Controls

Chapter 9: Identifying and Analyzing Risk Mitigation Controls

Identifying and Analyzing Risk Mitigation Controls

Overview of Control Families Identifying and Analyzing Risk Mitigation Controls Review with Class

Overview of Control Families Identifying and Analyzing Risk Mitigation Controls

Overview of Control Families Identifying and Analyzing Risk Mitigation Controls

Overview of Control Families Identifying and Analyzing Risk Mitigation Controls

Procedural Controls Identifying and Analyzing Risk Mitigation Controls

Policies Identifying and Analyzing Risk Mitigation Controls Procedures

Plans Identifying and Analyzing Risk Mitigation Controls

Technical Controls Identifying and Analyzing Risk Mitigation Controls

12 Port Numbers

13 Port Numbers The port numbers are divided into three ranges: The Well Known Ports are those from 0 through The Registered Ports are those from 1024 through The Dynamic and/or Private Ports are those from through 65535

14 Well-Known Ports The Well Known Ports are those from 0 through 1023 The Well Known Ports are controlled and assigned by the IANA and typically can only be used by system (or root) processes or by programs executed by privileged users. Ports are defined in the TCP [RFC793] to name the ends of logical connections which carry long term conversations. For the purpose of providing services to unknown callers, a service contact port is defined. To the extent possible, these same port assignments are used with the UDP [RFC768].

15 Registered Ports The Registered Ports are those from 1024 through The Registered Ports are not controlled by the IANA and on most systems can be used by ordinary user processes or programs executed by ordinary users.

16 Dynamic/Private Ports The Dynamic and/or Private Ports are those from through 65535

17 Port Number References TCP/UDP Port Numbers Well Known Port Numbers

Private IP Addresses TCP/UDP Port Numbers Well Known Port Numbers RFC1918 name IP address range number of addresses classfulclassful de scription largest CI DR block (subnet mask)CI DR host id size mask bits 24-bit block ,777,21 6 single clas s A networkclas s A network /8 ( ) 24 bits8 bits 20-bit block ,048, contiguou s class B networks /12 ( ) 20 bits12 bits 16-bit block , contiguou s class C networks /16 ( ) 16 bits The Internet Engineering Task Force (IETF) has directed the Internet Assigned Numbers Authority (IANA) to reserve the following IPv4 address ranges for private networks, as published in RFC 1918