TEchMyEducation

easy tech learning...

Showing posts with label Network Security. Show all posts

proxy server working,advantages and types of proxy server

proxy server working,advantages and types of proxy server

Proxy server
Before reading the proxy server, we understand what a proxy is?
Proxy means "to present someone else or to act on behalf of someone else." In other words, "make any indirect service available."

Similarly, a proxy server can also be a computer system or application that acts as an intermediate for the client and the client's request goes through this intermediate server.
And the server also conveys the request to the client through the same intermediate.
In other words, "proxy server is a computer that acts like the gateway between the user's computer and the internet.

proxy server working,advantages and types of proxy server
The proxy server is also called the application level gateway.
Through this, the client computer can establish an indirect network connection from other networks.

proxy server working,advantages and types of proxy server
proxy server working: -
Let us briefly understand how does this work?

As you can see in the picture, we have a client, proxy server and a web server. Suppose a client wants to open a website, then they will request the proxy server to open the website. And the proxy server will send the client's request to the web server. Now the web server will open the website and give it to the proxy server. Because the web server has been sent by the request proxy server. And then the proxy server will give the service of that website to the client.

proxy server working,advantages and types of proxy server
proxy server benefits: -
1: - This is used for caching i.e. when a client accesses any information, then it saves information when another client accesses the same information from the same cache in the same client as the client Gives to This increases the speed of the internet so that time is saved.
2: - This hides the IP address, that is, it does not know the identity of the client. Whichever information goes to the Internet, it belongs to the proxy server. By which our network becomes secure. Because those hackers who are attackers do not know that the actual request received has come from said.
3: - This can block the website, that is, if the client does not want to use any website, then it can block it by it.
4: By this, the client can also open the blocked websites ie you must have noticed that some websites in our office or in the college such as: - social media sites or dirty sites are not open. Because they have been blocked. So we can also open these websites through the proxy server. This is exactly the opposite of point 3.

proxy server working,advantages and types of proxy server
types of proxy server: -
The following types are: -
1: -anonymous proxy
2: - SSL proxy
3: - transparent proxy
4: - reverse proxy

1: - anonymous proxy: - This proxy provides privacy to the client, meaning that it hides the client's IP address. So that no person like Hacker etc can trace the client's location.

2: - SSL proxy: - SSL (secure socket layer) is used in any online transaction. Just as if you bought any stuff from amazon, their site has an SSL proxy that protects our data online during purchase. The website that has https before the url is the same SSL
3: - transparent proxy: - In this proxy the request is forwarded to the Internet through the client's server. But the client's information is not hidden in it. It is also called forward proxy.
4: - reverse proxy: - This proxy is used to access requests from client to client server.

Computer Network Attack active attack passive attack

Computer Network Attack active attack passive attack

Computer Network Attack active attack passive attack

In a computer or computer network an attack is an attempt to destroy, expose, alter, disable and gain unauthorized access to make authorized changes in a system.

·Types of computer attack:-
i. Active attack
ii.Passive attack

Computer Network Attack active attack passive attack
i. Active attack :- An active attack attempts to alter system resources and
effect their operations.An active attack modifies the network bits when they
transmits.
                    
ii.Passive attack :- A passive attack is a network in which a system is
monitoring or sometimes scanned for port and vulnerabilities.the purpose is to
gain the information about the target and no data changed in the target.

Computer Network Attack active attack passive attack
·Types of the passive attack:-
1.  EavesDropping
2.  Password based attack
3.  Denial of service attack
4.  Compromised key attack
5.  Indentify spoofing
6.  Application layer attack

Computer Network Attack active attack passive attack
1. EaveDropping :- EavesDropping is an electronic attack where digital
communications are intercepted by an individual when they are not intended.

Eavesdropping is the act of intercepting between two points.
In the digital world eave stropping takes from sniffing of data that is called eave
stropping.
A specified program is used to sniff and record packets of data communications
from a network and then subsequently listen or read.

2. Password based attack :- Most of the existing cyber attack is password
based attack.
An initiative approach of password based attack is to get password access and
them change or delete network configuration and get secured data and pass it
over other channels.

3.Denial of service attack :- This is used a network or machine to unavoidable
the users who access them on network or computer.
The main motive of thius attack is to stops the services or access on those
networks.

The hackers are using this attack is like a big weapons and stops access all the
services to users and unavailable which connected to internet. In Dos attack the
network or machine was overloaded that’s why users should not access on the
network.
To unavailable machine or network in Dos attack it needs only one computer
and one internet connection.

DDos :- DDos is the detailed way of dos.It stands for distributed denial of
service but needs more the one or multiply computer and internet connection to
unavailable machine or computer to user.

