Mechanics of User Identification and Authentication
|
|
|
- Ross Bennett
- 8 years ago
- Views:
Transcription
1 Mechanics of User Identification and Authentication Fundamentals of Identity Management DOBROMIR TODOROV A Auerbach Publications Taylor & Francis Group Boca Raton New York Auerbach Publications is an imprint of the Taylor St Francis Group, an informa business
2 Contents Acknowledgments About the Author About This Book xix xxi xxiii 1 User Identification and Authentication Concepts Security Landscape Authentication, Authorization, and Accounting Identification and Authentication Authorization User Logon Process Accounting Threats to User Identification and Authentication Bypassing Authentication Default Passwords Privilege Escalation Obtaining Physical Access Password Guessing: Dictionary, Brüte Force, and Rainbow Attacks Sniffing Credentials off the Network Replaying Authentication Downgrading Authentication Strength Imposter Servers Man-in-the-Middle Attacks Session Hijacking Shoulder Surfing Keyboard Loggers, Trojans, and Viruses Offline Attacks Social Engineering Dumpster Diving and Identity Theft 18 ix
3 x Contents 1.4 Authentication Credentials Password Authentication Static Passwords One-Time Passwords Asymmetrie Keys and Certificate-Based Credentials Biometrie Credentials Ticket-Based Hybrid Authentication Methods Enterprise User Identification and Authentication Challenges Authenticating Access to Services and the Infrastructure Authenticating Access to the Infrastructure Authenticating Access to Applications and Services Delegation and Impersonation Cryptology, Cryptography, and Cryptanalysis The Goal of Cryptography Protection Keys Symmetrie Encryption Asymmetrie Keys Hybrid Approaches: Diffie-Hellman Key Exchange Algorithm Encryption Data Encryption Standard (DES/3DES) Advanced Encryption Standard (AES) RC4 (ARCFOUR) RSA Encryption Algorithm (Asymmetrie Encryption) Data Integrity Message Integrity Code (MIC) Message Authentication Code (MAC) 61 2 UNIX User Authentication Architecture Users and Groups Overview Case Study: Duplicate UIDs Case Study: Group Login and Supplementary Groups Simple User Credential Stores UNIX Password Encryption The /etc/passwd File The /etc/group File The /etc/shadow File The /etc/gshadow File The /etc/publickey file The /etc/cram-md5.pwd File The SASL User Database The htpasswd File Samba Credentials The Kerberos Principal Database Name Services Switch (NSS) 84
4 Contents xi 2.4 Pluggable Authentication Modules (PAM) The UNIX Authentication Process User Impersonation Case Study: User Authentication against LDAP Preparing Active Directory PADL LDAP Configuration User Authentication Using NSS LDAP User Authentication Using PAM LDAP Case Study: Using Hesiod for User Authentication in Linux Windows User Authentication Architecture Security Principals Security Identifiers (SIDs) Users and Groups Case Study: Group SIDs Access Tokens Case Study: SIDs in the User Access Token User Rights Stand-Alone Authentication Interactive and Network Authentication Interactive Authentication on Windows Computers The Security Accounts Manager Database Case Study: User Properties Windows NT Local User Accounts Case Study: Group Properties Windows Local Group Accounts SAM Registry Structure User Passwords Storing Password Hashes in the Registry SAM File LM Hash Algorithm NT Hash Algorithm Password Hash Obfuscation Using DES SYSKEY Encryption for Storing Password Hashes in the SAM Case Study: The SYSKEY Utility, the System Key, and Password Encryption Key Threats to Windows Password Hashes Tools to Access Windows Password Hashes Case Study: Accessing Windows Password Hashes with pwdump LSA Secrets Case Study: Exploring LSA Secrets on a Windows NT 4.0 Domain Controller That Is an Exchange 5.5 Server Logon Cache Protected Storage Data Protection API (DPAPI) 200
5 xii Contents Credential Manager Case Study: Exploring Credential Manager Windows Domain Authentication Domain Model Joining a Windows NT Domain Computer Accounts in the Domain Domains and Trusts Case Study: Workstation Trust and Interdomain Trust SID Filtering across Trusts Migration and Restructuring Null Sessions Case Study: Using Null Sessions Authentication to Access Resources Case Study: Domain Member Start-up and Authentication Case Study: Domain Controller Start-up and Authentication Case Study: Windows NT 4.0 Domain User Logon Process Case Study: User Logon to Active Directory Using Kerberos Windows NT 4.0 Domain Model User Accounts Group Accounts and Group Strategies Authentication Protocols: NTLM and LM Trust Relationships Active Directory Active Directory Overview Logical and Physical Structure Active Directory Schema Database Storage for Directory Information Support for Legacy Windows NT Directory Services Hierarchical LDAP-Compliant Directory Case Study: Exploring Active Directory Using LDPEXE User Accounts in AD Case Study: User Logon Names in Active Directory Case Study: Using LDAP to Change User Passwords in Active Directory Case Study: Obtaining Password Hashes from Active Directory Group Accounts and Group Strategy in AD Case Study: Exploring the Effects of Group Nesting to User Access Token Computer Accounts in AD 270
