CST 311 - Module 8
Week 8
This is a short week and didn't cover as much material as the previous weeks, however it is still very important as it protects your device from... well... bad people. This is an addition to module 4's material on network security, though this is more related to protection against unwanted connections.
One of the main protections of your network is the firewall. The firewall filters packets and depending on the packets source IP, destination IP, TCP/UDP source/destination, and other messages/bits, the firewall can either forward or drop packets. What makes this important is it prevents denial of service attacks and illegal modification or access of internal data. Only authenticated users/hosts are allowed to send packets through. However, there are limitations, if someone spoofs their IP, the firewall can't truly know if the data really came from that IP. And each application would require special treatment to be allowed to make connections. So, one protection against deeper levels of maliciousness is the Intrusion detection system (IDS). For instance, the IDS can look at packet contents and compare them to a database of known viruses and attack strings. So, if a malicious tries to make it through, there is still a good chance that the IDS will detect it.
Comments
Post a Comment