Please provide answer for the below question

kiran23
OriginalityReport.pdf

8/2/2019 Originality Report

https://blackboard.nec.edu/webapps/mdb-sa-BB5b75a0e7334a9/originalityReport/ultra?attemptId=6e7dce18-dfe2-4c9e-9650-0b442ed4352a&course_… 1/3

%60

%11

%2

SafeAssign Originality Report Network Security - 201931 - CRN188 - Kotaprolu • Week 12 Assignment Submission

%73Total Score: High riskKranthi Kiran Kumar Gummula Submission UUID: e1d6fc91-5420-b456-7105-da09b95d6435

Total Number of Reports

1 Highest Match

73 % WEEK12DISCUSSIONS.docx

Average Match

73 % Submitted on

08/02/19 12:26 PM EDT

Average Word Count

595 Highest: WEEK12DISCUSSIONS.docx

%73Attachment 1

Institutional database (5)

Student paper Student paper Student paper

Student paper Student paper

Internet (2)

uqu slideplayer

Global database (1)

Student paper

Top sources (3)

Excluded sources (0)

View Originality Report - Old Design

Word Count: 595 WEEK12DISCUSSIONS.docx

1 5 7

6 2

8 3

4

1 Student paper 5 Student paper 7 Student paper

8/2/2019 Originality Report

https://blackboard.nec.edu/webapps/mdb-sa-BB5b75a0e7334a9/originalityReport/ultra?attemptId=6e7dce18-dfe2-4c9e-9650-0b442ed4352a&course_… 2/3

Source Matches (16)

Student paper 69%

Student paper 86%

slideplayer 78%

Student paper 78%

Student paper 84%

Student paper 67%

12.1 Firewall has three goals namely; Any traffic going in the system or outside the system must pass through the firewall

Only local security authorized traffic will be allowed to pass through the firewall

Internal threats are often set aside since firewall provides alert of any possible malware alert. 12.2 Firewalls apply four techniques to control access and enforce

security policies. These techniques are; · Service control this determines the type of service allowed to access from the network · Direction control this determines the exact direction within which requests over the network are allowed to flow in the firewall. · User control controls the service in which a user is trying to access. ·

Behavior control this controls the use of particular services over the firewall.

12.3 Typical packet filtering firewall uses the following information · Source and destination IP address. · Source and destination level transport address · IP

protocol field · Interface. 12.4 Packet filtering firewall has various weaknesses some of which include: · They cannot prevent attacks that utilize application specific vulnerabilities · Their logging in functionality is limited · They are open to attacks which take advantage of problems associated with TCP/IP specification and protocol stack. · They are susceptible to security breaches caused by improper configuration

12.5 A stateful inspection firewall takes a higher layer context into consideration tightening up the rules for TCP connection a packet filter will therefore allow

incoming traffic only for those packets which fit the profile of one of the entries in this directory. A stateful inspection firewall will again review the same packet

information as packet filtering firewall but also records the information about TCP connections.

12.6 Application level gateway acts as relay of application level traffic. In this the user contacts the gateway which prompts the user for the name of the remote

host to be accessed. After getting the name the gateway contacts the application on the remote host and relays the TCP segments containing the application

data between the two endpoints.

12.7 Circuit level gateway does not allow end to end TCP connections but instead the gateway sets up two TCP connections one between itself and the inner host

and one between itself and the outside host relaying the segments without confirming or counters checking their details.

12.8 The following are the common characteristics of a bastion host · Only the services considered to be essential by the network administrator are installed in the bastion host. · Bastion host may require authentication before any user is allowed to access the proxy services. · Each proxy is configured to allow access only to

specific host systems. · Each proxy logs all traffic, each connection and its duration. · Each proxy is independent of other proxies in the bastion host and runs in a private secured directory (Thubert, Yang, Klecka III, Wetterwald, & Levy-Abegnoli 2017). 12.9. Host based firewall refers to a software designed to secure

individual host. This software is characterized with the following benefits · Individuals are able to tailor filtering rules to the host environment. · It provides protection independently from each topology · It provides an additional protection layer.

12.10 This refers to network inside the external firewall but outside the internal firewall whereby the external firewall basically provides basic protection to the

DMZ network. This type of network is found in systems such as web servers, the email application systems and the DNS servers.

