This post provides resources to security aspects of domain network system (DNS). This post assumes that you already know how a DNS works. You can read an introduction to DNS on this post. Security Controls for DNS Security controls specific…
This post is an introduction to computer networks. Computer Network Devices Computer network devices includes switch, routers or firewalls. You can read this post about computer network devices. Area Networks Examples of area networks are WAN or LAN. You can…
A software-defined network (SDN) is an approach to network management that enables dynamic and programmatically network configuration. This is a contrast with traditional networks, where the network is defined by using hardware components. An SDN looks like a single logical…
A proxy server is a variation of an application-level firewall or circuit-level firewall. It is a server application that acts as an intermediary between a client requesting a resource and the server providing that resource. Possible proxy features: Proxy Server…
Extensive Authentication Protocol (EAP) is an authentication framework, not an actual protocol like PAP or CHAP. EAP allows customized authentication security solutions, such as supporting smartcards, tokens, and biometrics. EAP is often used in network communication protocols, such as those…
This post features computer network authentication protocols. Do not confuse the authentication protocols with the Authentication, Authorization and Accountability (AAA) protocols like RADIUS or TACACS+. Authentication protocols works in the OSI layers 2 and 3, and AAA protocols in layer…
This post summarizes some aspects of information security on computer networks. Network Security Controls Security Gateway Security gateway is a broad term to refer to a network edge security device. Firewall Firewall is a control. Proxy servers are a type…
This post summarizes Authentication, Authorization and Accountability (AAA) protocols or AAA network protocols. Do not confuse the AAA protocols with the authentication protocols like EAP, CHAP and PAP. Authentication protocols works in the OSI layers 2 and 3, and AAA…
Identity and Access Management (IAM) is one of the basics of information security. Concepts related to Authentication Continuous authentication Monitors user behavior continuously to ensure that the authenticated user remains the same throughout a session. Risk-based authentication analyzes user behavior…
Network Access Control (NAC) is a security solution that enforces policy on devices that access networks to increase network visibility and reduce risk. NAC’s posturing capability determines if a system is sufficiently secure and compliant enough to connect to a…