Scribd
Upload
15 views2 pages

Module 4 Network and System Security

The document outlines key concepts in network and system security, focusing on the organization of corporate networks and the role of DMZ servers. It discusses various security threats, such as flooding attacks, and highlights user account and process management strategies for both DMZ web servers and development systems. The emphasis is on minimalism, strong authentication, and centralized management to enhance security and mitigate risks.

Uploaded by

test54545000
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
15 views2 pages

Module 4 Network and System Security

The document outlines key concepts in network and system security, focusing on the organization of corporate networks and the role of DMZ servers. It discusses various security threats, such as flooding attacks, and highlights user account and process management strategies for both DMZ web servers and development systems. The emphasis is on minimalism, strong authentication, and centralized management to enhance security and mitigate risks.

Uploaded by

test54545000
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Module 4: Network Security & System Security

1. Organization of a Computer Network


Corporate networks are divided into zones to protect sensitive data.
Outer Firewall: Controls Internet to DMZ traffic.
DMZ: Hosts public servers like Web, Mail, and DNS.
Inner Firewall: Protects internal network.
Internal Subnets: Department-wise segmentation.

2. Flooding Attack
Flooding attack overwhelms network or server resources causing DoS.
SYN Flood: Exploits TCP handshake.
Consumes memory and bandwidth.
Defenses: SYN cookies and adaptive time-out.

3. Functions of DMZ Servers


Mail Server: Scans emails and hides internal structure.
Web Server: Hosts public site without confidential data.
DNS Server: Provides limited IP information.
Log Server: Stores immutable security logs.

4. Network: DMZ Web Server vs Development System


DMZ Web Server: Allows HTTP/HTTPS and admin SSH only.
Development System: Internal use with SSH and no public services.

5. User Account Management


DMZ Web Server: Minimal user accounts with strict ACLs.
Development System: Multiple accounts managed centrally via NIS.

6. Process Management
DMZ Web Server: Runs only essential services.
Development System: Supports compilers and dev tools with centralized services.

7. Authentication
DMZ Web Server: Uses strong cryptographic authentication (SSH, PAM).
Development System: Uses strong passwords with restricted root access.

8. File Management
DMZ Web Server: Boots from read-only media; writable data isolated.
Development System: Read-only base with centralized file storage.

9. Retrospective
DMZ Web Server: Minimalism and immutable storage reduce impact of attacks.
Development System: Layered defense with centralized management ensures security.

You might also like