1 Network Security Derived from original slides by Henric Johnson Blekinge Institute of Technology, Sweden From the book by William Stallings.

Slides:

Advertisements

Similar presentations

Net security - budi rahardjo Overview of Network Security Budi Rahardjo CISCO seminar 13 March 2002.

Advertisements

ECE454/599 Computer and Network Security Dr. Jinyuan (Stella) Sun Dept. of Electrical Engineering and Computer Science University of Tennessee Fall 2012.

NS-H /11041 Attacks. NS-H /11042 The Definition Security is a state of well-being of information and infrastructures in which the possibility.

Information Security 1 Information Security: Security Tools Jeffy Mwakalinga.

Cosc 4765 Network Security: Routers, Firewall, filtering, NAT, and VPN.

1 Network Security Ola Flygt Växjö University

Computer Security Fundamentals by Chuck Easttom Chapter 4 Denial of Service Attacks.

IT 221: Introduction to Information Security Principles Lecture 1: Introduction to IT Security For Educational Purposes Only Revised: August 28, 2002.

Chapter 1 – Introduction

1 Cryptography and Network Security Third Edition by William Stallings Lecturer: Dr. Saleem Al_Zoubi.

Security Overview Hofstra University University College for Continuing Education - Advanced Java Programming Lecturer: Engin Yalt May 24, 2006.

Firewalls and Intrusion Detection Systems

1 Security Concepts Introduction. 2 Main Themes of the Course Vulnerabilities of networked applications –Worms, denial of service attacks, malicious code.

6/9/2015Madhumita. Chatterjee1 Overview of Computer Security.

Blekinge Institute of Technology, Sweden

بسم الله الرحمن الرحيم NETWORK SECURITY Done By: Saad Al-Shahrani Saeed Al-Smazarkah May 2006.

Beyond the perimeter: the need for early detection of Denial of Service Attacks John Haggerty,Qi Shi,Madjid Merabti Presented by Abhijit Pandey.

Privacy - not readable Permanent - not alterable (can't edit, delete) Reliable - (changes detectable) But the data must be accessible to persons authorized.

Henric Johnson1 Network Security /. 2 Outline Attacks, services and mechanisms Security attacks Security services Methods of Defense A model for Internetwork.

Bazara Barry1 Security on Networks and Information Systems Bazara I. A. Barry Department of Computer Science – University of Khartoum

Security Overview. 2 Objectives Understand network security Understand security threat trends and their ramifications Understand the goals of network.

Denial of Service Attacks: Methods, Tools, and Defenses Authors: Milutinovic, Veljko, Savic, Milan, Milic, Bratislav,

1 Advanced Application and Web Filtering. 2 Common security attacks Finding a way into the network Exploiting software bugs, buffer overflows Denial of.

1 Chapter 6 Network Security Threats. 2 Objectives In this chapter, you will: Learn how to defend against packet sniffers Understand the TCP, UDP, and.

Shared success Outline What is network security? Why do we need security? Who is vulnerable? Common security attacks and countermeasures. How to secure.

Computer Security: Principles and Practice First Edition by William Stallings and Lawrie Brown Lecture slides by Lawrie Brown Chapter 8 – Denial of Service.

Network security Further protocols and issues. Protocols: recap There are a few main protocols that govern the internet: – Internet Protocol: IP – Transmission.

Introduction to Computer Security1 Information Security Principles Assistant Professor Dr. Sana’a Wafa Al-Sayegh 1 st semester University of.

1 Chapter 1 The need for security Computerized trend (all kind of information are in the database) Information passing through Internet.

1 Introduction to Network Security Spring Outline Introduction Attacks, services and mechanisms Security threats and attacks Security services.

1 CHAPTER 3 CLASSES OF ATTACK. 2 Denial of Service (DoS) Takes place when availability to resource is intentionally blocked or degraded Takes place when.

1 Introduction to Information Security Spring 2012.

8/30/2010CS 686 Definition of Security/Privacy EJ Jung CS 686 Special Topics in CS Privacy and Security.

Network Security Introduction Light stuff – examples with Alice, Bob and Trudy Serious stuff - Security attacks, mechanisms and services.

NETWORK SECURITY. TextBook William Stallings, Cryptography and Network Security: Principles and Practice, ? Edition.

Network Security. 2 SECURITY REQUIREMENTS Privacy (Confidentiality) Data only be accessible by authorized parties Authenticity A host or service be able.

© 2006 Cisco Systems, Inc. All rights reserved. Cisco IOS Threat Defense Features.

