Secure protocols Flashcards
What is SRTP? and RTP?
Secure real-time transport protocall.
This is a secure version of RTP.
RTP/SRTP are usually used for real time phone calls.
RTP is in the clear, SRTP is encrypted via AES.
SRTP is also capable of performing authentication, integrity, and replay protection by using HMAC-SHA1
What is NTPsec?
Secure version of NTP(network time protocol)
Fixed a number of vulnerabilities in the original NTP, which was built around 1985 without security in mind. NTP has been exploited before as an amplifier for DDoS attacks.
NTPsec is network time protocol secure
What is S/MIME?
Secure/multipurpose Internet Mail Extensions.
A secure mail solution that uses public/private keys to encrypt emails and provide digital signatures for integrity.
What is POP3?
Secure version of POP, encrypted with SSL.
Email protocol.
What is IMAPS?
Secure version of IMAP, encrypted with SSL.
Mail protocol.
What is IPsec?
Internet Protocol Security
Security for OSI layer 3
Provides confidentiality and integrity/anti-replay
There are two core IPsec protocols: Authentication Header(AH) and Encapsulation Security Payload(ESP)
What is FTPS?
FTP over SSL, file transfer protocol secure.
This is FTP over SSL.
Encrypted FTP.
NOT SFTP THAT IS COMPLETELY DIFFERENT
What is SFTP?
SSH-FTP
Think SSH when you see this.
This is a protocol that uses SSH for encryption while doing file transfers.
What is LDAP?
Lightweight directory access protocol.
A protocol for reading and writing directories over an IP network.
What is LDAPS?
LDAP Secure
a non-standard implementation of LDAP over SSL
What is SASL?
Simple authentication and security layer.
A framework that many different application protcols can use to communicate securely.
Can communicate using kerberos, client certificates, etc.
What is DNSSEC?
Domain name system security extensions
Secure dns
This gives us the ability to validate DNS responses and make sure it wasnt changed and the origin is where it is supposed to be.
Uses public key cryptography, dns records are signed with a trusted third party and then verified by the client.
Which version of SNMPv3 should you be using (at least) if you are being security conscious?
SNMPv3 or higher Has confidentiality(encryption), Integrity(no tampering of data), and authentication(Verifies the source)
What is a DHCP starvation attack?
Using spoofed MAC addresses to exhaust the DHCP pool so there are none left for anyone else.
DoS