6 Contents xiii Trees, Forests, and Intra-forest Trusts Case Study: User Accesses Resources in Another Domain in the Same Forest Trusts with External Domains Case Study: Exploring External Trusts Case Study: Exploring Forest Trusts Selective Authentication Case Study: Exploring Authentication Firewall and User Access Tokens Protocol Transition Federated Trusts Impersonation Secondary Logon Service Application-Level Impersonation Authenticating Access to Services and Applications Security Programming Interfaces Generic Security Services API (GSS-API) Kerberos Version 5 as a GSS-API Mechanism SPNEGO as a GSS-API Mechanism Security Support Provider Interface (SSPI) SSP Message Support Strong Keys and 128-bit Encryption SSPI Signing SSPI Sealing (Encryption) Controlling SSP Behavior Using Group Policies Microsoft Negotiate SSP GSS-API and SSPI Compatibility Authentication Protocols NTLM Authentication NTLM Overview The Concept of Trust and Secure Channels Domain Member Secure Channel Establishment Domain Controller Secure Channel Establishment across Trusts SMB/CIFS Signing Case Study: Pass-through Authentication and Authentication Piggybacking NTLM Authentication Mechanics Case Study: NTLM Authentication Scenarios NTLM Impersonation Kerberos Authentication Kerberos Overview The Concept of Trust in Kerberos Name Format for Kerberos Principals 389
7 xiv Contents Kerberos Authentication Phases Kerberos Tickets Kerberos Authentication Mechanics Case Study: Kerberos Authentication: CIFS Authorization Information and the Microsoft PAC Attribute Kerberos Credentials Exchange (KRB_CRED) Kerberos and Smart Card Authentication (PKInit) Kerberos User-to-User Authentication Kerberos Encryption and Checksum Mechanisms Case Study: Kerberos Authentication Scenarios Kerberos Delegation Simple Authentication and Security Layer (SASL) Kerberos IV GSS-API S/Key Authentication Mechanism External Authentication SASL Anonymous Authentication SASL CRAM-MD5 Authentication SASL Digest-MD5 Authentication SASL and User Password Databases Transport Layer Security (TLS) and Secure Sockets Layer (SSL) Hello Phase Server Authentication Phase Client Authentication Phase Calculate the Master Secret Calculate Protection Keys Negotiate Start of Protection Phase Resuming TLS/SSL Sessions Using SSL/TLS to Protect Generic User Traffic Using SSL/TLS Certificate Mapping as an Authentication Method Telnet Authentication Telnet Login Authentication Telnet Authentication Option FTP Authentication FTP Simple Authentication Anonymous FTP FTP Security Extensions with GSS-API FTP Security Extensions with TLS HTTP Authentication HTTP Anonymous Authentication HTTP Basic Authentication HTTP Digest Authentication 492
8 Contents xv HTTP GSS-API/SSPI Authentication Using SPNEGO and Kerberos HTTP NTLMSSP Authentication HTTP SSL Certificate Mapping as an Authentication Method Form-Based Authentication Microsoft Passport Authentication HTTP Proxy Authentication POP3/IMAP Authentication POP3/IMAP Password Authentication POP3/IMAP Piain Authentication POP3 APOP Authentication POP3/IMAP Login Authentication POP3/IMAP SASL CRAM-MD5 and DIGEST-MD5 Authentication POP3/IMAP and NTLM Authentication (Secure Password Authentication) SMTP Authentication SMTP Login Authentication SMTP Piain Authentication SMTP GSS-API Authentication SMTP CRAM-MD5 and DIGEST-MD5 Authentication SMTP Authentication Using NTLM LDAP Authentication Simple Authentication LDAP Anonymous Authentication LDAP SASL Authentication Using Digest-MD LDAP SASL Authentication Using GSS-API SSH Authentication SSH Public Key Authentication SSH Host Authentication SSH Password Authentication SSH Keyboard Interactive Authentication SSH GSS-API User Authentication SSH GSS-API Key Exchange and Authentication Sun RPC Authentication RPC AUTH_NULL (AUTH_NONE) Authenücaüon RPC AUTHJJNIX (AUTH_SYS) Authentication RPC AUTH_SHORT Authentication RPC AUTH_DES (AUTH_DH) Authentication RPC AUTH_KERB4 Authentication RPCSEC_GSS Authentication SMB/CIFS Authentication NFS Authentication Microsoft Remote Procedure Calls 56l 4.15 MS SQL Authentication MS SQL Authentication over the TCP/IP Transport 563
