0
Computer Network Security
Network security is any form of computer security dealing with multiple computers linked through a network. Questions about everything from firewalls to viruses to denial-of-service attacks belong here.
1,030 Questions
What is the meaning of stack-based buffer overflow?
A buffer overflow occurs when you put more stuff into it than it can hold. For a stack, it means you put or pushed onto the stack more information than the size of the stack.
If I have a stack that can hold 10 entries, then putting 11 in the stack will overflow it.
What can you do with a degree in network security?
There are many career opportunities with a IT security degree. Some entry level positions are: IT security technicians, firewall administrators, IT security assurance, and IT security manager. Your career can lead into several prestigious positions such as an information security officer or even a chief information security officer.
Generally an IT security degree falls into the network security category. Examples of job roles can be to manage firewalls and intrusion detection/prevention systems, develop security policies, setup encryption standards, packet level analysis, and provide consulting.
What is the difference between discretionary and mandatory access control?
In the most common implementations of Discretionary Access Control, users "own" their directories and the files and programs they contain. They can grant and deny access and execution privileges for these to other users. Users can also be parts of groups. They may be able grant or restrict access to all members of a group.
In Mandatory Access Control the operating system controls the ability of a subject or initiator to access or generally perform some sort of operation on an object or target. The object or target can be something like a process, a file, a directory, a program, or a memory segment. Subjects and objects each have a set of security attributes. Whenever a subject attempts to access an object, an authorization rule enforced by the operating system kernal compares these security attributes to the policy and decides whether the access or operation will be allowed. With mandatory access control, this security policy is centrally controlled by a security policy administrator; users do not have the ability to override the policy and, for example, grant access to files that would otherwise be restricted.
Which are three general approaches of replay attack?
Three general approaches to replay attacks include:
- Packet Replay: An attacker captures network packets and retransmits them to impersonate a legitimate user or session, often targeting authentication processes.
- Session Replay: This involves replaying a previously established session's data to gain unauthorized access, typically by reusing session tokens or cookies.
- Man-in-the-Middle (MitM) Replay: An attacker intercepts and stores communications between two parties, later replaying them to manipulate or deceive either party without their knowledge.
What are root keys in association with digital certificates?
Digital certificates are verified through the use of another certificate, creating a chain of certificates that ends with the root certificate
The issuer of a certificate is called a certification authority (CA). The owner of the root certificate is the root certification authority.
If one system failed in star topology what happens?
In a star topology only the failed system would have a problem, unless the device was the network connectivity device (on a LAN).
In a WAN, if the building was connected through the central building and the central building had a problem then all buildings would be affected. If it isn't the central connection point then only the building with the problem would be affected.
Possibly, if some malware is included in the message.
Advantage and disadvantage of fix partition?
A disadvantage of fixed partitions is the severe limitation that occurs through the fixed or allocated space in the particular division. Another disadvantage of this is the loss of magnetic disc space of the total disk space available when running different operating systems on the same hard disk.
Should the SSID broadcast option should be turned off at the access point?
It should be, it makes your router a little bit harder to find for people who should not use your router anyway.
NNTP · SIP · SSI · DNS · FTP · Gopher · HTTP · NFS · NTP · SMPP · SMTP · SNMP · Telnet ·
How is the CNSS model of information security organized?
The CNSS (Committee on National Security Systems) model of information security is organized around a framework that consists of three main components: confidentiality, integrity, and availability, often referred to as the CIA triad. These components guide security policies and practices to protect information systems and data. Additionally, the model emphasizes the importance of risk management, security controls, and compliance with applicable laws and regulations, providing a comprehensive approach to safeguarding national security information systems.
What is the purpose of the Network allocation vector?
Network Allocation Vector How do other stations defer sending their data if one station acquires access? In other words, how is the collision avoidance aspect of this protocol accomplished ? The key is a feature called NAV. When a station sends an RTS frame, it includes the duration of time that it needs to occupy the channel. The stations that are affected by this transmission create a timer called a network allocation vector (NAV) that shows how much time must pass before these stations are allowed to check the channel for idleness. Each time a station accesses the system and sends an RTS frame, other stations start their NAV. In other words, each station, before sensing the PHYSICAL MEDIUM to see if it is idle, first checks its NAV to see if it has expired.
