Chapter 17

AH

Authentication Header - An option within IPsec to provide authentication and integrity. This will ensure that the IP packet hasn't been tampered with

DNSSEC

Domain Name System Security Extensions - A suite of extensions to DNS (Domain Name System) designed to add an additional layer of security to the domain name lookup process. DNSSEC addresses certain vulnerabilities in the traditional DNS that could be exploited to conduct various attacks, such as DNS spoofing or cache poisoning.

ESP

Encapsulated Security Payload - An option within IPsec to provide confidentiality, integrity, and authentication. This option of IPSec allows the packet to be encrypted.

FTP

File Transfer Protocol - Port 20 & 21 - Allows the transfer of files between users on a network

FTPS

File Transfer Protocol Secure. An extension of FTP that uses SSL or TLS to encrypt FTP traffic. Some implementations of FTPS use ports 989 and 990.

HTTPS

Hypertext Transfer Protocol Secure - Port 443 - Allows for users to connect to web servers securely

Tunnel mode (IPSec)

IPsec Tunnel mode enables hosts behind one of the gateways to communicate securely with hosts behind the other gateway

Transport mode

In IPSec, an encryption method in which only a packet's IP data is encrypted, not the IP headers themselves; this method allows intermediate nodes to read the source and destination addresses.

IMAP

Internet Message Access Protocol - Port 143 - A protocol used for accessing and managing email messages on a mail server. It is one of the most commonly used email retrieval protocols and is designed to allow users to view and manipulate their email messages while the messages are still stored on the mail server.

IPSec

Internet Protocol security - A secure network protocol suite that authenticates and encrypts packets of data to provide secure encrypted communication between two computers over an Internet Protocol network.

LDAP

Lightweight Directory Access Protocol on Port 389 - A protocol used to access and manage directory information services. It is an application layer protocol that facilitates the communication between client applications and directory servers. LDAP is commonly used for accessing and maintaining distributed directory information services over an IP network. Directory information manages information about various entities in a network, such as users, devices, applications, and other resources.

POP

Post Office Protocol - Port 110 - A protocol used for retrieving email messages from a mail server to a user's email client.

SFTP

Secure File Transfer Protocol - Port An extension of Secure Shell (SSH) using SSH to transmit the files in an encrypted format. SFTP transmits data using TCP

SRTP

Secure Real-time Transport Protocol. A protocol used to encrypt and provide authentication for Real-time Transport Protocol (RTP) traffic. RTP is used for audio/video streaming.

SSH

Secure Shell - Port 22 A network communication protocol that enables two computers or devices to communicate and share data.

S/MIME

Secure/Multipurpose Internet Mail Extensions - A widely used standard for securing email messages.

SNMP

Simple Network Management Protocol - Port 161/162 - An internet standard protocol used to monitor and manage network devices connected over an IP. SNMP is used for communication between routers, switches, firewalls, load balancers, servers, CCTV cameras, and wireless devices.