9 xvi Contents MS SQL Server Authentication over Named Pipes MS SQL Server Authentication over Multiprotocol MS SQL Server and SSL Oracle Database Server Authentication Oracle Legacy Authentication Database Legacy OracleNet Authentication Oracle Advanced Security Mechanisms for User Authentication MS Exchange MAPI Authentication SAML, WS-Security, and Federated Identity XML and SOAP SAML SAML and Web Single Sign-On Case Study: Web Single Sign-On Mechanics SAML Federated Identity Account Linking WS-Security Authenticating Access to the Infrastructure User Authentication on Cisco Routers and Switches Authentication to Router Services Local User Database and Passwords Centralizing Authentication New-Model AAA Authenticating Remote Access to the Infrastructure SLIP Authentication PPP Authentication Password Authentication Protocol (PAP) CHAP MS-CHAP Version 1 and Extensible Authentication Protocol (EAP) EAP-TLS EAP-TTLS Protected EAP (PEAP) Lightweight EAP (LEAP) EAP-FAST EAP-FAST Automatic Provisioning (EAP-FAST Phase 0) Tunnel Establishment (EAP-Phase 1) User Authenticaüon (EAP-FAST Phase2) Port-Based Access Control Overview of Port-Based Access Control EAPOL EAPOL Key Messages Authenticating Access to the Wireless Infrastructure Wi-Fi Authentication Overview WEP Protection 625
10 Contents xvii Open Authentication Shared Key Authentication WPA/WPA2 and IEEE 802.lli WPA/WPA2 Enterprise Mode WPA/WPA2 Preshared Key Mode (WPA-PSK) IPSec, IKE, and VPN Client Authentication IKE Peer Authentication IKE and IPSec Phases Preshared Key Authentication IKE Signature-Based Authentication IKE Public Key Authentication, Option IKE Public Key Authentication, Option IKE XAUTH Authentication and VPN Clients Centralized User Authentication RADIUS Overview The Model of Trust in RADIUS RADIUS Authentication Requests from Edge Devices RADIUS and EAP Pass-through Authentication TACACS Overview TACACS+ Channel Protection TACACS+ Authentication Process 684 Appendices A References 691 Printed References 691 Online References 692 B Lab Configuration 701 C Indices of Tables and Figures 705 Index of Tables 705 Index of Figures 709 Index 713
Security. AAA Identity Management. Premdeep Banga, CCIE #21713. Cisco Press. Vivek Santuka, CCIE #17621. Brandon J. Carroll, CCIE #23837
AAA Identity Management Security Vivek Santuka, CCIE #17621 Premdeep Banga, CCIE #21713 Brandon J. Carroll, CCIE #23837 Cisco Press 800 East 96th Street Indianapolis, IN 46240 ix Contents Introduction
Network Security 1. Module 4 Trust and Identity Technology. Ola Lundh 070 69 86596 ola.lundh@edu.falkenberg.se
Network Security 1 Module 4 Trust and Identity Technology Module 1 Trust and Identity Technology 4.1 AAA AAA Model Network Security Architecture Authentication Who are you? I am user student and my password
Cisco Secure Access Control Server 4.2 for Windows
Cisco Secure Access Control Server 4.2 for Windows Overview Q. What is Cisco Secure Access Control Server (ACS)? A. Cisco Secure ACS is a highly scalable, high-performance access control server that operates
Network Security 1 Module 4 Trust and Identity Technology
Network Security 1 Module 4 Trust and Identity Technology 1 Learning Objectives 4.1 AAA 4.2 Authentication Technologies 4.3 Identity Based Networking Services (IBNS) 4.4 Network Admission Control (NAC)
Networking. Systems Design and. Development. CRC Press. Taylor & Francis Croup. Boca Raton London New York. CRC Press is an imprint of the
Networking Systems Design and Development Lee Chao CRC Press Taylor & Francis Croup Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an Informa business AN AUERBACH BOOK
Windows 2000 Security Architecture. Peter Brundrett Program Manager Windows 2000 Security Microsoft Corporation
Windows 2000 Security Architecture Peter Brundrett Program Manager Windows 2000 Security Microsoft Corporation Topics Single Sign-on Kerberos v5 integration Active Directory security Delegation of authentication
Security Technical. Overview. BlackBerry Enterprise Service 10. BlackBerry Device Service Solution Version: 10.2
BlackBerry Enterprise Service 10 BlackBerry Device Service Solution Version: 10.2 Security Technical Overview Published: 2014-09-10 SWD-20140908123239883 Contents 1 About BlackBerry Device Service solution
Security. Contents. S-72.3240 Wireless Personal, Local, Metropolitan, and Wide Area Networks 1
Contents Security requirements Public key cryptography Key agreement/transport schemes Man-in-the-middle attack vulnerability Encryption. digital signature, hash, certification Complete security solutions
Authentication. Authentication in FortiOS. Single Sign-On (SSO)
Authentication FortiOS authentication identifies users through a variety of methods and, based on identity, allows or denies network access while applying any required additional security measures. Authentication
70 299 Implementing and Administering Security in a Microsoft Windows Server 2003 Network
