Section 10 Chapter 58 - Internet Security

A security checkpoint that prevents unauthorised access between two networks, often a local network and the internet

• Packet filtering • Stateful inspection • Proxy server

Controls network access by rejecting certain packets based on the contents of their header. It can look at the

Controls network access by inspecting the payload of packets. It can apply temporary rules based on the passage of previous packets in a conversation

Intercepts all packets entering and leaving a network and therefore hides the true network addresses from the recipient. It can also store a cache of recently viewed webpages to increase browsing speed

The process of scrambling data so that it can only be read with the correct key

private

The same key is used to encrypt and decrypt the data.

public and private

There are two keys: public and private. The public key is used to encrypt and the private key is used to decrypt. Anyone can encrypt a message with the public key but only you can read it using your private key

A checksum is appended to the end of some data. This is then encrypted using the senders private key. When received, the checksum can be obtained by decryption through the use of the senders public key and then can be checked against the data. The signature may contain the time and date

Issued by the Certificate Authorities and verifies that the public key for a digital signature is formally registered.

Standalone malware that can replicate itself and spread

Malware that requires a host to spread and replicate itself

Malware that disguises itself as a legitimate program. Cannot replicate or spread

• Improved code quality - Monitoring and protection

Malware often takes advantage of buffer overflows so avoid dat stuff

Regular scans for viruses