Internetworking: integrating IP/ATM LAN/WAN security
Dennis, Ronald M.
MetadataShow full item record
Computer and network security is a complex problem that is not solely restricted to classified computer systems and networks. Accelerating trends in networking and the emphasis on open interoperable networks has left many unclassified systems vulnerable to a wide variety of attacks. Computer and network professionals must understand the scope of security, recognize the need for security even in unclassified systems, and then take appropriate action to protect their systems. Transmission of static passwords in plaintext over the Internet is one of the most widely publicized network vulnerabilities. Cue-time password mechanisms (such as S-Key) or other secure network access mechanisms (such as Kerberos) have been recommended to improve access security for computer systems connected to the Internet. This thesis examines many of the issues that must be addressed when assessing the need for computer and network security. This work provides the results of a site security survey for the unclassified IP/ATM LAN in the Systems Technology Lab (STL) at the Naval Postgraduate School (NPS). These results highlight new security vulnerabilities and strengths that occur when standard Internet Protocol (P) local-area networks (LANs) are internetworked with Asynchronous Transfer Mode (ATM) wide-area networks (WANs). Finally, we examine the feasibility of using the Kerberos authentication protocol for remote plaintext password protection and provide recommendations for additional work
Approved for public release; distribution is unlimited
Showing items related by title, author, creator and subject.
Schively, Jody L. (Monterey, California. Naval Postgraduate School, 1994-09);As the Naval Postgraduate School's (NPS) computer network continues to incorporate computers with a wide variety of security holes, it is vital that an Internet firewall be installed to provide perimeter security for NPS ...
Falby, Naomi; Thompson, Michael F.; Irvine, Cynthia E. (IEEE, 2004-06-00);The Center for the Information Systems Studies and Research (CISR) at the Naval Postgraduate School has established a broad program in computer and network security education. The program, founded on a core in traditional ...
Kremer, H. Steven (Monterey, California: Naval Postgraduate School, 1999-09);A Navy directive orders the migration of Navy computer systems to an Internet-connected network of Windows NT workstations and servers. Windows NT possesses the security features of a class C2 computer system but does not ...