Given a scenario, implement secure protocols Flashcards
Protocols
Domain Name System Security Extension (DNSSEC)
SSH
Secure/Multipurpose Internet Mail Extensions (S/MIME)
Secure Real-time Protocol (SRTP)
Lightweight Directory Access Protocol Over SSL (LDAPS)
File Transfer Protocol, Secure (FTPS)
SSH File Transfer Protocol (SFTP)
Simple Network Management Protocol, version 3 (SNMPv3)
Hypertext transfer protocol over SSL/TLS (HTTPS)
IPSec
Secure Post Office Protocol (POP)/Internet Message
Access Protocol (IMAP)
Domain Name System Security Extension (DNSSEC)
A security protocol that provides authentication of DNS data and upholds DNS data integrity.
SSH
A remote administration and file-copy program that supports VPNs by using port forwarding, and that runs on TCP port 22.
Secure/Multipurpose Internet Mail Extensions (S/MIME)
An email encryption standard that adds digital signatures and public key cryptography to traditional MIME communications.
Secure Real-time Protocol (SRTP)
Version of RTP secured using TLS.
Opens a data stream for video and voice applications over UDP. The data is packetized and tagged with control information (sequence numbering and time-stamping).
Lightweight Directory Access Protocol Over SSL (LDAPS)
A network protocol used to access network directory databases, which store information about authorized users and their privileges, as well as other organizational information.
A network protocol used to access network directory databases, which store information about authorized users and their privileges, as well as other organizational information.
File Transfer Protocol, Secure (FTPS)
A protocol used to transfer files between network hosts. Variants include S(ecure)FTP, FTP with SSL (FTPS and FTPES) and T(rivial)FTP. FTP utilizes ports 20 and 21.
SSH File Transfer Protocol (SFTP)
A secure version of the File Transfer Protocol that uses a Secure Shell (SSH) tunnel as an encryption method to transfer, access, and manage files.
Simple Network Management Protocol, version 3 (SNMPv3)
SNMP v3 supports encryption and strong user-based authentication. Instead of community names, the agent is configured with a list of usernames and access permissions. When authentication is required, the SNMP message is signed with a hash of the user’s passphrase. The agent can verify the signature and authenticate the user using its own record of the passphrase.
Hypertext transfer protocol over SSL/TLS (HTTPS)
The protocol used to provide web content to browsers. HTTP uses port 80. HTTPS(ecure) provides for encrypted transfers, using SSL/TLS and port 443.
IPSec
Authentication Header (AH)/Encapsulated Security Payloads (ESP) Tunnel/transport
A set of open, non-proprietary standards that are used to secure data through authentication and encryption as the data travels across the network or the Internet.
Authentication Header (AH)/Encapsulated Security Payloads (ESP)
An IPSec protocol that provides authentication for the origin of transmitted data as well as integrity and protection against replay attacks.
Tunnel/transport
Transport mode—this mode is used to secure communications between hosts on a private network (an end-to-end implementation).When ESP is applied in transport mode, the IP header for each packet is not encrypted, just the payload data. If AH is used in transport mode, it can provide integrity for the IP header.
Tunnel mode—this mode is used for communications between VPN gateways across an unsecure network (creating a VPN). This is also referred to as a router implementation.With ESP, the whole IP packet (header and payload) is encrypted and encapsulated as a datagram with a new IP header. AH has no real use case in tunnel mode, as confidentiality will usually be required.
Secure Post Office Protocol (POP)/Internet Message Access Protocol (IMAP)
TCP port 110 protocol that enables a client to access email messages stored in a mailbox on a remote server. The server usually deletes messages once the client has downloaded them.
TCP/IP application protocol providing a means for a client to access and manage email messages stored in a mailbox on a remote server. IMAP4 utilizes TCP port number 143.
Use cases
Voice and video Time synchronization Email and web File transfer Directory services Remote access Domain name resolution Routing and switching Network address allocation Subscription services