Collision During Handshaking What happens if there is collision during the time when RTS or CTS control frames are in transition, often called the handshaking period? Two or more stations may try to send RTS frames at the same time. These control frames may collide. However, because there is no mechanism for collision detection, the sender assumes there has been a collision if it has not received a CTS frame from the receiver. The back-off strategy is employed, and the sender tries again.
Srikant Pathem from India. He is a .net expert in Microsoft technologies.
First of all, use a network scanner and scan your network and it'll give you a list of every active IP on the network and the hostname of the device ( name ). I recommend an app on the appstore called "iNet" free and fast. It scans whatever subnet your on 192.x or 10.x 184.x etc. It is very useful for big networks for finding computers. Another way is to open your router webpage and it should have a list of every connected client on the network and their IP along with hostnames and mac address.Takes more time using these steps provided but didn't delete it.
1st option is to run ipconfig on each computer and it will tell you the ip address of the computer you are on. To get the name of the computer you can go to the network configuration settings which I will explain in a bit how to get to.
2nd option type in the IP address of the router in the web browser of the one of the computers connected to it, log in to the router with the username and password you used to set it up with, and depending on the router you have you're going to want to look at the log or look around in the different settings to see if you can't find a list of currently connected devices almost eveyr router I've seen to date has had a list somewhere of the devices connected to it
anyways back to option 1....in order to run ipconfig on your computer go to Start menu -> Run (or hold the windows key and press r) type in ipconfig in the box that pops up....if that doesn't work then try typing cmd in the box....you should get an msdos looking window that pops up....from there type in ipconfig....after that look for the IP Address it will be clearly listed there
now as for getting to the name of the computers....I'm not sure about other operating systems but I'm pretty sure it's quite similar across all windows operating systems but I will give you the exact instructions from Windows 2000 Professional which is what OS I happen to run:
1. right click on the My Computer icon which is located on the desktop
2. left click on properties
3. Go to the Network Identification tab
4. Click the properties button
5. Look at the value in the Computer Name box
6. Now you know what the computer's name is
Well, I hope this helped
What is the basic or common port number for SSL?
SSL can be used on many ports; for web traffic, the common port is 443.
The last ciphertext block of the previous record. It is is sometimes xor'd with the plaintext of the next record to ensure duplicate plaintext does not encrypt to duplicate cipher text.
What are the principles of the data protection act?
The Act mainly consists of eight data protection principles:
· Data must only be taken and then used for specific reasons.
· Data should be sufficient, suitable and not too much for the specified use.
· Data must be accurate and maintained so that its up to date.
· Data should not be kept longer than is required for the specified purpose.
· Data processing should match the legal rights of the data subjects.
· Data holders should protect the data against loss, theft or corruption.
· Data should not be transferred abroad, except to certain other European Countries.
· Data must not be processed unless there is a specific lawful reason to do so
(see related video link)
Usually when this scenario occurs the users are so tightly controlled that it is very difficult for them to get anything done. As a result, frustrated users (who are blocked from doing their job, etc.) will not get useful work done.
Are you using Torrent software? Nocus Network LLC are found on popular ipblocklists, so if you are using PeerBlock software (as any Torrent user should be) then any traffic between your pc and their server will be stopped. They are known to engage in anti-p2p activities.
That is not exactly true, this company has been attacking one of my servers steady for a few days and they are systematically testing it trying to gain access. I host business websites and there is no activity on the server to suggest they should be doing this. Their actions are focused and YES you should be concerned.
The original answer was exactly true, but perhaps not the entire story. The company, based in Pheonix, Arizona, are a little mysterious and publish no information about themselves whatsoever, so are assumed to be some kind of "industry police" paid for by companies interested in protecting intellectual property rights. Probing systems is what they do. Probing is not illegal. Gaining unauthorized access is illegal. Certainly their actions are focused and you should be concerned. You cannot stop them doing what they do, but you can block their attempts to access your machine. Information leakage is what they are looking for and it is up to you to prevent that leakage. Naturally, if you have nothing to hide then you have nothing to fear - let them have a good look and verify you as "clean" if you wish. Personally I hate spies.
Different network operating system certifications?
Here are a few:
- CCNA - Cisco
- CCNP - Cisco
- Network+ - CompTIA
- Security+ - CompTia
- MCSA - Microsoft (has many network elements)
- MCITP - Microsoft (many network elements)
You are trying to violate the system's security as defined by its administrator.
What scrambles information into an alternative form that requires a key or password to decrypt?
That sounds like the definition of encryption.