Computer Network Attack active attack passive attack
4. Compromised key attack :- In a compromised key attack the attacker gets
the secret codes which is called the compromised key,usec to validate the secret
data.
Attacker transmits the secret information to server to decry, change or delete
secret information.
The attacker can get also access to other sensitive data and secure information
by using various permutation and combinations keys.

5. Indentify spoofing :- The attacker gains unauthorized access to the network
or system by utilizing the IP address.
In order to get privileges the attacker sends the various IP packets to the
hackled system and then the attacker can modify, remove, delete the
information.
This type of attacks corrupts the transmission of data streams and attacker can
damage the other associated system within of outside the network by using
hacked IP address.

Computer Network Attack active attack passive attack
6. Application layer Attacks :- These type of attacks deliberately attacks the
servers operating system and applications.
Once the system damaged has occurred the attacker should by pass the access
control and then easily get the control over the servers applications, system,
data, and other associates.

static ip public ip private ip dynamic ip

static ip public ip private ip dynamic ip

static IP public IP private IP dynamic IP

" An IP address refers to Internet Protocol address which uniquely identifies your device in a digital virtual world like internet ".
static ip public ip private ip dynamic ip
Public IP: As its name suggests Public IP address is a unique IP address that is assigned uniquely to a dedicated device and can be accessed Globally like the internet.
  • A public IP is accessible on the internet and may one can access your device in the world.
  • It is called the external IP address.
  • Any traffic that originates and sends to your device can harm your computer.
  • A public IP can access WAN.
  • A public IP is reachable by anyone on the internet.
  • Classes A, B, C are assigned for public IP.
static ip public ip private ip dynamic ip
Private IP: An Private IP address is remains private from internet.
No one can access your Private IP address on the internet.
Generally, Private IP addresses are used by Organizations to provide private IP to their network operators.
A Private Network can contain only one Public IP address.
Private IP addresses are provided by network devices like routers.
A private IP address is created by network providers.
Below mentioned are the series of private IP addresses reserved by the IANA: Internet Assigned Numbers Authority.
1) 10.0.0.0      to 10.255.255.255
2) 192.168.1.1 to 192.168.255.255
3) 172.16.1.1.  to 172.16.255.255
  • A private IP address is a freeware and can not routable or could not connect to the internet.
  • A private IP address is not accessible on the internet or anyone or any other device can access them into its own network.
  • A private IP is an assignment used for private networks.
  • It is also called a network IP address.
  • A private IP is access to LAN.
  • A private IP is connected through a VPN that protects our network through malware and traffic.
static ip public ip private ip dynamic ip
Static IP : Its called static IP address cause it never changes after assigned.
Static IP address is configured manually by using DHCP(Dynamic Host Configuration Protocol).
Public IP is a computer device unique IP and Private IP is network IP which can be accessed online so at the condition, we need and constant which never changes to access online.
Static IP is used to access the computers online via the internet by using different areas like VPNs.

  • A static IP address is mainly assigned by an administrator.
  • It is configured and assigned manually.
  • When a computer assigned static IP, it cannot change.
  • It was always the same on each network.
  • A static IP is reserved for a device like phone no is reserved for a cell phone.
static ip public ip private ip dynamic ip

what is intrusion detection system and its types

what is intrusion detection system and its types

what is an intrusion detection system and its types

The intrusion detection system is software that detects an attack on a network or computer system.
 
    "An Intrusion Detection system(IDS) is a system that monitors network traffic for  suspicious activity and issues alerts when such activity is discovered "


· IDS is security software that is used in computer and network to protects from unwanted and unauthorized access.
· It secures the system from hacker, attacker and from other doing errors attacks.
· As its name relies on it detects harmful intrusions in the network when an intrusion is detected it deters them.
· IDS is used to detect malicious traffic from different techniques.

what are the intrusion detection system and its types
Types of IDS:
1.  Host-based IDS
2.  Network-based IDS
3.  Application-based IDS

what are the intrusion detection system and its types
1. HIDS:- Host Intrusion Detection System.

A system that monitors important operating system files is an example of HIDS.
· HIDS is setup to detect illegal action within the host.
· HIDS is installed in host. It detects only those traffic which creates in  host or transmits over host.
· If any malicious activity occurs. So it detects in only those host.

what is intrusion detection system and its types
2. NIDS:- Network Intrusion Detection System.

       A network NIDS is designed to support multiple host.

· NIDS analyzes all the hosts which was present on those network.
· It detects all the malicious traffic on a network.
· NIDS monitored the whole network.
· NIDS is a system that analyzes incoming network traffic is an example of NIDS.

what is intrusion detection system and its types
3. Application-based IDS :-

AIDS are a special subset of host based TDS that analyzes the events transpiring within a software application.