70 299 Implementing and Administering Security in a Microsoft Windows Server 2003 Network Course Number: 70 299 Length: 1 Day(s) Course Overview This course is part of the MCSA training.. Prerequisites
7.1. Remote Access Connection
7.1. Remote Access Connection When a client uses a dial up connection, it connects to the remote access server across the telephone system. Windows client and server operating systems use the Point to
(d-5273) CCIE Security v3.0 Written Exam Topics
(d-5273) CCIE Security v3.0 Written Exam Topics CCIE Security v3.0 Written Exam Topics The topic areas listed are general guidelines for the type of content that is likely to appear on the exam. Please
Security+ Guide to Network Security Fundamentals, Third Edition Chapter 8 Authentication
Security+ Guide to Network Security Fundamentals, Third Edition Chapter 8 Authentication Objectives Define authentication Describe the different types of authentication credentials List and explain the
Mac OS X Directory Services
Mac OS X Directory Services Agenda Open Directory Mac OS X client access Directory services in Mac OS X Server Redundancy and replication Mac OS X access to other directory services Active Directory support
Network Security and AAA
ICT Technical Update Module Network Security and AAA Prof. Dr Harsha Sirisena Electrical and Computer Engineering University of Canterbury AAA Introduction Overview A network administrator may allow remote
APNIC elearning: Network Security Fundamentals. 20 March 2013 10:30 pm Brisbane Time (GMT+10)
APNIC elearning: Network Security Fundamentals 20 March 2013 10:30 pm Brisbane Time (GMT+10) Introduction Presenter/s Nurul Islam Roman Senior Training Specialist nurul@apnic.net Specialties: Routing &
Security. TestOut Modules 12.6 12.10
Security TestOut Modules 12.6 12.10 Authentication Authentication is the process of submitting and checking credentials to validate or prove user identity. 1. Username 2. Credentials Password Smart card
The Importance of Wireless Security
The Importance of Wireless Security Because of the increasing popularity of wireless networks, there is an increasing need for security. This is because unlike wired networks, wireless networks can be
CISCO IOS NETWORK SECURITY (IINS)
CISCO IOS NETWORK SECURITY (IINS) SEVENMENTOR TRAINING PVT.LTD [Type text] Exam Description The 640-553 Implementing Cisco IOS Network Security (IINS) exam is associated with the CCNA Security certification.
Network Security Fundamentals
APNIC elearning: Network Security Fundamentals 27 November 2013 04:30 pm Brisbane Time (GMT+10) Introduction Presenter Sheryl Hermoso Training Officer sheryl@apnic.net Specialties: Network Security IPv6
iphone in Business Security Overview
iphone in Business Security Overview iphone can securely access corporate services and protect data on the device. It provides strong encryption for data in transmission, proven authentication methods
Deploying iphone and ipad Virtual Private Networks
Deploying iphone and ipad Virtual Private Networks Secure access to private corporate networks is available on iphone and ipad using established industry-standard virtual private network (VPN) protocols.
Executive Summary. This white paper includes the following sections: A.What Does 802.1x Do? B. An Overview of the 802.1x Standard
Allied Telesis White Paper 802.1x White Paper Executive Summary Security and flexibility are often seen as mutually exclusive requirements in a network, yet both are equally important. Security is crucial
Application Note: Onsight Device VPN Configuration V1.1
Application Note: Onsight Device VPN Configuration V1.1 Table of Contents OVERVIEW 2 1 SUPPORTED VPN TYPES 2 1.1 OD VPN CLIENT 2 1.2 SUPPORTED PROTOCOLS AND CONFIGURATION 2 2 OD VPN CONFIGURATION 2 2.1
7 Network Security. 7.1 Introduction 7.2 Improving the Security 7.3 Internet Security Framework. 7.5 Absolute Security?
7 Network Security 7.1 Introduction 7.2 Improving the Security 7.3 Internet Security Framework 7.4 Firewalls 7.5 Absolute Security? 7.1 Introduction Security of Communications data transport e.g. risk
Network Access Security. Lesson 10
Network Access Security Lesson 10 Objectives Exam Objective Matrix Technology Skill Covered Exam Objective Exam Objective Number Firewalls Given a scenario, install and configure routers and switches.
Cisco Secure ACS. By Igor Koudashev, Systems Engineer, Cisco Systems Australia ivk@cisco.com. 2006 Cisco Systems, Inc. All rights reserved.
Cisco Secure ACS Overview By Igor Koudashev, Systems Engineer, Cisco Systems Australia ivk@cisco.com 2006 Cisco Systems, Inc. All rights reserved. 1 Cisco Secure Access Control System Policy Control and
Tim Bovles WILEY. Wiley Publishing, Inc.
