contact the TAs by or meet them in A307 Internet Engineering Laboratory Information Network 1 /
Overview of Hierarchical Protocol Architecture. Suguru Yamaguchi Nara Institute of Science and Technology Department of Information Science
Overview of Hierarchical Protocol Architecture Suguru Yamaguchi Nara Institute of Science and Technology Department of Information Science Overview Concept and structure of hierarchical protocol architecture
Hierarchical Protocol Architecture
Hierarchical Protocol Architecture Youki Kadobayashi Nara Institute of Science and Technology Graduate School of Information Science Why protocol architecture?! Hierarchical protocol architecture We ll
Hierarchical Protocol Architecture. Youki Kadobayashi Nara Institute of Science and Technology Graduate School of Information Science
Hierarchical Protocol Architecture Youki Kadobayashi Nara Institute of Science and Technology Graduate School of Information Science Why protocol architecture? = Hierarchical protocol architecture We ll
Chapter 32 Security in the Internet: IPSec, SSL/TLS, PGP,
Chapter 32 Security in the Internet: IPSec, SSL/TLS, PGP, VPN, and Firewalls 32.1 Copyright The McGraw-Hill Companies, Inc. Permission required for reproduction or display. 32.2 Figure 32.1 Common structure
PROGRAMMING Kyriacou E. Frederick University Cyprus. Network communication examples
ACSC424 NETWORK APPLICATION PROGRAMMING Kyriacou E. Frederick University Cyprus communication examples The OSI reference model (proposed by ISO) Application A Application B 2 Application Application Presentation
Network Encryption 3 4/20/17
The Network Layer Network Encryption 3 CSC362, Information Security most of the security mechanisms we have surveyed were developed for application- specific needs electronic mail: PGP, S/MIME client/server
IPSec. Slides by Vitaly Shmatikov UT Austin. slide 1
IPSec Slides by Vitaly Shmatikov UT Austin slide 1 TCP/IP Example slide 2 IP Security Issues Eavesdropping Modification of packets in transit Identity spoofing (forged source IP addresses) Denial of service
Internet Security. - IPSec, SSL/TLS, SRTP - 29th. Oct Lee, Choongho
Internet Security - IPSec, SSL/TLS, SRTP - 29th. Oct. 2007 Lee, Choongho chlee@mmlab.snu.ac.kr Contents Introduction IPSec SSL / TLS SRTP Conclusion 2/27 Introduction (1/2) Security Goals Confidentiality
VPN World. MENOG 16 Istanbul-Turkey. By Ziad Zubidah Network Security Specialist
VPN World MENOG 16 Istanbul-Turkey By Ziad Zubidah Network Security Specialist What is this Van used for?! Armed Van It used in secure transporting for valuable goods from one place to another. It is bullet
CSE543 Computer and Network Security Module: Network Security
CSE543 Computer and Network Security Module: Network Security Professor Trent Jaeger CSE543 - Introduction to Computer and Network Security 1 2 Communication Security Want to establish a secure channel
IPSec. Dr.Talal Alkharobi. IPsec (IP security)
IPSec IPsec (IP security) 2 A suite of protocols for securing Internet Protocol (IP) communications by authenticating and/or encrypting each IP packet in a data stream. IPsec also includes protocols for
Analysis of VPN Protocols
Analysis of VPN Protocols ECE 646 Final Project Presentation Tamer Mabrouk Touhidur Satiar Overview VPN Definitions Emergence of VPN Concept of Tunneling VPN Classification Comparison of Protocols Customer
Transport Level Security
2 Transport Level Security : Security and Cryptography Sirindhorn International Institute of Technology Thammasat University Prepared by Steven Gordon on 28 October 2013 css322y13s2l12, Steve/Courses/2013/s2/css322/lectures/transport.tex,
Protocols, Technologies and Standards Secure network protocols for the OSI stack P2.1 WLAN Security WPA, WPA2, IEEE i, IEEE 802.1X P2.
