Chapter 6 Flashcards
What is TCB?
Trusted Computer BAse
What is Bell-LaPadula Confidentiality?
Does not allow data to be moved from higher level to lower level
What is a firewall?
Firewall prevents specific type of data from traveling from untrusted networks to trusted networks
List firewall processing modes
Packet filtering Application gateway Circuit gateway MAC gateway Hybrid
What is packet filtering?
Packet filtering examines header information of data packets. Combination of IP destination, source Direction (Inbound/outbund) TCP UDP
What are three subsets of packet filtering?
Static filtering
Dynamic filtering
Stateful inspection
What is static filtering?
Its when the rules decide which packets to accept or deny
What is dynamic filtering?
In the emergency situation the rules get updated or created to deal with an event
What is stateful inspection?
Checks the connection between external and internal systems using state table
What is application gateway?
Its a proxy server that is placed outside, therefore it is more available to get attacked.
What is DMZ?
It is demilitarized zone.
Essentially an extra layer of security between outside and inside worlds.
What is a circuit gateway firewall?
Its a firewall that is located at the transport layer of OSI.
It does not look at the data but prevents direct connections.
Accomplishes tasks by creating tunnels between specific systems on each side of the firewall
What is MAC gateway firewall?
Its a firewall designed to operate at the media access control layer of OSI network model.
Able to consider specific host computer’s identity in its filtering decisions
List OSI model
Application Presentation Session Transport Network Data Link Physical
What is a bastion host?
Servers specifically placed to be attacked
What is a dual host firewall?
Bastion host contains two NICs, one external other internal. Makes use of NAT
Two functions of screened subnet?
Protects DMZ systems and information from outside threats
Protects the internal networks by limiting connections
What is a RADIUS?
Remote Access Dial In User Service
Management of user authentication system in a RADIUS server
What is TACACS?
Terminal Access Controller Access Control System
