Tài liệu thực hành môn Mật mã và An ninh mạng - Tutorial 4: Firewall, VPN, IDS - Nguyễn Hữu Hiếu
Faculty of Computer Science and Engineering
Ho Chi Minh City University of Technology
Cryptography and Network Security
Tutorial 4
FIREWALL, VPN, IDS
Hieu Nguyen
10/15/2016
Exercise 1. (3pts) Firewall
A firewall is a software program or piece of hardware that helps screen out hackers,
viruses, and worms that try to reach your computer over the Internet.
a) Describe at least three different firewall functions?
b) What is DMZ?
c) Firewalls work at what layer? Define firewall generations and their roles.
Exercise 2. (3pts) Virtual Private Network
A VPN solutions is, loosely defined, a secure connection between a client machine/network
and a server (gateway) in another network designed such that applications in the client
do not have to be aware of the presence of the VPN (their code is not affected by it).
a) Explain why TLS cannot directly be used for a VPN?
1
b) Describe a way to design a system for a secure VPN connection that uses TLS.
c) Explain briefly why IPsec has not the same problem as TLS. Also indicate what
is additionally needed in a IPsec based VPN.
Exercise 3. (4pts) Intrusion Detection System
a) What are a network intrusion detection system (NIDS) and host intrusion detec-
tion system (HIDS)?
b) How are intrusions detected?
c) What is an advantage of anomaly detection?
d) How does a NIDS match signatures with incoming traffic?
THE END
2
2 trang
21480
Free
Bạn đang xem tài liệu "Tài liệu thực hành môn Mật mã và An ninh mạng - Tutorial 4: Firewall, VPN, IDS - Nguyễn Hữu Hiếu", để tải tài liệu gốc về máy hãy click vào nút Download ở trên
File đính kèm:
- tai_lieu_thuc_hanh_mon_mat_ma_va_an_ninh_mang_tutorial_4_fir.pdf
