RelativeResourceManager3

RelativeResourceManager3 - CprE 530 Lecture 13 General...

Info iconThis preview shows pages 1–5. Sign up to view the full content.

View Full Document Right Arrow Icon
CprE 530 Lecture 13 General countermeasures Since IP is so ingrained in the Internet it is hard to provide security. There are a few general countermeasures. – IP Filtering – Network Address Translation (NAT) – Virtual Private Network (VPN) – Encrypted IPV4 & IPV6 (IPSec)
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
IP Filtering Routers can be configured to filter out packets based on: – IP Address (black listing) Hard to keep list curren • Hard to keep list current • Hard to get off the list (DOS) – Port numbers • Rogue protocols use multiple ports – Protocol types (TCP, UDP, ICMP) • Course grain filtering Network Address Translation
Background image of page 2
Network Address Translation Used to extend the address space – Internal address ranges • 10/8 10.0.0.0 172.16/12 172.16.0.0 (16 class B networks • 172.16/12 172.16.0.0 (16 class B networks) • 192.168/16 192.168.0.0 (class B network) Static NAT Dynamic NAT NAT Not really designed as a security device Does not provide security and is often coupled with a firewa coupled with a firewall
Background image of page 3

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Static NAT One to one mapping of external addresses to internal addresses Used when a small number of machines • Used when a small number of machines need Internet access.
Background image of page 4
Image of page 5
This is the end of the preview. Sign up to access the rest of the document.

This note was uploaded on 11/22/2009 for the course CPR E 530 taught by Professor Staff during the Spring '08 term at Iowa State.

Page1 / 16

RelativeResourceManager3 - CprE 530 Lecture 13 General...

This preview shows document pages 1 - 5. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online