Research Paper: Information Security Technologies
Research Paper: Information Security Technologies
by Benjamin Tomhave
November 10, 2004
Prepared for: Professor Dave Carothers
EMSE 218 The George Washington University
This paper or presentation is my own work. Any assistance I received in its preparation is acknowledged within the paper or presentation, in accordance with academic practice. If I used data, ideas, words, diagrams, pictures, or other information from any source, I have cited the sources fully and completely in footnotes and bibliography entries. This includes sources which I have quoted or paraphrased. Furthermore, I certify that this paper or presentation was prepared by me specifically for this class and has not been submitted, in whole or in part, to any other class in this University or elsewhere, or used for any purpose other than satisfying the requirements of this class, except that I am allowed to submit the paper or presentation to a professional publication, peer reviewed journal, or professional conference. In adding my name following the word 'Signature', I intend that this certification will have the same authority and authenticity as a document executed with my hand-written signature.
Signature _____Benjamin L. Tomhave________________________
Benjamin L. Tomhave
12/7/2004 1
Research Paper: Information Security Technologies
by
Benjamin L. Tomhave
Abstract
The following research paper provides analysis of thirteen (13) information security technology topics, arranged in ten (10) groups, that are either commonly found or emerging within the information security industry. These topics include: Access Control Management, Antivirus, Audit Data Reduction, Firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Anomaly Detection Systems (ADS), Event Correlation Systems (ECS), Network Mapping, Password Cracking, Public Key Infrastructure, Virtual Private Network, and Vulnerability Scanning Systems. IDS, IPS, ADS and ECS are grouped together under one common heading (Intrusion Detection and Analysis Systems) due to their commonality and interdependence. This paper provides basic overview information about each technology, but primarily focuses on analyzing each technology within the modern information security and business context, looking at how it meets business needs while addressing Confidentiality, Integrity and Availability
as a Countermeasure that Detects, Corrects and/or Protects.
Benjamin L. Tomhave
12/7/2004 2
Table of Contents
I.INTRODUCTION AND OVERVIEW OF APPROACH................................................. 4 II.ACCESS CONTROL MANAGEMENT......................................................................... 5
A.Business Analysis.........................................................................................................5 B.Security Analysis..........................................................................................................7 III.ANTIVIRUS................................................................................................................... 9 A.Business Analysis.......................................................................................................11 B.Security Analysis........................................................................................................11 IV.AUDIT DATA REDUCTION...................................................................................... 13 A.Business Analysis.......................................................................................................13 B.Security Analysis........................................................................................................14 V.FIREWALLS ............................................................................................................. 15 A.Business Analysis.......................................................................................................17 B.Security Analysis........................................................................................................17 VI.INTRUSION DETECTION AND ANALYSIS SYSTEMS........................................ 18 A.Intrusion Detection Systems (IDS) ............................................................................19
1.Business Analysis................................................................................................... 21 2.Security Analysis.................................................................................................... 22 B.Intrusion Prevention Systems (IPS)............................................................................23 1.Business Analysis................................................................................................... 24 2.Security Analysis.................................................................................................... 25 C.Event Correlation Systems (ECS).............................................................................. 25 1.Business Analysis................................................................................................... 27 2.Security Analysis.................................................................................................... 27 D.Anomaly Detection Systems (ADS) ......................................................................... 27 1.Business Analysis................................................................................................... 29 2.Security Analysis.................................................................................................... 30 WORK MAPPING.............................................................................................. 30 A.Business Analysis.......................................................................................................31 B.Security Analysis........................................................................................................32 VIII.PASSWORD CRACKING........................................................................................ 33 A.Business Analysis.......................................................................................................35 B.Security Analysis........................................................................................................36 IX.PUBLIC KEY INFRASTRUCTURE........................................................................... 36 A.Business Analysis.......................................................................................................38 B.Security Analysis........................................................................................................40 X.VIRTUAL PRIVATE NETWORKS............................................................................. 41 A.Business Analysis.......................................................................................................43 B.Security Analysis........................................................................................................43 XI.VULNERABILITY SCANNING SYSTEMS.............................................................. 44 A.Business Analysis.......................................................................................................46 B.Security Analysis........................................................................................................46 REFERENCES.............................................................................................................. 48
Benjamin L. Tomhave
12/7/2004 3
Research Paper: Information Security Technologies
by Benjamin L. Tomhave
I.INTRODUCTION AND OVERVIEW OF APPROACH
This research paper introduces and analyzes ten (10) information security technologies. Each of the following sections focuses on a specific technology and adheres to the following general format:
o Technology Overview: A high-level introduction to the technology. o Business Analysis: An evaluation of the usefulness, cost, complexity, and utility
of the technology in the modern business environment. o Security Analysis: The security technology is weighed against the tenets of
Confidentiality, Integrity and Availability as well as evaluating its role as a countermeasure (detect, correct, protect).
The ten security technologies addressed in this paper are: 1. Access Control Management 2. Antivirus 3. Audit Data Reduction 4. Firewalls 5. Intrusion Detection and Analysis Systems 6. Network Mapping
Benjamin L. Tomhave
12/7/2004 4
7. Password Cracking 8. Public Key Infrastructure 9. Virtual Private Networks 10. Vulnerability Scanning Systems
II.ACCESS CONTROL MANAGEMENT
Access control management (ACM) systems pull together identity, authentication and authorization to restrict what resources a user may access and in what manner that access may occur (read, write, execute, modify, etc.). ACM solutions may be based on a number of security models, including Discretionary Access Control (DAC), Mandatory Access Control (MAC), and Role-Based Access Control (RBAC). A standard ACM provides an interface through which a user will self-identify, followed by a mechanism for challenging and confirming that identity, and then a method for granting rights, or access to information, based on the non-repudiated authentication of the user. Access control is at the heart of information security and is the fundamental premise upon which the industry is based1. Without access control management, there would no method through which to provide security for systems and data.
A.Business Analysis Access control management systems provide the foundation for information security within the business environment. Its usefulness is extensive, with the primary functions
1 Ben Rotchke, Access Control Systems & Methodology (New York: , 2004, accessed 06 November 2004); available from ; Internet.
Benjamin L. Tomhave
12/7/2004 5
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- master of information technology research thesis
- measuring the impact of information technology on value
- information and communications technology as a general
- research on the role of technology in teaching and
- research paper information security technologies
- how does information technology impact on business
- research in information technology
- information technology research imedpub
- 100 technology topics for research papers
- 2 information and communications technology ict
Related searches
- information technology research paper topics
- research paper on information technology
- navy information security website
- information security classification standards
- information security data classification
- information systems research paper topics
- dod introduction to information security answers
- introduction to information security cdse
- information security risk register
- introduction to information security stepp
- introduction to information security usalearning
- top information security risks