P2 Protocols, Technologies and Standards Secure network protocols for the OSI stack P2.1 WLAN Security WPA, WPA2, IEEE 802.11i, IEEE 802.1X P2.2 IP Security IPsec transport mode (host-to-host), ESP and
Transport Layer Security
CEN585 Computer and Network Security Transport Layer Security Dr. Mostafa Dahshan Department of Computer Engineering College of Computer and Information Sciences King Saud University mdahshan@ksu.edu.sa
Lehrstuhl für Netzarchitekturen und Netzdienste Fakultät für Informatik Technische Universität München. ilab. Lab 8 SSL/TLS and IPSec
Lehrstuhl für Netzarchitekturen und Netzdienste Fakultät für Informatik Technische Universität München ilab Lab 8 SSL/TLS and IPSec Outlook: On Layer 4: Goal: Provide security for one specific port SSL
VPN and IPsec. Network Administration Using Linux. Virtual Private Network and IPSec 04/2009
VPN and IPsec Network Administration Using Linux Virtual Private Network and IPSec 04/2009 What is VPN? VPN is an emulation of a private Wide Area Network (WAN) using shared or public IP facilities. A
Lecture 33. Firewalls. Firewall Locations in the Network. Castle and Moat Analogy. Firewall Types. Firewall: Illustration. Security April 15, 2005
Firewalls Lecture 33 Security April 15, 2005 Idea: separate local network from the Internet Trusted hosts and networks Intranet Firewall DMZ Router Demilitarized Zone: publicly accessible servers and networks
Virtual Private Networks
Chapter 12 Virtual Private Networks Introduction Business has changed in the last couple of decades. Companies now have to think about having a global presence, global marketing, and logistics. Most of
Virtual Private Network
VPN and IPsec Virtual Private Network Creates a secure tunnel over a public network Client to firewall Router to router Firewall to firewall Uses the Internet as the public backbone to access a secure
A+ Guide to Software: Managing, Maintaining, and Troubleshooting, 5e. Chapter 8 Networking Essentials
A+ Guide to Software: Managing, Maintaining, and Troubleshooting, 5e Chapter 8 Networking Essentials Objectives Learn about the protocols and standards Windows uses for networking Learn how to connect
Internet security and privacy
Internet security and privacy IPsec 1 Layer 3 App. TCP/UDP IP L2 L1 2 Operating system layers App. TCP/UDP IP L2 L1 User process Kernel process Interface specific Socket API Device driver 3 IPsec Create
INF3510 Information Security University of Oslo Spring Lecture 9 Communication Security. Audun Jøsang
INF3510 Information Security University of Oslo Spring 2011 Lecture 9 Communication Security Audun Jøsang Outline Network security concepts Communication security Perimeter security Protocol architecture
The World Wide Web is widely used by businesses, government agencies, and many individuals. But the Internet and the Web are extremely vulnerable to
1 The World Wide Web is widely used by businesses, government agencies, and many individuals. But the Internet and the Web are extremely vulnerable to compromises of various sorts, with a range of threats
Computer Security 3e. Dieter Gollmann. Security.di.unimi.it/sicurezza1415/ Chapter 16: 1
Computer Security 3e Dieter Gollmann Security.di.unimi.it/sicurezza1415/ Chapter 16: 1 Chapter 16: Communications Security Chapter 16: 2 Agenda Threat model Secure tunnels Protocol design principles IPsec
Virtual Private Networks (VPN)
CYBR 230 Jeff Shafer University of the Pacific Virtual Private Networks (VPN) 2 Schedule This Week Mon September 4 Labor Day No class! Wed September 6 VPN Project 1 Work Fri September 8 IPv6? Project 1
CONTENTS. vii. Chapter 1 TCP/IP Overview 1. Chapter 2 Symmetric-Key Cryptography 33. Acknowledgements
CONTENTS Preface Acknowledgements xiii xvii Chapter 1 TCP/IP Overview 1 1.1 Some History 2 1.2 TCP/IP Protocol Architecture 4 1.2.1 Data-link Layer 4 1.2.2 Network Layer 5 1.2.2.1 Internet Protocol 5 IPv4
Int ernet w orking. Internet Security. Literature: Forouzan: TCP/IP Protocol Suite : Ch 28