· The most common information sources used by application based IDS are the application log files..

virus worm trojan malware spyware

virus worm trojan malware spyware

virus worms trojans malware spyware

Virus:- computer Virus is a type of a malicious software program(“malware”)
that when executed, replicates by reproducing itself copying its own source code or infecting other computer programs by modifying them. The terms “virus” is also commonly but erroneously used to refer to other types of malware.

1.  Virus:-vital information resource under seiged.

A computer virus is a computer program that can replicate itself and spread from one computer to another without your knowledge and runs against your wish.

All computer viruses are man-made. They insert themselves into the host program and propagate when the infected program gets executed.
A computer virus is a program that can damage your computer.

2. Worm:- Computer Worm is a standalone malware computer program that replicates itself in order to spread to other
computers and infect other programs and make copies of it.
A worm is a self-replicating virus that does not alter files but resides in active memory and duplicates itself.

It has the capability to infect and run without any human action.

3. Trojan horse:- The program that act like something useful but to the things that are quiet dumping.The program of this kind is called as Trojan.
The objective of a Trojan is to apper as a piece of useful software that has a hidden function.
Typically to gain access to the resource on the infected system.
Many Trojans will install back-door software on the infected system allowing the designer of the Trojan to be able to connect to and access the infected system.

Trojans comes in two parts, a client part and a server part.

4.  Malware:- Malware, short for malicious software is any software used to disrupt computer or mobile operations, gather sensitive information, gain access to private computer systems, or display unwanted advertising.

The first category of malware propagation concerns parasitic software fragments that attach, themselves to same existing executable content.The fragment may be machine code that infects some existing application.

5. Spyware :- Spyware is a software that enables a user to obtain covert information about another’s computer activities by transmitting data covertly from their hard drive.

computer network security cyber crime and cyber laws

computer network security cyber crime and cyber laws

computer network security cyber crime and cyber laws

 Network Security refers to the protection of network and their services from unauthorized modifications, disclosure, intrusion and the provision of assurance that the network should performs it critical functions correctly and there was no harmful effect.

Network security is the protection of unauthorized aqccess to files, directories in a computer network against misuse. Hacking and unauthorized changes to the system.

An example of network security is antivirus.
Protection of computer in a network from unwanted intrusions by firewall and antivirus is network security.

computer network security cyber crime and cyber laws

Cyber Crime

 Cyber crime is the use of computer or network by an illegal activites such as spreading computer viruses , online bullying , unauthorized access, unauthorised fund transfer etc.Most of the cyber crimes done through by intyernet but some are done through by sms and online chatting.

· Cyber crimes are commited by individuals or group of individuals by criminal motive intentionally harmed the victims deputation, harms victims physically or mentally or directly or indirectly using telephone, telecommunication, E-mails etc.

·  We can categories the cyber crime in following ways:-

1.The computer as target :- Using the computer to attack to the computers or network such virus/worms attack, hacking, dos attack etc.

2.Using computer as weapons :- Using a computer to commit real crime such as cyber terrisms, unauthuerised fund transfer, credit card fraud, promo graphy etc.

3.Unauthorized access or hacking :- Access means gaining entry into instructing or communicating or arithmeatical or logical and memory fuction resources of a computer or computer network.hackers write or used ready made programs to attack the programs.Cyber crimes are regulated by cyber laws or internet laws in india.

computer network security cyber crime and cyber laws

Cyber Laws

Cyber crimes can involves criminal activities that are traditional in nature.
Laws such as theft, fraud, forgery and mischief that all are subjected in Indian panel court.so the government of indianeeds of an act that can relevant cyber laws and regulates internet in india.

computer network security cyber crime and cyber laws
  • IT act 2000 :- In 17 may 2000 both the houses of Indian parliament passed the information technology bill that knowsn as IT act 2000.
  • The main goal of this bill is to provide the legal in frastructure for e-commerce in india.
  • The informationtechnogy bill provides the another goal is to provides the legal frameworks.
  • It is the use of legal issue of communication in india.
  • The IT act is known as cyber laws in which the cyber crimes have been decleard in panel with imprisionment and fine.
  • If the crime is decleared it may be the imprisionment or fine of 5 lacs rupees or both.

Firewall and its types in computer network

Firewall and its types in computer network

In computer Network ,a Firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.A firewall typically establishes a barrier between a trusted internal network and untrusted network such as Internet.

1.Firewall is a system or device which protects network.
2.Firewall stops unauthorized access to unauthorized users and protects network to stops dangerous malicious attacks.
3.Firewall may be hardware or software both.
4.Firewall acts like a filter in our network which stops harmful information.
5.Firewall can be establish between private network and internet.And the dta which was transmits between firewall.
6.It acts like a wall which protects network from unsafe or harmful data on network.
7.Firewall can transmits only those are as policies of firewall.
8.Firewall acts like a barrier.
By which hacker can not hacks the network.
By which our all information is protects.


