History of Firewall

But how does it work? The internet, based on the concept of “packet switching”, involves the travelling of small packets of data over one or more networks (Frenzel, 2013). This can be compared to “electronic postcards”, meaning that “a computer generates a piece of data and flings it into the net, just like the postal system, except 100 million times faster” (Cerf, 2013). This concept allows one computer to speak to many different computers around the network by sending out these “electronic postcards”. However, before these networks can work seamlessly together, they must use a common protocol, or set of rules for transmitting and receiving these packets of data. There are several protocols currently in use, including the OSI Model, the TCP/IP Model, UDP, HTTP, and FDP (Mitchell, 2014), but the most commonly used is Transmission Control Protocol/Internet Protocol (TCP/IP) (Gilmer, 2011). Even as early as 1977, TCP/IP was being used by other networks to link to ARPANET (Kozierok,

The system should also allow users to access the network from anywhere as long as they can verify authenticity. The system should also be able to prevent brute force attacks. The system should also make it possible for admins to see suspicious activity. Overall the components in the system should work as intended, to ensure top notch reliability and availability.

Firewall: A firewall is a software or hardware-based network security system that controls the incoming and outgoing network traffic by analysing the data packets and

Individual users play an important role in any form of institution or organization but concerns are raised about the security. The network administrators clearly lay down a set of rules, regulations and protocols that an individual user has to agree accordingly upon which part of the resources and what class of service that the user can obtain.

6) How does the use of border, internal, and host firewalls provide defense in depth?

“Security needs to be addressed as a continued lifecycle to be effective. Daily, there are new attack signatures being developed, viruses and worms being written, natural disasters occurring, changes in the organization workplace taking place and new technologies evolving, these all effect the security posture in the organization” (King, 2002). This being said, it is important to evaluate firewall and router rule sets more frequently. The possible threats against this policy include improperly configured network infrastructure which leads to a domino effect that could start with malicious programming which could end in data loss. Many of these threats may be unintentional as some users may not be aware of the risks and how their processes and procedures open the door for such attacks. For this reason alone, a more frequent evaluation is needed. This vulnerability could lead to data loss and the exposure of trade secrets, client lists and product design. The exposure of such information for most companies could mean a financial collapse as it no longer has the competitive edge that makes it the industry leader. While the likelihood of this threat is very high, “security risks to the network exist if users do not follow the security policy. Security weaknesses emerge when there is no clear cut or written security policy document. A security policy meets these goals:

Security is the heart of internetworking. The world has moved from an Internet of implicit trust to an Internet of pervasive distrust. In network security, no packet can be trusted; all packets must earn that trust through a network device’s ability to inspect and enforce policy. Clear text (unencrypted data) services represent a great weakness in networks. Clear text services transmit all information or packets, including user names and passwords, in unencrypted format. Services such as file transfer protocol (FTP), email, telnet and basic HTTP authentication all transmit communications in clear text. A hacker with a sniffer could easily capture user names and passwords from the network without anyone’s knowledge and gain administrator access to the system. Clear text services should be avoided; instead secure services that encrypt communications, such as Secure Shell (SSH) and Secure Socket Layer (SSL), should be used. The use of routers and switches will allow for network segmentation and help defend against sniffing

6. Describe (in plain English) at least one type of rule set you would want to add to a high level security network and why?

The Internet is, quite literally, a network of networks. It is comprised of ten thousands of interconnected networks spanning the globe. The computers that form the Internet range from huge mainframes in research establishments to modest PCs in people's homes and offices. Despite the recent hype, the Internet is not a new phenomenon. Its roots lie in a collection of computers that were linked together in the 1970s to form the US Department of Defense's communications systems. Fearing the consequences of nuclear attack, there was no central computer holding vast amounts of data, rather the information was dispersed across thousands of machines. A set of rules, of protocols, known as TCP/IP was

6. Describe (in plain English) at least one type of ruleset you would want to add to a high level security network and why?

The two authors follow the story from the conception of the idea of "packet switching" in the early 1960s to the creation and development of the Internet. We see how one idea led to another and how the intelligent people around the circumstances influenced the developments.

Today we can find types of network security treaties differ in their nature. Ping sweeps and port scans are one of the big issues that companies facing in current business world. This report will provide brief explanation about these treats and what are the impacts in the organization business.

Identification of controls already in place – including policies, firewalls, applications, intrusion and detection prevention systems, virtual private networks, data loss prevention and encryption.

In an e-commerce world, organizations are susceptible to hackers and intruders. Thus creating the information technology protection systems which is used to reduce the possibility of intrusions from occurring. Intrusions occur by uninvited outsiders (sometimes intruders can be internal users like employees) who try to access an organization’s information system using the internet with the intent to gain competitive advantage of some sort. Organizations depend on security technology to avoid loss from security breach, as well as to improve their efficiency and effectiveness. However, firewalls are also vulnerable to errors, and implementing a security technology comes with challenges and critical decisions that can possibly cause a financial burden on the organization if done without seriousness and commitment. “Information security is about managing risk, and managing risk is about discovering and measuring threats to information assets; and taking actions to respond to those threats” (Al-Awadi, & Renaud, 2007, p.3). This paper will discuss a few aspects that are involved with firewalls and intrusion detection systems.

The always and ever increasing quantity of products with IP routers are incorporating packet filtering as a tool to help in improving the network security if utilized in the proper way, packet filtering is a great tool for a network’s security or networks administrators that are security conscious but in order for it to be used effectively one must have an in-depth understanding of its many capabilities and weaknesses, advantages and disadvantages and what type of particular protocol that the filters are being applied to. This paper begin by defining firewall and identifying the different types of firewall then goes into Packet filtering describing some of the characteristics and some of the application protocol then the paper identified