Internet security is a subdivision of computer security, as the name suggests it is specifically linked to the Internet. Its main role is to set up regulations and preventive methods to protect the Internet. Due to the openness of the internet, it is an unprotected platform for interchanging of information. Hence, it is a serious issue as there is a high risk for leaking of confidential information and phishing. Although some may not see it as important, it is still essential to protect your computer. This is especially so if you do not protect your computer, it may be a device for others (likely hackers) to make use of it and might even end up framing you as the hacker! Therefore, on normal occasions, there is a need for you to run security software.
Being quite a noob at internet security, the only one I have heard of and using now, is firewall.
So what is the function of the Firewall?
- controls access between networks
- components: gateways and filters which is different from one firewall to another.
- screen network traffic
- has the ability to block traffic that seems dangerous.
- the intermediate server between SMTP and HTTP connections.
The Role of Firewall in Internet Security and Web Security
Firewalls act as gatekeepers for incoming and outgoing packets to and from private networks. Regardless of the directions of the traffic, all must go through the firewall, and only the authorized traffic is approved and able to pass through the firewall. In addition, firewall creates checkpoints (aka choke points) between an internal private network and the public Internet, based on IP source and TCP port number. They can also serve as the platform for IPsec. Using tunnel mode capability, firewall can be used to implement VPNs. Firewalls can also control the amount of information leaked out by the internal network system and information from the public Internet.
There are 3 different types of Firewalls (According to Wiki)
1) Packet filters
Packet filters process network traffic on a packet-by-packet basis (hence the name). Theie main objective is to sift through the internet traffic from am isolated IP host, so a router is required to link the internal network to the internet. This router is known as a screening router, which will go through the packets that is incoming and outgoing.
2) Circuit-level gateways
The circuit-level gateway is a proxy server that inactively defines what traffic will be approved and works at the network level of an OSI model. Circuit proxies always send packets containing a given port number, provided the port number is permitted by the rules set .The main advantage of a proxy server is that it is capable of providing Network Address Translation (NAT), which can conceal the user's IP address from the Internet. This is effective in preventing the leak of internal information.
3) Application-level gateways
An application-level gateway is a proxy server working at the TCP/IP application level. Only when a linkage is made using a recognized protocol, then is a packet forwarded. Application-level gateways are well-known for evaluating the entire messages rather than individual packets of data, in regard to the direction go flow.
Enough of technical terms, take a look at this video :)
No comments:
Post a Comment