PGP protocol
What is PGP?
Pretty good privacy is a cryptographic [Link] uses combination of symmetric and
asymmetric encryption to protect [Link] primarily employed to send secure mail
communication, file transfers and sensitive message transfer over the network.
How PGP Works
At the Sender's End: The message is compressed, encrypted with a session key
(symmetric encryption), and the session key is encrypted with the recipient's public key
(asymmetric encryption). The encrypted message and session key are sent together.
At the Receiver's End: The session key is decrypted using the recipient's private key,
and the message is decrypted using the session key. The message is then decompressed to
retrieve the original content.
Key Features of PGP
1. Authentication: Ensures that the sender of a message is genuine. This is achieved
through digital signatures, where the sender's private key encrypts a hash of the message.
The recipient can verify the signature using the sender's public key.
2. Confidentiality: Protects the content of messages from unauthorized access. The
message is encrypted with a randomly generated session key (symmetric encryption), and
this session key is further encrypted using the recipient's public key (asymmetric
encryption).
3. Email Compatibility: PGP is widely used for securing email communications, ensuring
that only the intended recipient can read the message.
4. Segmentation: Handles large messages by breaking them into smaller segments for
secure transmission.
Advantages of PGP
The primary benefit of PGP encryption lies in its unbreakable algorithm.
It is regarded as a top technique for improving cloud security and is frequently utilised
by users who need to encrypt their private conversations.
Disadvantage of PGP
The main drawback of PGP encryption is that it is usually not intuitive to use. PGP
requires time and effort to fully encrypt data and files, which might make messaging
more difficult for users.
Firewall
What is Firewall?
A firewall is a network security system, available as hardware or software, that monitors
and controls incoming and outgoing traffic based on predefined rules. It acts like a security
guard, filtering data packets to block unauthorized access.
Types of Firewalls
1. Packet Filtering Firewall: Controls network access by monitoring outgoing and
incoming packets and allowing them to pass or stop based on source and destination IP
addresses, protocols, and ports.
2. Stateful Inspection Firewall: Keeps track of the state of active connections and makes
decisions based on the context of the traffic.
3. Application Layer Firewall: Inspects and filters packets on any OSI layer, up to the
application layer. It can block specific content and recognize misuse of protocols.
4. Next Generation Firewalls (NGFW): Includes advanced features like Deep Packet
Inspection, Application Inspection, and SSL/SSH inspection.
5. Proxy Service Firewall: Acts as a gateway between two networks for a particular
application, filtering communications at the application layer.
6. Circuit Level Gateway Firewall: Works at the session layer of the OSI model, allowing
data packets to flow without using much computing power.
Importance and Functions
Firewalls are crucial for protecting networks from unauthorized access and cyber threats.
They help in:
Monitoring and Controlling Traffic: Firewalls analyse incoming and outgoing data,
blocking anything suspicious.
Preventing Malware and Threats: By blocking traffic linked to known malware,
firewalls help in defending against various attacks.
Network Segmentation: Firewalls can divide a larger network into smaller subnets,
reducing the attack surface.
Logging and Auditing: Firewalls log each data packet that passes through, enabling
users to keep track of network activities.
RDP protocol
What is RDP?
The RDP (Remote Desktop Protocol) port is the default network gateway for connecting to and
controlling a remote computer, most commonly TCP port 3389, used by Microsoft's technology
for remote access, IT support, and virtual desktops, transmitting keyboard/mouse input and
screen data over an encrypted connection. While 3389 is the standard, it's a frequent security
target, so many administrators change it for better security.
How RDP Works with Ports
1. Client Connects:
Your local computer (client) sends a request to the remote computer's IP address, targeting the
RDP port.
2. Server Listens:
The remote computer (server) has RDP software listening on port 3389 (or a custom port) for
these connection requests.
3. Secure Channel:
Once connected, RDP creates an encrypted channel (often over TCP/IP) to send your
keystrokes, mouse movements, and the remote screen back to you.