ACM 511 Introduction to Computer Networks. Computer Networks.

Distributed Denial of Service Attacks Shankar Saxena Veer Vivek Kaushik.

1 University of Palestine Information Security Principles ITGD 2202 Ms. Eman Alajrami 2 nd Semester

Henric Johnson1 Network Security Henric Johnson Blekinge Institute of Technology, Sweden

©Dr. Respickius Casmir IT Security In a Nutshell – Session 1 By Dr. Respickius Casmir.

What security is about in general? Security is about protection of assets –D. Gollmann, Computer Security, Wiley Prevention –take measures that prevent.

1 Pertemuan 03 Ancaman dan Serangan Matakuliah: H0242 / Keamanan Jaringan Tahun: 2006 Versi: 1.

© 2007 Cisco Systems, Inc. All rights reserved.Cisco Public ITE PC v4.0 Chapter 1 1 Basic Security Networking for Home and Small Businesses – Chapter 8.

1 Chapter 1 – Background Computer Security T/ Tyseer Alsamany - Computer Security.

IT Security. What is Information Security? Information security describes efforts to protect computer and non computer equipment, facilities, data, and.

Quality of Information System (IS) reflecting local correctness and reliability of the operating system; the logical completeness of the hardware and software.

Chap1: Is there a Security Problem in Computing?.

Ingredients of Security

DoS/DDoS attack and defense

Network Security Threats KAMI VANIEA 18 JANUARY KAMI VANIEA 1.

Network Security Introduction

Network Security and Cryptography

1 Network Security: Introduction Behzad Akbari Fall 2009 In the Name of the Most High.

Lect 8 Tahani al jehain. Types of attack Remote code execution: occurs when an attacker exploits a software and runs a program that the user does not.

Denail of Service(Dos) Attacks & Distributed Denial of Service(DDos) Attacks Chun-Chung Chen.

1 Network Security Maaz bin ahmad.. 2 Outline Attacks, services and mechanisms Security attacks Security services Security Mechanisms A model for Internetwork.

Network Security SUBMITTED BY:- HARENDRA KUMAR IT-3 RD YR. 1.

Network security Cs634 IS  Course Content  Materials  Assessment 2 Agenda.

Comparison of Network Attacks COSC 356 Kyler Rhoades.

NETWORK SECURITY Cryptography By: Abdulmalik Kohaji.

Introduction to Information Security

امنیت شبکه علی فانیان

Cryptography and Network Security Chapter 1

Figure 1-7: Eavesdropping on a Dialog

Qishi Wu University of Memphis

سمینار آموزشی امنیت شبکه

Network Security Ola Flygt Växjö University

Confidentiality, Integrity, Nonrepudiation

Presentation transcript:

1 Network Security Derived from original slides by Henric Johnson Blekinge Institute of Technology, Sweden From the book by William Stallings

2 Outline Attacks, services and mechanisms Security attacks Security services Methods of Defense A model for Internetwork Security DOS Attack mechanisms

3 Attacks, Services and Mechanisms Security Attack: Any action that compromises the security of information. Security Mechanism: A mechanism that is designed to detect, prevent, or recover from a security attack. Security Service: A service that enhances the security of data processing systems and information transfers. A security service makes use of one or more security mechanisms.

4 Security Attacks

5 Interruption: This is an attack on availability Interception: This is an attack on confidentiality Modification: This is an attack on integrity Fabrication: This is an attack on authenticity

6 Security Goals Integrity Confidentiality Avalaibility

7

8 Security Services Confidentiality (privacy) Authentication (who created or sent the data) Integrity (has not been altered) Non-repudiation (the order is final) Access control (prevent misuse of resources) Availability (permanence, non-erasure) – Denial of Service Attacks – Virus that deletes files

9

10

11 Methods of Defence Encryption Software Controls (access limitations in a data base, in operating system protect each user from other users) Hardware Controls (smartcard) Policies (frequent changes of passwords) Physical Controls Firewall based access restrictions

12 Denial of Service Attacks Various forms UDP flood -- overrun the end server with lots of packets TCP SYN attack -- don’t complete the 3- way handshake of TCP ICMP Flood -- overload end server CPU with many packets

13 Denial of Service Attacks ICMP Directed Broadcast: Send ICMP echo request to broadcast addresses, broadcast directed towards the victim DNS Flood: Request a zone transfer CGI Flood: Keep web server CPU busy Fragmentation attack: Send fragments of incomplete packets, buffers exhausted.