100 likes | 217 Vues
This course provides an overview of Internet security, focusing on TCP/IP vulnerabilities. Originally designed for cooperative use, TCP/IP now faces numerous security threats from various entities, often with malicious intent. Frequent security intrusions are evident, as seen in a case study of 48 hours of attempted breaches against a DSL-connected PC. We will discuss strategies to enhance security, including the use of NAT routers, software firewalls, and expert resources like ShieldsUP. By the end, you will be equipped to secure your home PC against common threats.
E N D
Chabot College ELEC 99.05 Internet Security Introduction
Internet Security • TCP/IP and the internet were designed by professionals with a common culture and cooperative goals. • Today they are used by a wide range of persons with varying and sometimes malicious goals. • The technology of TCP/IP does not assure user security. • There are many points at which TCP/IP security can be compromised.
Internet Security • Security intrusions over the internet are common. • The following slide shows 48 hours of intrusion attempts against a DSL-connected PC… • Note that the probes come from all over the world, including Romania. • Most of these attempts are from “script kiddies” running a program on a PC to grind through a range of IP addresses.
Security Strategies • Use a NAT router to connect to DSL or cable modem. • Use a software firewall for dial-up, DSL or cable modem. • (e.g. Zone Alarm, from www.zonelabs.com - free) • Read Steve Gibson’s excellent Shields-UP site and follow his configuration advice. (free)
Shields UP • Key ideas from Shields UP: • As delivered, Windows is not secure when connected to the internet. • The key problems can be fixed by a free reconfiguration. • Free software firewalls are recommended.
Shields UP • Here’s how windows protocol bindings are delivered: Higher Layers Layer 3 Layer 1&2
Shields UP • Binding these Microsoft network services to TCP/IP creates security vulnerabilities! Problem Bindings
Shields UP • Here are the bindings needed for access to the internet:
Shields UP • The excellent Shields Up site tells you how to do it! • Bonus Credit Assignment - fix your home PC! http://www.grc.com