Title: Class Outline 22
Course: KVCC BUS214 > Section: Class Outlines

0.      Security Solutions

a.      Proxy Servers

i.           What They do

1.      Restrict Access

2.      Anonymize

3.      Web Caching

4.      Examples

b.      Content Filtering Server

1. Network Access Control NAC

i.           802.1x

ii.           Define what a computer must have before it can access the network

iii.           NAC Agent

iv.           Examples

1.            Network Access Protection - Windows solution is removed in Windows 10 and they push Configuration Manager

1. Security Zones

a.      Intranet - Internal Resources

b.      Internet - External Network through WAN

c.      Extranet - Some form of accessible internal resources to an outside party

d.      DMZ /BASTION host - Computer that are isolated from the protection of the firewall

i.           Harden

ii.           Isolate functions

1. All in One Security Appliances

a.      Hardware Based

b.      Software Based

i.           Clear OS

1. DMZ

a.      Why we need the DMZ

b.      What should be in the DMZ

c.      How to protect from opening up the network

1. Firewalls

a.      What is a firewall

b.      Software

i.           Available in most OS and Antivirus Programs

c.      Hardware

i.           Sold by different companies similar to the network appliances

d.      Types

i.           Packet Filtering

1.      Analyzes the packets

a.      Block traffic based on

i.           IP

ii.           Ports

iii.           Protocols

ii.           Stateful inspection/circuit level

1.      Also looks at header

2.      Does the communication make sense

3.      Sessions that are enabled through the firewall

iii.           Application Layer Firewall/Proxy Firewall

1.      High Layer Inspection

2.      All packet is stopped at the firewall and inspected then new communication is created

1.      Wireless Networks

a.      Configuration

i.           Ad Hoc

ii.           Infrastructure

b.      Antennae

c.      Encryption

i.           WEP

1.      Shared Encryption Key System

a.      128 or 256 bit Key

b.      4 Way challenge

2.      Packet Injection

ii.           WPA

1.           TKIP - Temporal Key Integrity Protocol

a.           Rotating keys

b.           Real authentication

2.           Cracking

iii.           WPA2

1.           AES

a.           TKIP

b.           CCMP - Counter Mode with Cipher block Chaining Message Authentication Code Protocol

Attached Files: | - KVCC BUS214_InfoSystemsSecurity_Outline 22.pdf