Int ernet w orking Internet Security Literature: Forouzan: TCP/IP Protocol Suite : Ch 28 Internet Security Internet security is difficult Internet protocols were not originally designed for security The
Identify the features of network and client operating systems (Windows, NetWare, Linux, Mac OS)
Course Outline Network+ Duration: 5 days (30 hours) Learning Objectives: Install and configure a network card Define the concepts of network layers Understand and implement the TCP/IP protocol Install
8. Network Layer Contents
Contents 1 / 43 * Earlier Work * IETF IP sec Working Group * IP Security Protocol * Security Associations * Authentication Header * Encapsulation Security Payload * Internet Key Management Protocol * Modular
CSC 4900 Computer Networks: Security Protocols (2)
CSC 4900 Computer Networks: Security Protocols (2) Professor Henry Carter Fall 2017 Chapter 8 roadmap 8.1 What is network security? 8.2 Principles of cryptography 8.3 Message Integrity 8.4 End point Authentication
Lecture 10: Communications Security
INF3510 Information Security Lecture 10: Communications Security Nils Gruschka University of Oslo Spring 2018 Introduction Nils Gruschka University Kiel (Diploma in Computer Science) T-Systems, Hamburg
CSCE 715: Network Systems Security
CSCE 715: Network Systems Security Chin-Tser Huang huangct@cse.sc.edu University of South Carolina Security in Network Layer Implementing security in application layer provides flexibility in security
Lecture 9: Network Level Security IPSec
Lecture 9: Network Level Security IPSec CS 336/536: Computer Network Security Fall 2015 Nitesh Saxena Adopted from previous lecture by Keith Ross, and Tony Barnard HW3 being graded Course Admin HW4 will
IPsec (AH, ESP), IKE. Guevara Noubir CSG254: Network Security
IPsec (AH, ESP), IKE Guevara Noubir noubir@ccs.neu.edu Securing Networks Control/Management (configuration) Applications Layer telnet/ftp: ssh, http: https, mail: PGP (SSL/TLS) Transport Layer (TCP) (IPSec,
The Internet community has developed application-specific security mechanisms in a number of application areas, including electronic mail (S/MIME,
1 The Internet community has developed application-specific security mechanisms in a number of application areas, including electronic mail (S/MIME, PGP), client/server (Kerberos), Web access (Secure Sockets
Acronyms. International Organization for Standardization International Telecommunication Union ITU Telecommunication Standardization Sector
Acronyms 3DES AES AH ANSI CBC CESG CFB CMAC CRT DoS DEA DES DoS DSA DSS ECB ECC ECDSA ESP FIPS IAB IETF IP IPsec ISO ITU ITU-T Triple DES Advanced Encryption Standard Authentication Header American National
The OSI Model. Open Systems Interconnection (OSI). Developed by the International Organization for Standardization (ISO).
Network Models The OSI Model Open Systems Interconnection (OSI). Developed by the International Organization for Standardization (ISO). Model for understanding and developing computer-to-computer communication
Introduction. INF3510 Information Security. Lecture 10: Communications Security. Outline. Network Security Concepts. University of Oslo Spring 2018
Introduction INF3510 Information Security Lecture 10: Communications Security Nils Gruschka University of Oslo Spring 2018 Nils Gruschka University Kiel (Diploma in Computer Science) T-Systems, Hamburg
IP Security IK2218/EP2120
IP Security IK2218/EP2120 Markus Hidell, mahidell@kth.se KTH School of ICT Based partly on material by Vitaly Shmatikov, Univ. of Texas Acknowledgements The presentation builds upon material from - Previous
Introduction to Networking
Introduction to Networking Chapters 1 and 2 Outline Computer Network Fundamentals Defining a Network Networks Defined by Geography Networks Defined by Topology Networks Defined by Resource Location OSI
CS 356 Internet Security Protocols. Fall 2013
CS 356 Internet Security Protocols Fall 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access Control Lists Chapter 5
Virtual Private Networks.
