CprE 530Lecture 13General countermeasures•Since IP is so ingrained in the Internet it is hard to provide security. There are a few general countermeasures.– IP Filtering– Network Address Translation (NAT)– Virtual Private Network (VPN)– Encrypted IPV4 & IPV6 (IPSec)
has intentionally blurred sections.
Sign up to view the full version.
IP Filtering•Routers can be configured to filter out packets based on:– IP Address (black listing)•Hard to keep list current•Hard to get off the list (DOS)– Port numbers•Rogue protocols use multiple ports– Protocol types (TCP, UDP, ICMP)•Course grain filteringNetwork Address Translation