Computer networks -- 2007-2008 -- info.uvt.ro/Course 11

These pages are somehow outdated and it is recommended to consult the newer version at Computer networks -- 2008-2009 -- info.uvt.ro (by Ciprian Crăciun).

Quick links:

• front;
• courses 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13;
• laboratories agenda, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, evaluation, tools, repository.

---

Computer network security

Attacks

• types:
  • internal vs. external;
  • organized (distributed);

• phases:
  • reconascence:
    • wikipedia:Network mapping;
    • wikipedia:Port scanner;
    • wikipedia:Nmap;
  • gaining access;
  • using the "captured" resources;

• DOS -- Denial of service:
  • wikipedia:Denial-of-service attack;
  • wikipedia:SYN flood;
  • wikipedia:Ping flood;

• man in the middle:
  • wikipedia:Man-in-the-middle attack;

• sniffing:
  • wikipedia:Packet sniffer;

• spoofing:
  • wikipedia:Spoofing attack;
  • wikipedia:ARP spoofing;
  • wikipedia:IP address spoofing;
  • wikipedia:E-mail spoofing;
  • wikipedia:DNS cache poisoning;
  • wikipedia:Transmission Control Protocol#Connection hijacking;

• miscellaneous -- not necessary related to networks:
  • wikipedia:Buffer overflow;
  • wikipedia:Computer insecurity;
  • wikipedia:Phishing;

Solutions

• security policy;

• encryption:
  • wikipedia:Cryptography;
  • wikipedia:Encryption;
  • wikipedia:Cipher;
  • wikipedia:Key (cryptography);
  • wikipedia:Steganography;
  • wikipedia:Symmetric-key algorithm:
    • wikipedia:Stream cipher;
    • wikipedia:Block cipher:
      • wikipedia:Block cipher modes of operation -- IV, ECB, CBC, CFB, OFB, CTR;
  • wikipedia:Public-key cryptography;

• hashes:
  • wikipedia:Cryptographic hash function;
  • wikipedia:Message authentication code;

• digital signatures:
  • wikipedia:Digital signature;

• security protocols:
  • wikipedia:Transport Layer Security;
  • wikipedia:Kerberos (protocol);
  • wikipedia:IPsec;

• secure protocols:
  • wikipedia:Secure Shell;
  • wikipedia:FTPS;
  • wikipedia:https;
  • wikipedia:SSH file transfer protocol;

• security software / devices:
  • wikipedia:Firewall;
  • wikipedia:Intrusion-prevention system;
  • wikipedia:Intrusion detection system;
  • wikipedia:Virtual private network;
  • wikipedia:Onion routing;

---

• conf. dr. Victoria Iordan, iordan@info.uvt.ro
• lect. drd. Horia Popa, hpopa@info.uvt.ro
• Marian Neagul, marian@info.uvt.ro
• Ciprian Dorin Crăciun, ccraciun@info.uvt.ro
• Mihail Găianu, mgaianu@info.uvt.ro