Lesson 9
TCP-IP-STACK Conclusion
This module discussed how hackers often exploit weaknesses in the TCP/IP stack of various Internet hosts to compromise a network's security.
Reviewing the basics of TCP/IP, you learned how packets are created and sent according to the OSI model, and saw how a network routes those packets.
If you understand how messages are sent across the Internet, you can take specific steps to ensure that your company is sending information as securely as possible.
Reviewing the basics of TCP/IP, you learned how packets are created and sent according to the OSI model, and saw how a network routes those packets.
If you understand how messages are sent across the Internet, you can take specific steps to ensure that your company is sending information as securely as possible.
Now that you have completed this module, you should be able to
- Describe how network security is affected at the TCP/IP levels
- Describe the physical and data link layers of a network
- Identify the Internet layer and its weaknesses
- Identify the Transport Layer (TCP/UDP)and its weaknesses
- Identify the application layer and its weaknesses
- Discuss the security implications of commonly used applications
- Describe the OSI model and how packets are sent across the Internet
- Address Resolution Protocol (ARP):A network protocol that is used to convert IP addresses to physical network addresses by sending an ARP broadcast to request the address.
- Compressed Serial Line Internet Protocol (CSLIP): Compresses the IP and TCP headers, thus reducing the size of the packet and improving bandwidth.
- Daemon: A process that performs a specified operation at a predefined time or in response to certain events. Daemon is a UNIX term. In other operating systems such as Windows, daemons are referred to as services.
- Datagram: An IP packet.
- Denial-of-service: An attempt by attackers to prevent legitimate users of a service from using that service by flooding a network, or by disrupting connections or services.
- Encryption: The process of disguising a message to make it unreadable by humans. The resulting data is called ciphertext.
- File Transfer Protocol (FTP): An approved method that allows the delivery of files across the Internet. An FTP server stores directories of files using a hierarchical structure. Normally, a user is a client and a company acts as the server.
- Firewall: A security system designed to prevent unauthorized access to or from a private network. Firewalls can be implemented in both hardware and software, or a combination of both.
- Hypertext Transfer Protocol (HTTP): A TCP/IP application that uses a browser to access and retrieve Web pages from the server.
- Transmission Control Protocol/Internet Protocol (TCP/IP): A suite of protocols that turns information into blocks of information called packets. These are then sent across networks such as the Internet.
- Internet Control Message Protocol (ICMP): A protocol used to communicate errors or other conditions at the IP layer
- Internet Assigned Numbers Authority (IANA): Oversees and coordinates the assignment of every unique protocol identifier used on the Internet.
-
IP spoofing
-
Network News Transfer Protocol (NNTP)
-
Network topology
-
Open Systems Interconnect (OSI)
-
Packet
-
Packet sniffer
-
Point-to-Point Protocol (PPP)
-
Proxy server
-
Reverse Address Resolution Protocol (RARP)
-
Screening router
-
Serial Line Internet Protocol (SLIP)
-
Simple Mail Transfer Protocol (SMTP)
-
Simple Network Management Protocol (SNMP)
-
Smurf attack
-
TCP/IP protocol
-
Telnet
-
UDP (User Datagram Protocol)
-
Virtual Private Network
- Winnuke
Click the quiz link below to take a multiple-choice quiz about the material
we have covered in this module.
Protocol Layers Quiz
Protocol Layers Quiz