Tim Bovles WILEY Wiley Publishing, Inc. Contents Introduction xvii Assessment Test xxiv Chapter 1 Introduction to Network Security 1 Threats to Network Security 2 External Threats 3 Internal Threats 5
Topics in Network Security
Topics in Network Security Jem Berkes MASc. ECE, University of Waterloo B.Sc. ECE, University of Manitoba www.berkes.ca February, 2009 Ver. 2 In this presentation Wi-Fi security (802.11) Protecting insecure
Chapter 7 Transport-Level Security
Cryptography and Network Security Chapter 7 Transport-Level Security Lectured by Nguyễn Đức Thái Outline Web Security Issues Security Socket Layer (SSL) Transport Layer Security (TLS) HTTPS Secure Shell
Chapter 4: Security of the architecture, and lower layer security (network security) 1
Chapter 4: Security of the architecture, and lower layer security (network security) 1 Outline Security of the architecture Access control Lower layer security Data link layer VPN access Wireless access
Scenario: IPsec Remote-Access VPN Configuration
CHAPTER 3 Scenario: IPsec Remote-Access VPN Configuration This chapter describes how to use the security appliance to accept remote-access IPsec VPN connections. A remote-access VPN enables you to create
Domain 6.0: Network Security
ExamForce.com CompTIA Network+ N10-004 Study Guide 1 Domain 6.0: Network Security Chapter 6 6.1 Explain the function of hardware and software security devices Network based firewall, Host based firewall
ipad in Business Security
ipad in Business Security Device protection Strong passcodes Passcode expiration Passcode reuse history Maximum failed attempts Over-the-air passcode enforcement Progressive passcode timeout Data security
State of Kansas. Interim Wireless Local Area Networks Security and Technical Architecture
State of Kansas Interim Wireless Local Area Networks Security and Technical Architecture October 6, 2005 Prepared for Wireless Policy Committee Prepared by Revision Log DATE Version Change Description
Joseph Migga Kizza. A Guide to Computer Network Security. 4) Springer
Joseph Migga Kizza A Guide to Computer Network Security 4) Springer Contents Part I Understanding Computer Network Security 1 Computer Network Fundamentals 1.1 Introduction 1.2 Computer Network Models
Network Security Bible Dr. Eric Cole, Dr. Ronald Krutz, and James W. Conley WILEY
WILEY Wiley Publishing, Inc. Network Security Bible Dr. Eric Cole, Dr. Ronald Krutz, and James W. Conley Contents Acknowledgments Introduction Part I: Security Principles and Practices Chapter 1: Information
Cisco Secure Access Control Server Deployment Guide
Cisco Secure Access Control Server Deployment Guide 2007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 1 of 58 Contents Introduction... 4 Cisco Secure ACS...
How To Use The Gss-Api And Sspi For A Security Reason On A Microsoft Microsoft Server (Or A Microsplatte)
Best Practices for Integrating Kerberos into Your Application This paper describes best practices for application developers who wish to add support for the Kerberos Network Authentication System to their
Windows Assessment. Vulnerability Assessment Course
Windows Assessment Vulnerability Assessment Course All materials are licensed under a Creative Commons Share Alike license. http://creativecommons.org/licenses/by-sa/3.0/ 2 Agenda Windows Security Overview
802.1x in the Enterprise Network
802.1x in the Enterprise Network Harrison Forest ICTN 6823 Abstract: This paper aims to provide a general over view of 802.1x authentication and its growing importance on enterprise networks today. It
Configuring Security Solutions
CHAPTER 3 This chapter describes security solutions for wireless LANs. It contains these sections: Cisco Wireless LAN Solution Security, page 3-2 Using WCS to Convert a Cisco Wireless LAN Solution from
Chapter 1 Network Security
Chapter 1 Network Security 1.1 Network Security Router Functions Routers connect networks generally based on network addresses, usually IP network addresses. They create subnets (sub-networks) which isolate
Security of information systems secure file transfer
Security of information systems secure file transfer Who? Mateusz Grotek, 186816 Paweł Tarasiuk, 186875 When? October 30, 2012 Introduction SSH Different solutions Summary Questions Table of contents Problem
The following chart provides the breakdown of exam as to the weight of each section of the exam.
Introduction The CWSP-205 exam, covering the 2015 objectives, will certify that the successful candidate understands the security weaknesses inherent in WLANs, the solutions available to address those
Windows Server 2003 default services
Windows Server 2003 default services To view a description for a particular service, hover the mouse pointer over the service in the Name column. The descriptions included here are based on Microsoft documentation.