Firewall and its types in computer network
·Types of firewall:-

1.Packet filter firewall:-
a)  It works on the network layer of OSI model.
b)  It analyzes the packets which goes in and goes out from firewall.
c)  It verifies each packets and them take decision to be send or not.
d)  It protect LAN.
e)  It can sends only those packets which was as its policies.

 i. Stateless packet filter:-This firewall does not required information about packets.

ii. Stateful packet filter:-
1.  It required info about packets.
2.  This type of firewall also called dynamic firewall.
3.  It provides more Protection.

Firewall and its types in computer network
2. Application level gateway firewall :-
i.  This is also called application proxy.
ii. This firewall sends packets on the info about applications or stops.
iii.This info of application is present in packets.
iv.This firewall is a proxy server which provides application to proxy.

Firewall and its types in computer network    
3.Circuit level gateway firewall :-
i.  It works on the session layer of OSI model.
ii. It provide security to TCP and UDP.
iii.It analyzes each packet in TCP and UDP and takes action on the bases of firewall policies.

user datagram protocol in computer networks Its advantage and disadvantage tcp vs udp

user datagram protocol in computer networks

The full name of UDP is the User Datagram Protocol.
This protocol was designed by David P Reed in 1980. It has been defined in RFC 768.
This is a simple transport layer communication protocol. This is a connection-less protocol, which means when a data transfer occurs, then this protocol does not establish connection between sender and receiver.

In UDP the receiver does not generate any acknowledgment to receive data, send and send the data. It transmits data directly. In this, the use of the communication mechanism is very less. UDP can be called an unreliable protocol but it uses ip services which provides the best delivery mechanism.
In the user datagram protocol, data packet is called datagram. UDP does not guarantee that your data will reach your destination. This data can also be reached in less quantity (i.e. some data packets may also be destroyed in the middle of the transmission.)
It is also not necessary that the data will reach the receiver till the sequence in which we have sent the data. This data segment is not sent back (i.e., it does not transmit deleted data packets again)
The dp protocol is used to transfer such data where we require more speed than the accuracy and reliability because it provides faster service than TCP.

user datagram protocol in computer networks
NEESSITY OF UDP (Why it's needed?)
  • The udp protocol is used to transfer such data where we require more speed than the accuracy and reliability because it provides faster service than TCP.
  • If the data flow is in the same direction then it can be used.
  • It can be used for streaming applications.
  • This is a connection-less protocol.

user datagram protocol in computer networks
It has four parameters
Source Port - Its size is 16 bit. It is used to identify the source port of data.
Destination Port - its size is 16 bit. It is used to identify destination port of data.
Length - This defines the length of the datagram. It stores the length of the data and header.
Checksum- This field stores the checksum value that is generated by sender before sending it.

user datagram protocol in computer networks
Difference between UDP and TCP
TCP vs UDP
Its full name is Transmission Control Protocol
Its full name is the User Datagram Protocol.

This is a connection oriented protocol and the device communicating in it has to establish connection before communication, and later it has to be maintained and terminated.
UDP is a connection-less protocol. And the device communicating in it does not have to establish, maintain, and terminate connection.

Its speed is slow.
Its speed is very fast.

This is reliable.
Very unreliable (incredible).

Its header size is 20 bytes.
Its header size is 8 bytes.

It takes the acknowledgment of data and transmits lost data.
Takes no acknowledgment and does not send missing data again.

It uses 3-way handshake to set up connection.
It does not use any handshake.

It uses error-detection and error-correction methods.
errors are not checked and detected, it discards (corrupted) the corrupted packet directly.

The congestion is controlled in it.
There is no flow control or congestion control.

There is a sequence number of each byte in it.
Byte does not have a sequence.

The following protocols are needed for TCP: - HTTP, FTP, SMTP, Telnet etc.

It requires these protocols.
DNS, DHCP, SNMP, VOIP, RIP etc.

user datagram protocol in computer networks
Disadvantages of UDP: -
  1. Through this we can broadcast and multicast transmission.
  2. It is fast with TCP.
  3. It uses small size packets with small header (8 byte). By which it takes less time to process packets and the use of memory is less.
  4. It does not need to establish and maintain connections.
  5. There is no acceptance in it, it also increases the speed.
  6. UDP is used whenever you want to transmit a data packet.
user datagram protocol in computer networks
Disadvantages of UDP
  1. This is unreliable transport protocol.
  2. There is no such function in it, to know that the data has been received.
  3. Do not control congestion too.
  4. error recovery only sees the application layer.