100 likes | 213 Views
Chabot College. ELEC 99.05 Internet Security Introduction. Internet Security. TCP/IP and the internet were designed by professionals with a common culture and cooperative goals. Today they are used by a wide range of persons with varying and sometimes malicious goals.
E N D
Chabot College ELEC 99.05 Internet Security Introduction
Internet Security • TCP/IP and the internet were designed by professionals with a common culture and cooperative goals. • Today they are used by a wide range of persons with varying and sometimes malicious goals. • The technology of TCP/IP does not assure user security. • There are many points at which TCP/IP security can be compromised.
Internet Security • Security intrusions over the internet are common. • The following slide shows 48 hours of intrusion attempts against a DSL-connected PC… • Note that the probes come from all over the world, including Romania. • Most of these attempts are from “script kiddies” running a program on a PC to grind through a range of IP addresses.
Security Strategies • Use a NAT router to connect to DSL or cable modem. • Use a software firewall for dial-up, DSL or cable modem. • (e.g. Zone Alarm, from www.zonelabs.com - free) • Read Steve Gibson’s excellent Shields-UP site and follow his configuration advice. (free)
Shields UP • Key ideas from Shields UP: • As delivered, Windows is not secure when connected to the internet. • The key problems can be fixed by a free reconfiguration. • Free software firewalls are recommended.
Shields UP • Here’s how windows protocol bindings are delivered: Higher Layers Layer 3 Layer 1&2
Shields UP • Binding these Microsoft network services to TCP/IP creates security vulnerabilities! Problem Bindings
Shields UP • Here are the bindings needed for access to the internet:
Shields UP • The excellent Shields Up site tells you how to do it! • Bonus Credit Assignment - fix your home PC! http://www.grc.com