Wireless security. Any station within range of the RF receives data Two security mechanism
802.11 Security Wireless security Any station within range of the RF receives data Two security mechanism A means to decide who or what can use a WLAN authentication A means to provide privacy for the
Authentication in a Heterogeneous Environment
Authentication in a Heterogeneous Environment Integrating Linux (and UNIX and Mac) Identity Management in Microsoft Active Directory Mike Patnode VP of Technology Centrify Corporation mike.patnode@centrify.com
How To Secure Your Network With 802.1X (Ipo) On A Pc Or Mac Or Macbook Or Ipo On A Microsoft Mac Or Ipow On A Network With A Password Protected By A Keyed Key (Ipow)
Wireless LAN Security with 802.1x, EAP-TLS, and PEAP Steve Riley Senior Consultant MCS Trustworthy Computing Services So what s the problem? WEP is a euphemism Wired Equivalent Privacy Actually, it s a
Overview Windows NT 4.0 Security Cryptography SSL CryptoAPI SSPI, Certificate Server, Authenticode Firewall & Proxy Server IIS Security IE Security
Overview Windows NT 4.0 Security Cryptography SSL CryptoAPI SSPI, Certificate Server, Authenticode Firewall & Proxy Server IIS Security IE Security Ch 7 - Security 1 Confidentiality and privacy: Protect
PKI Uncovered. Cisco Press. Andre Karamanian Srinivas Tenneti Francois Dessart. 800 East 96th Street. Indianapolis, IN 46240
PKI Uncovered Andre Karamanian Srinivas Tenneti Francois Dessart Cisco Press 800 East 96th Street Indianapolis, IN 46240 Contents Introduction XIII Part I Core Concepts Chapter 1 Crypto Refresh 1 Confidentiality,
Sophos UTM. Remote Access via PPTP. Configuring UTM and Client
Sophos UTM Remote Access via PPTP Configuring UTM and Client Product version: 9.000 Document date: Friday, January 11, 2013 The specifications and information in this document are subject to change without
Extensible Authentication Protocol (EAP) Security Issues
Sotillo ECU 1 Extensible Authentication Protocol (EAP) Security Issues Samuel Sotillo, Dept. of Technology Systems, East Carolina University Abstract This document describes the Extensible Authentication
External Authentication with Cisco VPN 3000 Concentrator Authenticating Users Using SecurAccess Server by SecurEnvoy
External Authentication with Cisco VPN 3000 Concentrator Authenticating Users Using SecurAccess Server by SecurEnvoy Contact information SecurEnvoy www.securenvoy.com 0845 2600010 1210 Parkview Arlington
VPN SECURITY. February 2008. The Government of the Hong Kong Special Administrative Region
VPN SECURITY February 2008 The Government of the Hong Kong Special Administrative Region The contents of this document remain the property of, and may not be reproduced in whole or in part without the
Open Directory. Apple s standards-based directory and network authentication services architecture. Features
Open Directory Apple s standards-based directory and network authentication services architecture. Features Scalable LDAP directory server OpenLDAP for providing standards-based access to centralized data
CSCI 454/554 Computer and Network Security. Final Exam Review
CSCI 454/554 Computer and Network Security Final Exam Review Topics covered by Final Topic before Midterm 20% Topic after Midterm 80% Date: 05/13/2015 9:00am noon Place: the same classroom Open book/notes
802.1X Authentication
OS X 10.7.3 and ios 5.1 May 25, 2012 Contents About 802.1X... 3 Apple Product Compatibility with 802.1X... 7 Configuring 802.1X Settings... 10 Resources... 17 Appendix A: Payload Settings for 802.1X...
Exam Questions SY0-401
Exam Questions SY0-401 CompTIA Security+ Certification http://www.2passeasy.com/dumps/sy0-401/ 1. A company has implemented PPTP as a VPN solution. Which of the following ports would need to be opened
Symm ym e m t e r t ic i c cr c yptogr ypt aphy a Ex: RC4, AES 2
Wi-Fi Security FEUP>MIEIC>Mobile Communications Jaime Dias Symmetric cryptography Ex: RC4, AES 2 Digest (hash) Cryptography Input: variable length message Output: a fixed-length bit
PROTECTING DATA IN TRANSIT WITH ENCRYPTION IN M-FILES
M-FILES CORPORATION PROTECTING DATA IN TRANSIT WITH ENCRYPTION IN M-FILES VERSION 8 24 SEPTEMBER 2014 Page 1 of 8 CONTENTS 1. Overview... 3 2. Encryption of Data in Transit in M-Files... 4 HTTPS... 4 RPC
ICANWK602A Plan, configure and test advanced server based security
ICANWK602A Plan, configure and test advanced server based security Release: 1 ICANWK602A Plan, configure and test advanced server based security Modification History Release Release 1 Comments This Unit
WiFi Security: Deploying WPA/WPA2/802.1X and EAP in the Enterprise
Michael Disabato Service Director Network & Telecom Strategies mdisabato@burtongroup.com Diana Kelley Senior Analyst Security & Risk Management Strategies dkelley@burtongroup.com www.burtongroup.com WiFi
Deploying iphone and ipad Security Overview
Deploying iphone and ipad Security Overview ios, the operating system at the core of iphone and ipad, is built upon layers of security. This enables iphone and ipad to securely access corporate services
IPsec VPN Security between Aruba Remote Access Points and Mobility Controllers