Virtual Private Networks thm@informatik.uni-rostock.de http://wwwiuk.informatik.uni-rostock.de/ Content Virtual Private Networks VPN Basics Protocols (IPSec, PPTP, L2TP) Objectives of VPNs Earlier Companies
Review on protocols of Virtual Private Network
Review on protocols of Virtual Private Network Shaikh Shahebaz 1, Sujay Madan 2, Sujata Magare 3 1 Student, Dept. Of MCA [JNEC College] Cidoco N-6, Aurangabad, Maharashtra, India 2 Student Dept. of MCA
INDEX. Symbols. 3DES over4 mechanism to4 mechanism...101
INDEX Symbols 3DES...138 6over4 mechanism...101 6to4 mechanism...101 A AA...24 AAAA...99 access control list. See ACL ACK...150 ACK-SYN message...150 ACL...110 ActiveX...38 Active attacks...196 Active
E&CE 358: Tutorial 1. Instructor: Sherman (Xuemin) Shen TA: Miao Wang
E&CE 358: Tutorial 1 Instructor: Sherman (Xuemin) Shen TA: Miao Wang Email: m59wang@uwaterloo.ca 1 About Tutorials TA: Miao Wang Office: EIT 3133; Tutorials: Th 4:30 5:20 pm Topics Supplementary knowledge
Firewalls, Tunnels, and Network Intrusion Detection
Firewalls, Tunnels, and Network Intrusion Detection 1 Firewalls A firewall is an integrated collection of security measures designed to prevent unauthorized electronic access to a networked computer system.
Microsoft Privacy Protected Network Access: Virtual Private Networking and Intranet Security
Operating System Microsoft Privacy Protected Network Access: Virtual Private Networking and Intranet Security White Paper Abstract The Microsoft Windows operating system includes technology to secure communications
Networking and Health Information Exchange Unit 1a ISO Open Systems Interconnection (OSI) Slide 1. Slide 2. Slide 3
Slide 1 Networking and Health Information Exchange Unit 1a ISO Open Systems Interconnection (OSI) Networking and Health Information Exchange Unit 1a ISO Open Systems Interconnection (OSI) Slide 2 Unit
Chapter 6: Security of higher layers. (network security)
Chapter 6: Security of higher layers (network security) Outline TLS SET 1. TLS History of TLS SSL = Secure Socket Layer defined by Netscape normalized as TLS TLS = Transport Layer Security between TCP
IP Security. Have a range of application specific security mechanisms
IP Security IP Security Have a range of application specific security mechanisms eg. S/MIME, PGP, Kerberos, SSL/HTTPS However there are security concerns that cut across protocol layers Would like security
Read addressing table and network map
Term 1 Grade 12 -Task Sheet 4 Name: SIS No Group: N/A (Not Applicable) Signed Date: Grade Start Time: Finishing Time: Read addressing table and network map Picture 1 Picture 2 OBJECTIVE Read addressing
Secure channel, VPN and IPsec. stole some slides from Merike Kaeo
Secure channel, VPN and IPsec stole some slides from Merike Kaeo 1 HTTP and Secure Channel HTTP HTTP TLS TCP TCP IP IP 2 SSL and TLS SSL/TLS SSL v3.0 specified
Chapter 2. Communicating Over The Network. CCNA1-1 Chapter 2
Chapter 2 Communicating Over The Network CCNA1-1 Chapter 2 Communicating Over the Network The Platform for Communications CCNA1-2 Chapter 2 Elements of Communication People communicate in many different
Lecture 13 Page 1. Lecture 13 Page 3
IPsec Network Security: IPsec CS 239 Computer Software March 2, 2005 Until recently, the IP protocol had no standards for how to apply security Encryption and authentication layered on top Or provided
Defining Networks with the OSI Model. Module 2
Defining Networks with the OSI Model Module 2 Objectives Skills Concepts Objective Domain Description Objective Domain Number Understanding OSI Basics Defining the Communications Subnetwork Defining the
IPSec. Overview. Overview. Levente Buttyán
IPSec - brief overview - security associations (SAs) - Authentication Header (AH) protocol - Encapsulated Security Payload () protocol - combining SAs (examples) Overview Overview IPSec is an Internet
Total No. of Questions : 09 ] [ Total No.of Pages : 02
