Network Security Foundations : Technology Fundamentals for IT Success

by Matthew Strebe

• ISBN13: 9780782143744
• ISBN10: 0782143741
• eBook ISBN(s): 9780782151367
• Format: Paperback
• Copyright: 2004-10-01
• Publisher: Sybex
• More Book Details
• Purchase Benefits

Summary

The world of IT is always evolving, but in every area there are stable, core concepts that anyone just setting out needed to know last year, needs to know this year, and will still need to know next year. The purpose of the Foundations series is to identify these concepts and present them in a way that gives you the strongest possible starting point, no matter what your endeavor. Network Security Foundations provides essential knowledge about the principles and techniques used to protect computers and networks from hackers, viruses, and other threats. What you learn here will benefit you in the short term, as you acquire and practice your skills, and in the long term, as you use them. Topics covered include: * Why and how hackers do what they do * How encryption and authentication work * How firewalls work * Understanding Virtual Private Networks (VPNs) * Risks posed by remote access * Setting up protection against viruses, worms, and spyware * Securing Windows computers * Securing UNIX and Linux computers * Securing Web and email servers * Detecting attempts by hackers

Author Biography

Matthew Strebe is the best-selling author of numerous books, including Firewalls: 24seven from Sybex. He is the Chief Technology Officer of Connetic, an IT outsourcing firm headquartered in San Diego, and wastes his scant spare time writing www.slashnot.com. Matt's long history of networking includes installing the US Navy's first fiber-optic local area network on a ship.