IPsec VPN Security between Aruba Remote Access Points and Mobility Controllers Application Note Revision 1.0 10 February 2011 Copyright 2011. Aruba Networks, Inc. All rights reserved. IPsec VPN Security
PRINCE GEORGE'S COMMUNITY COLLEGE OFFICE OF INSTRUCTION MASTER COURSE SYLLABUS
PRINCE GEORGE'S COMMUNITY COLLEGE OFFICE OF INSTRUCTION MASTER COURSE SYLLABUS CIS 162 Computer Security, Security+ Michael Burt 12/19/2006 Course Designator and Title Prepared by Date Barry Bugg Dr. Aaron
form approved June/2006 revised 11-02-06 Page 1 of 7
Administrative-Master Syllabus form approved June/2006 revised 11-02-06 Page 1 of 7 Administrative - Master Syllabus I. Topical Outline Each offering of this course must include the following topics (be
CONFIGURING ACTIVE DIRECTORY IN LIFELINE
White Paper CONFIGURING ACTIVE DIRECTORY IN LIFELINE CONTENTS Introduction 1 Audience 1 Terminology 1 Test Environment 2 Joining a Lenovo network storage device to an AD domain 3 Importing Domain Users
Other VPNs TLS/SSL, PPTP, L2TP. Advanced Computer Networks SS2005 Jürgen Häuselhofer
Other VPNs TLS/SSL, PPTP, L2TP Advanced Computer Networks SS2005 Jürgen Häuselhofer Overview Introduction to VPNs Why using VPNs What are VPNs VPN technologies... TLS/SSL Layer 2 VPNs (PPTP, L2TP, L2TP/IPSec)
Voice over IP Security
Voice over IP Security Patrick Park Cisco Press Cisco Press 800 East 96th Street Indianapolis, Indiana 46240 USA vii Contents Introduction xvii Part I VoIP Security Fundamentals 3 Chapter 1 Working with
CTS2134 Introduction to Networking. Module 8.4 8.7 Network Security
CTS2134 Introduction to Networking Module 8.4 8.7 Network Security Switch Security: VLANs A virtual LAN (VLAN) is a logical grouping of computers based on a switch port. VLAN membership is configured by
"Charting the Course... Enterprise Linux Networking Services Course Summary
Course Summary Description This an expansive course that covers a wide range of network services useful to every organization. Special attention is paid to the concepts needed to implement these services
Joe Davies Principal Writer Windows Server Documentation
Joe Davies Principal Writer Windows Server Documentation Presented at Seattle Windows Networking User Group monthly meeting September 1, 2010 Agenda Brief VPN technology overview VPN features in Windows
Asheville-Buncombe Technical Community College Department of Networking Technology. Course Outline
Course Number: SEC 150 Course Title: Security Concepts Hours: 2 Lab Hours: 2 Credit Hours: 3 Course Description: This course provides an overview of current technologies used to provide secure transport
Network Access Control and Cloud Security
Network Access Control and Cloud Security Raj Jain Washington University in Saint Louis Saint Louis, MO 63130 Jain@cse.wustl.edu Audio/Video recordings of this lecture are available at: http://www.cse.wustl.edu/~jain/cse571-14/
Security Guide. BES12 Cloud. for BlackBerry
Security Guide BES12 Cloud for BlackBerry Published: 2015-03-31 SWD-20150317085646346 Contents Introduction... 7 About this guide...8 What is BES12 Cloud?... 9 Key features of BES12 Cloud...10 Security
MetaFrame Presentation Server Security Standards and Deployment Scenarios Including Common Criteria Information
MetaFrame Presentation Server Security Standards and Deployment Scenarios Including Common Criteria Information Citrix MetaFrame Presentation Server 4.0 for Windows Information in this document is subject
Citrix MetaFrame XP Security Standards and Deployment Scenarios
Citrix MetaFrame XP Security Standards and Deployment Scenarios Including Common Criteria Information MetaFrame XP Server for Windows with Feature Release 3 Citrix Systems, Inc. Information in this document
NETASQ MIGRATING FROM V8 TO V9
UTM Firewall version 9 NETASQ MIGRATING FROM V8 TO V9 Document version: 1.1 Reference: naentno_migration-v8-to-v9 INTRODUCTION 3 Upgrading on a production site... 3 Compatibility... 3 Requirements... 4
Windows Security and Directory Services for UNIX using Centrify DirectControl
SOLUTION GUIDE CENTRIFY CORP. SEPTEMBER 2005 Windows Security and Directory Services for UNIX using Centrify DirectControl With Centrify, you can now fully leverage your investment in Active Directory
Integration with Active Directory. Jeremy Allison Samba Team
Integration with Active Directory Jeremy Allison Samba Team Benefits of using Active Directory Unlike the earlier Microsoft Windows NT 4.x Domain directory service which used proprietary DCE/RPC calls,
Chapter 3 Authenticating Users
Chapter 3 Authenticating Users Remote users connecting to the SSL VPN Concentrator must be authenticated before being allowed to access the network. The login window presented to the user requires three
Build Your Own Security Lab
Build Your Own Security Lab A Field Guide for Network Testing Michael Gregg WILEY Wiley Publishing, Inc. Contents Acknowledgments Introduction XXI xxiii Chapter 1 Hardware and Gear Why Build a Lab? Hackers
Administrator's Guide
Administrator's Guide Contents Administrator's Guide... 7 Using Web Config Network Configuration Software... 8 About Web Config... 8 Accessing Web Config... 8 Restricting Features Available for Users...
