network security

1. By
Name: M.Nivedhini
Class: II Msc., Computer Science
Batch: 2017-2019
Incharge staff:Ms.M.Florence Dayana

4. BASTION HOST:
A bastion host is a gateway between an inside network and an ouside network.
It is designed to protect against attacks aimed at the inside network.
It is a system identified by the firewall administrator as a critical strong point
in the network security.
A bastion host is a specialized computer that is deliberately
exposed on a public network.
It sits between two networks (i.e)one is trusted and another one is untrusted.
Regulates traffic between those networks.

6. ACCESS CONTROL:
Access Control are the rules written out that determine whether
network access should be granted or rejected to specific IP addresses.
Access control identify the system user.
The basic elements of access control are:
Subject: An entity (typically a process) capable of accessing objects.
Object: Anything to which access is controlled.

7. Bell-La Padula (BLP) is a MAC policy for protecting secrets.
Bell-La padula Rules:
Simple Security Property: S can read O if l(S)≥l(O).
Star Property: S can write O if l(O)≥l(S).

8. Another widely applicable requirement is to protect data or resources on
the basis of levels of security is the trusted computer systems.
This is commonly found in millitary where information are classified as
unclassified (U)
 confidential (C)
secret (S)
 top secret (TS)
This is also known as multilevel security.

9. Common Criteria is a framework in which computer system users
can specify their security functional and assurance requirement.
The CC defines a common set of potential security
requirements for use in evaluation.
The term target of evaluation (TOE) refers to that part of the
product or system that is subject to evaluation.
Common Criteria specifies standards for
Evaluation Criteria.
Methodology for Application of Criteria.
Administrative Procedures for Evaluation.
 Certification and Accreditation Schemes.

10. COMMON CRITERIA REQUIREMENTS:
There are two requirements in Common Criteria:
Functional Requirements:
security audit
crypto support
communications
user data protection
identification & authentication
 security management
privacy
Protection
trusted path
Assurance Requirements:
configuration management
delivery & operation
Development
guidance document
life cycle support

12. PROTECTION PROFILES (PPs):
It define an implementation-independent reusable set of security
requirements and objectives for a category of products or systems.
 That meet similar consumer needs for IT security, reflecting user security
requirements.
 SECURITY TARGETS (STs):
It contain the IT security objectives and requirements of a specific
identified TOE.
Defines the functional and assurance measures offered by that TOE to meet
stated requirements, and forms the basis for an evaluation.