![Total No. of Questions : 09 ] [ Total No.of Pages : 02](/thumbs/86/93170507.jpg "Total No. of Questions : 09 ] [ Total No.of Pages : 02")
CS / IT 321 (CR) Total No. of Questions : 09 ] [ Total No.of Pages : 02 III/IV B. TECH. DEGREE EXAMINATIONS, OCT / NOV - 2015 Second Semester COMPUTER SCIENCE & ENGINEERING NETWK SECURITY Time : Three
TCP/IP THE TCP/IP ARCHITECTURE
TCP/IP-1 The Internet Protocol (IP) enables communications across a vast and heterogeneous collection of networks that are based on different technologies. Any host computer that is connected to the Internet
Copyleft 2005, Binnur Kurt. Objectives
1 ing Fundamentals Copyleft 2005, Binnur Kurt Objectives Define basic networking terms Describe some commonly used network applications Describe the main purposes and functions of computer networking Describe
Chapter 8 Network Security
Chapter 8 Network Security A note on the use of these ppt slides: We re making these slides freely available to all (faculty, students, readers). They re in PowerPoint form so you can add, modify, and
Cryptography and Network Security. Sixth Edition by William Stallings
Cryptography and Network Security Sixth Edition by William Stallings Chapter 20 IP Security If a secret piece of news is divulged by a spy before the time is ripe, he must be put to death, together with
Cryptography and secure channel. May 17, Networks and Security. Thibault Debatty. Outline. Cryptography. Public-key encryption
and secure channel May 17, 2018 1 / 45 1 2 3 4 5 2 / 45 Introduction Simplified model for and decryption key decryption key plain text X KE algorithm KD Y = E(KE, X ) decryption ciphertext algorithm X
CSE509: (Intro to) Systems Security
CSE509: (Intro to) Systems Security Fall 2012 Invited Lecture by Vyas Sekar IPSec 2005-12 parts by Matt Bishop, used with permission Security in Real Life: Motivation Site SF Company X $$$ Site NY Site
VPN, IPsec and TLS. stole slides from Merike Kaeo apricot2017 1
VPN, IPsec and TLS stole slides from Merike Kaeo apricot2017 1 Virtual Private Network Overlay Network a VPN is built on top of a public network (Internet)
Network Layers. Standardization Cruelty 2009/08/12. (C) Herbert Haas
Network Layers Standardization Cruelty (C) Herbert Haas 2009/08/12 The good thing about standards is that there are so many to choose from Andrew S. Tanenbaum Standards We need networking standards Ensure
VPN Ports and LAN-to-LAN Tunnels
CHAPTER 6 A VPN port is a virtual port which handles tunneled traffic. Tunnels are virtual point-to-point connections through a public network such as the Internet. All packets sent through a VPN tunnel
Chapter 7. Local Area Network Communications Protocols
Chapter 7 Local Area Network Communications Protocols The Network Layer The third layer of the OSI Model is the network layer. The network layer is concerned with providing a means for hosts to communicate
HP Instant Support Enterprise Edition (ISEE) Security overview
HP Instant Support Enterprise Edition (ISEE) Security overview Advanced Configuration A.03.50 Mike Brandon Interex 03 / 30, 2004 2003 Hewlett-Packard Development Company, L.P. The information contained
IP Security. Cunsheng Ding HKUST, Kong Kong, China
IP Security Cunsheng Ding HKUST, Kong Kong, China Agenda Some attacks against the IP Brief introduction to IPSec Building Block: Security Association Building Block: Security Association Database Building
Chapter 2. Communicating Over The Network
Chapter 2 Communicating Over The Network CCNA1-1 Chapter 2 Note for Instructors These presentations are the result of a collaboration among the instructors at St. Clair College in Windsor, Ontario. Thanks
Cryptography and Network Security Chapter 16. Fourth Edition by William Stallings
Cryptography and Network Security Chapter 16 Fourth Edition by William Stallings Chapter 16 IP Security If a secret piece of news is divulged by a spy before the time is ripe, he must be put to death,