Table of Contents

Introduction	xv
Security Principles	1	(18)
Why Computers Aren't Secure	2	(2)
The History of Computer Security	4	(9)
--1945	5	(2)
1945--1955	7	(1)
1955--1965	7	(1)
1965--1975	7	(1)
1975--1985	8	(1)
1985--1995	9	(2)
1995--2005	11	(1)
2005--	12	(1)
Security Concepts	13	(4)
Trust	13	(1)
Authentication	13	(1)
Chain of Authority	14	(1)
Accountability	15	(1)
Access Control	15	(2)
Terms to Know	17	(1)
Review Questions	18	(1)
Understanding Hacking	19	(20)
What Is Hacking?	20	(1)
Types of Hackers	20	(4)
Security Experts	21	(1)
Script Kiddies	21	(1)
Underemployed Adult Hackers	21	(1)
Ideological Hackers	22	(1)
Criminal Hackers	23	(1)
Corporate Spies	23	(1)
Disgruntled Employees	24	(1)
Vectors That Hackers Exploit	24	(3)
Direct Intrusion	25	(1)
Dial-Up	25	(1)
Internet	26	(1)
Wireless	26	(1)
Hacking Techniques	27	(10)
Target Selection	27	(2)
Information Gathering	29	(1)
Attacks	30	(7)
Terms to Know	37	(1)
Review Questions	38	(1)
Encryption and Authentication	39	(14)
Encryption	40	(4)
Secret Key Encryption	41	(1)
One-Way Functions (Hashes)	41	(2)
Public Key Encryption	43	(1)
Hybrid Cryptosystems	44	(1)
Authentication	44	(6)
Password Authentication	45	(2)
Session Authentication	47	(1)
Public Key Authentication	48	(1)
Certificate-Based Authentication	49	(1)
Biometric Authentication	50	(1)
Terms to Know	51	(1)
Review Questions	52	(1)
Managing Security	53	(18)
Developing a Security Policy	54	(9)
Creating a Policy Requirements Outline	54	(4)
Security Policy Best Practices	58	(5)
Implementing Security Policy	63	(4)
Applying Automated Policy	64	(1)
Human Security	65	(2)
Updating the Security Policy	67	(2)
The Security Cycle	67	(2)
Terms to Know	69	(1)
Review Questions	70	(1)
Border Security	71	(16)
Principles of Border Security	72	(2)
Understanding Firewalls	74	(10)
Fundamental Firewall Functions	74	(8)
Firewall Privacy Services	82	(1)
Virtual Private Networks	83	(1)
Other Border Services	83	(1)
Selecting a Firewall	84	(1)
Terms to Know	85	(1)
Review Questions	86	(1)
Virtual Private Networks	87	(14)
Virtual Private Networking Explained	88	(2)
IP Encapsulation	88	(1)
Cryptographic Authentication	89	(1)
Data Payload Encryption	90	(1)
Characteristics of VPNs	90	(1)
Common VPN Implementations	91	(5)
IPSec	92	(1)
L2TP	93	(1)
PPTP	94	(1)
PPP/SSL or PPP/SSH	95	(1)
VPN Best Practices	96	(3)
Terms to Know	99	(1)
Review Questions	100	(1)
Securing Remote and Home Users	101	(10)
The Remote Security Problem	102	(1)
Virtual Private Security Holes	102	(1)
Laptops	102	(1)
Protecting Remote Machines	103	(4)
VPN Connections	104	(2)
Data Protection and Reliability	106	(1)
Backups and Archiving	106	(1)
Protecting against Remote Users	107	(1)
Terms to Know	108	(1)
Review Questions	109	(2)
Malware and Virus Protection	111	(16)
Understanding Malware	112	(5)
Understanding Viruses	112	(5)
Virus Protection	117	(2)
Prevention	117	(1)
Natural Immunity	118	(1)
Active Protection	118	(1)
Understanding Worms and Trojan Horses	119	(2)
Protecting Against Worms	121	(1)
Implementing Virus Protection	121	(4)
Client Virus Protection	122	(1)
Server-Based Virus Protection	123	(1)
E-Mail Gateway Virus Protection	124	(1)
Firewall-Based Virus Protection	124	(1)
Enterprise Virus Protection	125	(1)
Terms to Know	125	(1)
Review Questions	126	(1)
Creating Fault Tolerance	127	(22)
Causes for Loss	128	(5)
Human Error	128	(1)
Routine Failure Events	128	(2)
Crimes	130	(2)
Environmental Events	132	(1)
Fault Tolerance Measures	133	(14)
Backups	133	(5)
Uninterruptible Power Supplies (UPSs) and Power Generators	138	(1)
Redundant Array of Independent Disks (RAID)	139	(2)
Permissions	141	(1)
Border Security	141	(1)
Auditing	141	(1)
Offsite Storage	141	(1)
Archiving	142	(1)
Deployment Testing	142	(1)
Circuit Redundancy	143	(1)
Physical Security	143	(1)
Clustered Servers	144	(3)
Terms to Know	147	(1)
Review Questions	148	(1)
Windows Security	149	(24)
Windows Local Security	150	(9)
Security Identifiers	151	(1)
Logging In	152	(1)
Resource Access	153	(1)
Objects and Permissions	154	(3)
NTFS File System Permissions	157	(1)
Encrypting File System (EFS)	158	(1)
Windows Network Security	159	(12)
Active Directory	159	(1)
Kerberos Authentication and Domain Security	160	(3)
Group Policy	163	(3)
Share Security	166	(3)
IPSec	169	(2)
Terms to Know	171	(1)
Review Questions	172	(1)
Securing Unix Servers	173	(18)
A Brief History of Unix	174	(3)
Unix Security Basics	177	(7)
Understanding Unix File Systems	177	(3)
User Accounts	180	(4)
File System Security	184	(5)
Access Control Lists	186	(1)
Execution Permissions	186	(3)
Terms to Know	189	(1)
Review Questions	190	(1)
Unix Network Security	191	(22)
Unix Network Security Basics	192	(1)
Remote Logon Security	193	(1)
Remote Access	194	(2)
Pluggable Authentication Module (PAM)	195	(1)
Distributed Logon	196	(4)
Distributed passwd	196	(1)
NIS and NIS+	196	(2)
Kerberos	198	(2)
File Sharing Security	200	(6)
File Transfer Protocol (FTP)	201	(2)
Network File System (NFS)	203	(1)
Hypertext Transfer Protocol (HTTP)	204	(1)
Samba	205	(1)
Firewalling Unix Machines	206	(4)
IPTables and IPChains	207	(1)
TCP Wrappers	208	(1)
Firewall Toolkit (FWTK)	209	(1)
Terms to Know	210	(1)
Review Questions	211	(2)
Web Server Security	213	(24)
Web Security Problems	214	(1)
Implementing Web Server Security	214	(21)
Common Security Solutions	215	(11)
Apache Security	226	(3)
Internet Information Services Security	229	(6)
Terms to Know	235	(1)
Review Questions	236	(1)
E-mail Security	237	(22)
E-mail Encryption and Authentication	238	(2)
S/MIME	239	(1)
PGP	240	(1)
Mail Forgery	240	(1)
E-mail Viruses	241	(3)
Outlook Viruses	242	(1)
Commercial Gateway Virus Scanners	242	(1)
AMaViS	243	(1)
Attachment Security	244	(5)
Strip All Attachments	244	(1)
Allow Only Specific Attachments	245	(1)
Strip Only Dangerous Attachments	245	(3)
Foreign E-mail Servers	248	(1)
Spam	249	(7)
Authenticating SMTP	250	(3)
Systemic Spam Prevention	253	(3)
Terms to Know	256	(1)
Review Questions	257	(2)
Intrusion Detection	259	(10)
Intrusion Detection Systems	260	(3)
Inspectors	260	(1)
Decoys	261	(2)
Auditors	263	(1)
Available IDSs	263	(4)
Windows System	264	(1)
Tripwire	265	(1)
Snort	265	(1)
Demarc PureSecure	266	(1)
NFR Network Intrusion Detector	267	(1)
Terms to Know	267	(1)
Review Questions	268	(1)
Appendix A Answers to Review Questions	269	(16)
Chapter 1	269	(1)
Chapter 2	270	(1)
Chapter 3	271	(1)
Chapter 4	272	(1)
Chapter 5	273	(1)
Chapter 6	274	(1)
Chapter 7	275	(1)
Chapter 8	276	(1)
Chapter 9	276	(2)
Chapter 10	278	(1)
Chapter 11	279	(1)
Chapter 12	280	(1)
Chapter 13	281	(1)
Chapter 14	282	(1)
Chapter 15	283	(2)
Glossary	285	(14)
Index	299