Computer Network Security

this is what is called a packet sniffer you can see what information is going in and out of the network

Switch flooding is an attack that consists of two parts: one part is a denial of service attack, and the other piece (if used) is an attempt to retrieve confidential information from the switch.

In a flooding attack, the switch is flooded with multiple MAC addresses. Normally a MAC address is used to determine which port to switch the frame to, bypassing any clients that should not get the frame.

Since a switch has a limited amount of memory for storing MAC addresses the flooding attack overruns the table and causes a fail-over situation, where the frames are repeated out each port (like a hub) rather than switching to a specific port.

A malicious user with a packet sniffer could possibly be listening for confidential information to be repeated out one of the ports.

Authentication alone is not secured. That should happen on secure channel otherwise man in middle attack is possible.

Nessus

E2Labs Top 100 Private companies in Asia (RED-HERRING United States), Asia's 1st Anti Hacking Academy based at Hyderabad. Since 2003 we have been imparting Awareness, Training and Corporate programs to Several Verticals across the Country and international Clients as well.

Have won several Awards and Accolades across the Globe and in India to name a few are Top 100 Companies of Asia-RED HERRING-U.S.A, TIECON Silicon Valley U.S.A, W.I.P.O- United Nations, and several National Awards and State level Awards to our credit. The recent were Educational Excellence Award @ Indo-Global Educational Summit2010 by Union HRD Minister & Best Speaker Award @ Technology Sabha (The Express Group) January 2011.

They have Trained Corporate employees of Google, Microsoft, Yahoo, Genpact, National Police Academy, Deloitte, Mercedes-Benz, Dell, Indian Armed Forces & Defence, Air Liquide, Forensic Science Labs, Intelligence Department, Several Government and Law Enforcement Agencies.

They are offering several Training programs from 3 days to 1 year, and have designed 3 new programs for collaborations 1) Masters in Information Security 2) Bachelor's in Cyber Security 3) Drop-Out Digital License Program they all are designed by reputed and experienced Information Security Czar's, Veterans and Specialists.

As per NASSCOM Survey report India requires 200,000 Information Security Specialist as the supply is just 18,000. We will also provide students with courses that can offer them training and job guarantee after their training completion.

They are coming up with new batches and good discount packages for the students who have attended our awareness programme conducted in their colleges.

Hope, you will provide us an opportunity to introduce us to a jubilant and promising Career. Awaiting your response on the next steps.

Do visit our Academy and R&D Center at Banjara hills, If you have any questions at all about E2labs for any of our Career oriented Information Security Programs, Awareness or technology transfers feel free to contact us.

e2labs has Indias most advanced lab with latest equipment and have world class infrastructure.

all students have RFID tags for entry in to different labs

E2labs have developed a world class Game Zome for all students

Dictionary attack

both hubs and switch can act as a center of a star topology

stateful packet inspection

The sales channel does not matter - if a phone is not ptcrb certified it can be blocked by an operator. Even "unlocked" phones go through certification process before operators put their logos on them. Most operators source their phones from distributors because they don't want excessive inventory in their stores. They still require PTCRB certification.

Daisy chaining is a term used to denote that one system is directly connected to the next system without any intervening devices. It is usually reserved for linear bus topologies in a network, but can be applied to other things as well, such as SCSI disk hard drives which can be chained together.

They are called Archives and they are stored in USB Memory Sticks, tape systems,Writable CD's and DVD's.

If an individual believes that a DoD covered entity (CE) is not complying with HIPAA, he or she may file a complaint with the:

They prevent specified types of trafic from reaching specified network destination

The Public-RootServers are strategically deployed around the globe. You can see a map of their locations at http://public-root.com/root-server-locations.htm

I don't get your question. What do you mean: "the network"? Are you referring to the Internet?

How does it matter? If you're not connected to the "network" --- and I assume your referring to the your Internet connection --- then, you're not going to be "connected". You can't access the Internet.

To go further --- you asked "why does it matter HOW your computer is connected". To answer that, I assume you're asking about your "platform", as in Windows, Mac, Unix, etc. In that case, it doesn't matter.

All platforms are capable of accessing the 'net.

If you're asking about the methodology of "connecting", such as "dial-up" modems versus DSL or high-speed cable access, then there is a difference.

Not sure about what you're asking. Re-phrase your question so that we can help you.

Trusted Operating System (TOS) generally refers to an operating system that provides sufficient support for multilevel security and evidence of correctness to meet a particular set of government requirements.

The most common set of criteria for trusted operating system design is the Common Criteria combined with the Security Functional Requirements (SFRs) for Labeled Security Protection Profile(LSPP) and Mandatory Access Control(MAC). The Common Criteria is the result of a multi-year effort by the governments of the U.S., Canada, United Kingdom, France, Germany, the Netherlands and other countries to develop a harmonized security criteria for IT products.

Examples of certified trusted operating systems are:

Apple Mac OS X 10.6 (Rated EAL 3+)

HP-UX 11i v3 (Rated EAL 4+)

Some Linux distributions (Rated up to EAL 4+)

Microsoft Windows 7 and Microsoft Server 2008 R2 (Rated EAL 4+)

AIX 5L with PitBull Foundation (Rated EAL 4+)

Trusted Solaris

Trusted UNICOS 8.0 (Rated B1)

XTS-400 (Rated EAL5+)

The Tyco security system seems to have originated in Switzerland. It is known to be a very safe, secure, and reliable security system, and many people use it.

Embedding the public key in a digital certificate protects it from impersonators by associating and binding a user's identity to the public key. A digital certificate is the user's public key that has been "digitally signed" by a trustworthy source trusted to sign it. And, instead of "trustworthy" you could use the word: reputable.

The goal of an information secuity blueprint is to gather an organization's requirements, provide a visualization of those requirements and initiate the process of interweaving information security as part of the organization's culture. The blueprint explains an organization's needs, desired results, factors that could influence the outcome and a strategy to execute.

It depends on the exact job description. Let's just say that either a network or security specialist would be more productive if they knew something about programming or scripting.

Also, in order to analyze certain types of attacks you need to know something about software.

Auditing captures a snapshot of security configurations at a given point in time, which allows an administrator to analyze the configurations and act accordingly.

The information security manager is the process owner for the development and implementation of an organization-wide information security program and ongoing activities to preserve the availability, integrity and confidentiality of information resources in compliance with applicable security policies and standards.

There are many characteristics to describe the Renaissance. A notable one was the encouragement of using creativity in the arts.

I would say its not safe. WPE Pro is a professional (commercial) version of Winsock Packet Editor. It is used to analyze network traffic and extract sensitive information like passwords or any other data sent through network.

No, not necessarily, since viruses can be 'invited in' by unsuspecting users of web sites, email links, etc. A firewall definitely helps, but will not prevent, in all cases a virus running in a network.