COSC4377. Chapter 8 roadmap
Lecture 28 Chapter 8 roadmap 8.1 What is network security? 8.2 Principles of cryptography 8.3 Message integrity 8.4 Securing e mail 8.5 Securing TCP connections: SSL 8.6 Network layer security: IPsec 8.7
E-commerce security: SSL/TLS, SET and others. 4.1
E-commerce security: SSL/TLS, SET and others. 4.1 1 Electronic payment systems Purpose: facilitate the safe and secure transfer of monetary value electronically between multiple parties Participating parties:
Networking and Health Information Exchange: ISO Open System Interconnection (OSI)
Networking and Health Information Exchange: ISO Open System Interconnection (OSI) Lecture 4 Audio Transcript Slide 1 Welcome to Networking and Health Information Exchange, ISO Open System Interconnection
COMPUTER SECURITY. Computer Security Secure Communication Channels (2)
COMPUTER SECURITY 7. Secure Communication Channels: 2 case studies (2) Technologies' case studies (2) WEP Wired Equivalent Privacy (3) IPsec Internet Protocol Security (11) SSL Secure Sockets Layer (25)
Cryptography and Network Security
Cryptography and Network Security Third Edition by William Stallings Lecture slides by Lawrie Brown Chapter 15 Electronic Mail Security Despite the refusal of VADM Poindexter and LtCol North to appear,
Hands-On TCP/IP Networking
Hands-On Course Description In this Hands-On TCP/IP course, the student will work on a live TCP/IP network, reinforcing the discussed subject material. TCP/IP is the communications protocol suite on which
Table of Contents. Computer Networks and the Internet
Table of Contents Chapter 1 Computer Networks and the Internet 1.1 What Is the Internet? 1.1.1 A Nuts-and-Bolts Description 1.1.2 A Services Description 1.1.3 What Is a Protocol? 1.2 The Network Edge 1.2.1
A-B I N D E X. backbone networks, fault tolerance, 174
I N D E X A-B access links fault tolerance, 175 176 multiple IKE identities, 176 182 single IKE identity with MLPPP, 188 189 with single IKE identity, 183 187 active/standby stateful failover model, 213
IPsec and SSL/TLS. Applied Cryptography. Andreas Hülsing (Slides mostly by Ruben Niederhagen) Dec. 1st, /43
0/43 IPsec and SSL/TLS Applied Cryptography 0 Andreas Hülsing (Slides mostly by Ruben Niederhagen) Dec. 1st, 2016 Cryptography in the TCP/IP stack application layer transport layer network layer data-link
CompTIA Network+ Course
CompTIA Network+ Course Duration: 5 Days Course Delivery: Classroom Language: English Target Audience Comprehensive approach to both preparing a student for CompTIA's Network+ exam and developing proficiency
IBM i Version 7.2. Security Virtual Private Networking IBM
IBM i Version 7.2 Security Virtual Private Networking IBM IBM i Version 7.2 Security Virtual Private Networking IBM Note Before using this information and the product it supports, read the information
Application Layer. Presentation Layer. Session Layer. Transport Layer. Network Layer. Data Link Layer. Physical Layer
ISO/OSI Model SSL: Security at Transport Layer Application Layer Peer-to-peer Application Layer Network Security Assurance Presentation Layer Session Layer Transport Layer Presentation Layer Session Layer
Computer Security 3e. Dieter Gollmann. Security.di.unimi.it/sicurezza1516/ Chapter 16: 1
Computer Security 3e Dieter Gollmann Security.di.unimi.it/sicurezza1516/ Chapter 16: 1 Chapter 16: Communications Security Chapter 16: 2 Agenda Threat model Secure tunnels Protocol design principles IPsec
iii PPTP... 7 L2TP/IPsec... 7 Pre-shared keys (L2TP/IPsec)... 8 X.509 certificates (L2TP/IPsec)... 8 IPsec Architecture... 11
iii PPTP................................................................................ 7 L2TP/IPsec........................................................................... 7 Pre-shared keys (L2TP/IPsec)............................................................