12.11 External firewalls provides a measure of access control and protection for the DMZ systems while internal firewalls provide strict filtering rules in order to protect enterprise servers from external attackers

1 2

3

1

4

5 6

7

8

1

7

1

5

1

1

5

1

Student paper

12.1 Firewall has three goals namely;

Original source

· 12.1 List three design goals for a firewall

2

Student paper

Any traffic going in the system or outside the system must pass through the firewall

Original source

Any traffic going outside the system and moving into the system must pass through the firewall

3

Student paper

Only local security authorized traffic will be allowed to pass through the firewall

Original source

Only authorized traffic (defined by the local security policy) will be allowed to pass

1

Student paper

12.2 Firewalls apply four techniques to control access and enforce security policies.

Original source

· 12.2 List four techniques used by firewalls to control access and enforce a security policy

4

Student paper

· User control controls the service in which a user is trying to access.

Original source

User control controls which user is allowed to access the service

5

Student paper

12.3 Typical packet filtering firewall uses the following information · Source and destination IP address.

Original source

Typical packet filtering firewall determines the Source and destination IP address and transport-level address

8/2/2019 Originality Report

https://blackboard.nec.edu/webapps/mdb-sa-BB5b75a0e7334a9/originalityReport/ultra?attemptId=6e7dce18-dfe2-4c9e-9650-0b442ed4352a&course_… 3/3

Student paper 79%

Student paper 91%

uqu 68%

Student paper 90%

Student paper 82%

Student paper 84%

Student paper 64%

Student paper 92%

Student paper 74%

Student paper 65%

6

Student paper

· Source and destination level transport address · IP protocol field · Interface. 12.4 Packet filtering firewall has various weaknesses some of which include:

Original source

+ Source and destination IP address + Source and destination transport-level address + IP protocol field + Interface 12.4 What are some weaknesses of a packet filtering firewall

7

Student paper

· They are susceptible to security breaches caused by improper configuration

Original source

Susceptible security breaches caused by improper configuration

8

Student paper

12.5 A stateful inspection firewall takes a higher layer context into consideration tightening up the rules for TCP connection a packet filter will therefore allow incoming traffic only for those packets which fit the profile of one of the entries in this directory.

Original source

A stateful inspection packet filter tightens up the rules for TCP traffic by creating a directory of outbound TCP connections, and will allow incoming traffic to high- numbered ports only for those packets that fit the profile of one of the entries in this directory

1

Student paper

A stateful inspection firewall will again review the same packet information as packet filtering firewall but also records the information about TCP connections.

Original source

A stateful inspection firewall reviews the same packet information as a packet filtering firewall, but also records information about TCP connections

7

Student paper

12.6 Application level gateway acts as relay of application level traffic. In this the user contacts the gateway which prompts the user for the name of the remote host to be accessed.

Original source

12.6 Application level gateway behaves as a application level traffic relay First, the user contacts the gateway, the gateway asks name of the remote host to be accessed to the user

1

Student paper

After getting the name the gateway contacts the application on the remote host and relays the TCP segments containing the application data between the two endpoints.

Original source

When the user responds, the gateway then contacts the application on the remote host and relays TCP segments containing the application data between the two endpoints

5

Student paper

12.7 Circuit level gateway does not allow end to end TCP connections but instead the gateway sets up two TCP connections one between itself and the inner host and one between itself and the outside host relaying the segments without confirming or counters checking their details.

Original source

A circuit-level gateway involves sets up of two TCP connections, one between itself and an inner host and the other between itself and outside the host

1

Student paper

· Bastion host may require authentication before any user is allowed to access the proxy services. · Each proxy is configured to allow access only to specific host systems. · Each proxy logs all traffic, each connection and its duration. · Each proxy is independent of other proxies in the bastion host and runs in a private secured directory (Thubert, Yang, Klecka III, Wetterwald, & Levy-Abegnoli 2017).

Original source

The bastion host may require authentication before a user is allowed to access to the proxy services Each proxy is configured to allow access to only specific host systems Each proxy logs all traffic, each connection and its duration Each proxy is independent of other proxies on the bastion host and runs in a private secured directory

1

Student paper

Host based firewall refers to a software designed to secure individual host.

Original source

· A host-based firewall is a software module used to secure and individual host

5

Student paper

12.10 This refers to network inside the external firewall but outside the internal firewall whereby the external firewall basically provides basic protection to the DMZ network.

Original source

DMZ network is the network inside the external firewall, but outside the internal firewall