UNIVERZITA KOMENSKÉHO V BRATISLAVE FAKULTA MATEMATIKY, FYZIKY A INFORMATIKY PRÍPRAVA ŠTÚDIA MATEMATIKY A INFORMATIKY NA FMFI UK V ANGLICKOM JAZYKU
UNIVERZITA KOMENSKÉHO V BRATISLAVE FAKULTA MATEMATIKY, FYZIKY A INFORMATIKY PRÍPRAVA ŠTÚDIA MATEMATIKY A INFORMATIKY NA FMFI UK V ANGLICKOM JAZYKU ITMS: 26140230008 DOPYTOVO ORIENTOVANÝ PROJEKT Moderné
Part III-b. Universität Klagenfurt - IWAS Multimedia Kommunikation (VK) M. Euchner; Mai 2001. Siemens AG 2001, ICN M NT
Part III-b Contents Part III-b Secure Applications and Security Protocols Practical Security Measures Internet Security IPSEC, IKE SSL/TLS Virtual Private Networks Firewall Kerberos SET Security Measures
ACADEMIA LOCAL CISCO UCV-MARACAY CONTENIDO DE CURSO CURRICULUM CCNA. SEGURIDAD CCNA SECURITY. VERSION 1.0
ACADEMIA LOCAL CISCO UCV-MARACAY CONTENIDO DE CURSO CURRICULUM CCNA. SEGURIDAD CCNA SECURITY. VERSION 1.0 Module 1: Vulnerabilities, Threats, and Attacks 1.1 Fundamental Principles of a Secure Network
Cisco ASA Adaptive Security Appliance Single Sign-On: Solution Brief
Guide Cisco ASA Adaptive Security Appliance Single Sign-On: Solution Brief October 2012 2012 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of 21 Contents
Security Technical. Overview. BlackBerry Enterprise Server for Microsoft Exchange. Version: 5.0 Service Pack: 4
BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0 Service Pack: 4 Security Technical Overview Published: 2014-01-17 SWD-20140117135425071 Contents 1 New in this release...10 2 Overview...
Sample. Configuring the RADIUS Server Integrated with ProCurve Identity Driven Manager. Contents
Contents 4 Configuring the RADIUS Server Integrated with ProCurve Identity Driven Manager Contents Overview...................................................... 4-3 RADIUS Overview...........................................
BlackBerry Enterprise Server 5.0 SP3 and BlackBerry 7.1
BlackBerry Enterprise Server 5.0 SP3 and BlackBerry 7.1 Version: 5.0 Service Pack: 3 Security Technical Overview Published: 2012-01-17 SWD-1936256-0117012253-001 Contents 1 Document revision history...
Implementing Cisco IOS Network Security
Implementing Cisco IOS Network Security IINS v3.0; 5 Days, Instructor-led Course Description Implementing Cisco Network Security (IINS) v3.0 is a 5-day instructor-led course focusing on security principles
RADIUS: A REMOTE AUTHENTICATION DIAL-IN USER SERVICE
InSight: RIVIER ACADEMIC JOURNAL, VOLUME 5, NUMBER 2, FALL 2009 RADIUS: A REMOTE AUTHENTICATION DIAL-IN USER SERVICE Daniel Szilagyi*, Arti Sood** and Tejinder Singh M.S. in Computer Science Program, Rivier
Computer Networks. Secure Systems
Computer Networks Secure Systems Summary Common Secure Protocols SSH HTTPS (SSL/TSL) IPSec Wireless Security WPA2 PSK vs EAP Firewalls Discussion Secure Shell (SSH) A protocol to allow secure login to
Understanding the Cisco VPN Client
Understanding the Cisco VPN Client The Cisco VPN Client for Windows (referred to in this user guide as VPN Client) is a software program that runs on a Microsoft Windows -based PC. The VPN Client on a
IINS Implementing Cisco Network Security 3.0 (IINS)
IINS Implementing Cisco Network Security 3.0 (IINS) COURSE OVERVIEW: Implementing Cisco Network Security (IINS) v3.0 is a 5-day instructor-led course focusing on security principles and technologies, using
BlackBerry Business Cloud Services. Policy Reference Guide
BlackBerry Business Cloud Services Policy Reference Guide Published: 2012-01-30 SWD-1710801-0125055002-001 Contents 1 IT policy rules... 5 Preconfigured IT policies... 5 Default for preconfigured IT policies...
Lesson Plans Administering Security in a Server 2003 Network
Lesson Plans Administering Security in a Server 2003 Network (Exam 70-299) Version 2.0 Table of Contents Table of Contents... 1 Course Overview... 2 Section 1.1: Course Introduction... 4 Section 1.2: Active
For the protocol access paths listed in the following table, the Sentry firmware actively listens on server ports to provide security for the CDU.
CDU Security This provides a quick reference for access paths to Server Technology s Cabinet Distribution Unit (CDU) products, shows if the access path is secure, and if so, provides an overview of how