Internetworking models
TEL3214 Computer Communication s Lecture 2 Internetworking models SSH (Secure Shell) SNMP (Simple Management Protocol) SMTP (Simple Mail Transfer Protocol) FTP (File Transfer Protocol) TFTP (Trivial File
HUAWEI USG6000 Series Next-Generation Firewall Technical White Paper VPN HUAWEI TECHNOLOGIES CO., LTD. Issue 1.1. Date
HUAWEI USG6000 Series Next-Generation Firewall Technical White Paper VPN Issue 1.1 Date 2014-03-14 HUAWEI TECHNOLOGIES CO., LTD. 2014. All rights reserved. No part of this document may be reproduced or
Sample excerpt. Virtual Private Networks. Contents
Contents Overview...................................................... 7-3.................................................... 7-5 Overview of...................................... 7-5 IPsec Headers...........................................
Principles of Information Security, Fourth Edition. Chapter 8 Cryptography
Principles of Information Security, Fourth Edition Chapter 8 Cryptography Learning Objectives Upon completion of this material, you should be able to: Chronicle the most significant events and discoveries
Chapter 3 Protocols and the TCP/IP Suite
Chapter 3 Protocols and the TCP/IP Suite 3.1 The Need for a Protocol Architecture need for a standard communication tasks by layers architecture peer protocol: a set of rules or conventions to exchange
Prof. Shervin Shirmohammadi SITE, University of Ottawa. Security Architecture. Lecture 13: Prof. Shervin Shirmohammadi CEG
Lecture 13: Security Architecture Prof. Shervin Shirmohammadi SITE, University of Ottawa Prof. Shervin Shirmohammadi CEG 4185 13-1 Network Assets and Security Threats Assets: Hardware (PC, workstation,
Set Up a Remote Access Tunnel (Client to Gateway) for VPN Clients on RV016, RV042, RV042G and RV082 VPN Routers
Set Up a Remote Access Tunnel (Client to Gateway) for VPN Clients on RV016, RV042, RV042G and RV082 VPN Routers Objective A Virtual Private Network (VPN) is a private network that is used to virtually
Administrator's Guide
Administrator's Guide Contents Administrator's Guide... 7 Using Web Config Network Configuration Software... 8 About Web Config... 8 Accessing Web Config... 8 Changing the Administrator Password in Web
Additional Material. Suguru Yamaguchi Nara Institute of Science and Technology Department of Information Science Information Network I/No.
Additional Material Suguru Yamaguchi Nara Institute of Science and Technology Department of Information Science 2010 Information Network I/No.4 1 ! Protocol Suites for the Internet! Widely used from LANs
Chapter 11 The IPSec Security Architecture for the Internet Protocol
Chapter 11 The IPSec Security Architecture for the Internet Protocol IPSec Architecture Security Associations AH / ESP IKE [NetSec], WS 2008/2009 11.1 The TCP/IP Protocol Suite Application Protocol Internet
TRANSMISSION CONTROL PROTOCOL. ETI 2506 TELECOMMUNICATION SYSTEMS Monday, 7 November 2016
TRANSMISSION CONTROL PROTOCOL ETI 2506 TELECOMMUNICATION SYSTEMS Monday, 7 November 2016 ETI 2506 - TELECOMMUNICATION SYLLABUS Principles of Telecom (IP Telephony and IP TV) - Key Issues to remember 1.
Chapter 6. IP Security. Dr. BHARGAVI H. GOSWAMI Department of Computer Science Christ University
Chapter 6 IP Security Dr. BHARGAVI H. GOSWAMI Department of Computer Science Christ University +91 9426669020 bhargavigoswami@gmail.com Topic List 1. IP Security Overview 2. IP Security Architecture 3.
Glenda Whitbeck Global Computing Security Architect Spirit AeroSystems
Glenda Whitbeck Global Computing Security Architect Spirit AeroSystems History 2000 B.C. Egyptian Hieroglyphics Atbash - Hebrew Original alphabet mapped to different letter Type of Substitution Cipher
Chapter 2 - Part 1. The TCP/IP Protocol: The Language of the Internet
Chapter 2 - Part 1 The TCP/IP Protocol: The Language of the Internet Protocols A protocol is a language or set of rules that two or more computers use to communicate 2 Protocol Analogy: Phone Call Parties