Network Architecture Essay

Despite the presence of network security devices such as firewalls and other security appliances, today's corporate networks are still vulnerable to both internal and external attacks by hackers intent on creating havoc. By proactively

For the purpose of this assignment snort will be used as intrusion detections systems which is an open source IDS, snort has the ability to monitor traffics in real time and packet locking its also inspecting each packets as they enters into the network, Snort can be used as packet sniffer to analyse the network traffic in order to detect any bizarre looking packets or payloads which might have malicious data in it. Snort can also detect payloads attacks against the network or host system including but not limited to stealth port scan, and buffer overflows.

Denial of service – Denial of service or DOS is an attempt to make a machine or network unavailable to its users. The services that were available to the user wouldn’t be available anymore. Although the result of a DOS attack does not lead to data theft. However a great deal of time and money can cost the company. An example of a service being stopped is email, or can be a loss of network connectivity. There could be no access to shared storage and no one would be able to access the internet while the DOS attack.

Security is almost certainly the most difficult aspect of a network to perfect. It is important to have the correct procedures and components in place to make certain network security is being accounted for and addressed on any given network. The journal, “Future Generation Computer Systems” elaborates on this necessity for an information system. “Future Generation Computer Systems”, this component of a network is discussed thoroughly. “Essentially securing an Information System (IS), involves identifying unique threats and challenges which need to be addressed by implementing the appropriate countermeasures” (Dimitrios Zissis, Dimitrios Lekkas, 2012). This was achieved through configuring access lists as well as CHAP configuration on the routers connecting to the edge

5. What are the three primary methods for implementing security on this network, as well as the advantages and disadvantages each?

What services are to be permitted and denied access to your network or computer? Make a list of what enters and leaves your network. Discuss

6. Describe (in plain English) at least one type of rule set you would want to add to a high level security network and why?

Couple of rules that can be added to a high level security network could be:

The network team is doing its part to recommend updates to the network intrusion detection system. Also the team has setup alerts which will send email to the team when there is a change in the baseline network bandwidth which can be a precursor to an attack. Additional monitoring has been enabled to alert the team when there is administrative access to the firewall. Also the team will work to build resiliency in the network to automatically switch the network to additional circuits when under this type of

Enhancing the security of routers is important to avoid unauthorized users change configuration settings and avoid unauthorized information and routing from entering. For instance, clear text authentication takes advantage of more flexible key management capabilities.

2.4.7 Rapid intrusion detection and response procedures: KIU should have mechanisms in place to reduce the risk of undetected system intrusions. Computing systems are never perfectly secure. When a security failure occurs and an attacker is "in" the institution's system, only rapid detection and reaction can minimize any damage that might occur. Techniques used to identify intrusions include intrusion detection systems (IDS) for the network and individual servers (i.e., host computer), automated log correlation and analysis, and the identification and analysis of operational

Interruption identification frameworks (IDS) take either system or host based methodology for perceiving and redirecting assaults. In either case, these items search for assault marks (particular examples) that for the most part demonstrate malignant or suspicious goal. At the point when an IDS searches for these examples in system activity then it is system based (figure 1). At the point when an IDS searches for assault marks in log records, then it is host based.

A vulnerability scanner, as its name infers, checks your system or framework, (for example, a PC, server or switch) and recognizes and reports back on open ports, dynamic Internet Protocol (IP) addresses and log-ons, also working frameworks, programming and administrations that are introduced and running. The scanner programming looks at the data it finds against known vulnerabilities in its database or an outsider database

Identification of controls already in place – including policies, firewalls, applications, intrusion and detection prevention systems, virtual private networks, data loss prevention and encryption.

Firewalls is categorized as a preventive control which is used as a defense shield around IT systems to keep intruders and hacking from occurring, whereas, an Intrusion Detection System (IDS) which is categorized as a detective control is used to detect intrusions that have already occurred (Cavusoglu, Mishra, & Raghunathan, 2005). However, IDSs are not