1) Confidentiality - The protection of data from unauthorized disclosure to a 3rd party. 

2) Integrity - The assurance that data is not altered or destroyed in an  unauthorized manner.

3) Availability - The continuous operation of computing sytems. 

4) Authentication - Ensuring that you are who you claim you are, proving the genuineness of the user. 

5) Non-repudiation - Prove that a user performed an action.

6) Access Control - Prevention of unauthorized access.

What is the goal of Confidentiality?

(#1 of Network Security goals)

What are the 3 types of malicious code?

Expand upon them too...

1) Virus - A program that reproduces itself on the same computer, and inserts code into a file or application. Relies on user's interaction to be spread.

2) Worm - Self-replicating (like a virus), but doesn't attach itself to a program. It's a self-contained application with intent to exploit system vulnerabilities. No need for user interaction; use a network to travel. 

3) Trojan - An executable program that appears to be something useful, but actually contains malware. Never replicates, but you have to invite it onto your computer. 

Through:

1) Trojans - Executable program that contains malware. 

2) Rootkits - Software that hides the attacks.

3) Logic Bombs - computer code that lies dormant until it is triggered by a specific logical event. 

4) Backdoors - Software code that gives access to program or service that circumvents normal security protection.

- Software designed to cause harm/disruption to a computer system.

- Software designed to perform activities on a computer without the consent of its owner. 

(Denial-Of-Service, attack)

An attempt to tie up network bandwidth or network services, so that it renders those resources useless to legitimate users. 

Examples: Ping-Based attacks, TCP SYN flood, DDos attacks. 

1) Access attack

2) Malware attack

3) Social Engineering attack

4) Denial-Of-Service (DoS) attack

1) Ping-based attacks:

• ping of death
• ping flood
• smurph attack

2) TCP SYN flood

3) DDoS attacks

(aka "Half-open SYN attacks")

Use the TCP's 3-way handshake to tie up a server with invalid TCP sessions, thereby preventing real sessions from being created

What is a "DDoS" attack?

How does it differ from a "DoS" attack?

- Distributed denial of service attack, where multiple systems (typically containing trojans) are used to target a single system. 

- DDoS uses multiple computers, focused on 1 target, whereas DoS attacks use only 1 computer. 

1) Develop a security policy

2) Perform host software baseline

3) Configure OS security

4) Deploy the settings

5) Implement patch management

1) Network Address Translation

2) Packet Filtering

3) Access Control Lists -- allows trafic from 2 networks to flow. 

An ACL is an Access Controlled List, is a list of rules.

ACL's contain a list of packets--all of which are denied access initially-- and then the administrator creates "rules" that make exceptions for certain packets. 

Routers contain this list.

(Virtual Private Network)

- A dedicated connection between 2 networks.

- Relies on Tunneling: "Encapsulating" private data into other packets and then sending them across a public network.