Internet security 1

Internet security
Internet security is a branch of computer security specifically related to the Internet. Its objective is to establish
rules and measure to use against attacks over the Internet.[1] The Internet represents an insecure channel for
exchanging information leading to a high risk of intrusion or fraud, such as phishing.[2] Different methods have been
used to protect the transfer of data, including encryption.

Types of security

Network layer security

TCP/IP can be made secure with the help of cryptographic methods and protocols that have been developed for
securing communications on the Internet. These protocols include SSL and TLS for web traffic, PGP for email, and
IPsec for the network layer security.

IPsec Protocol
This protocol is designed to protect communication in a secure manner using TCP/IP. This is a set of security
extensions developed by IETF and it provides security and authentication at the IP layer by using cryptography. To
protect the content, the data is transformed using encryption techniques. There are two main types of transformation
that form the basis of IPsec: the Authentication Header (AH) and Encapsulating Security Payload (ESP). These two
protocols provide data integrity, data origin authentication, and anti-reply service. These protocols can be used alone
or in combination to provide desired set of security services for the Internet Protocol (IP) layer.
The basic components of the IPsec security architecture are described in terms of the following functionalities:
• Security protocols for AH and ESP
• Security association for policy management and traffic processing
• Manual and automatic key management for the internet key exchange (IKE)
• Algorithms for authentication and encryption
The set of security services provided at the IP layer include access control, data origin integrity, protection against
replays, and confidentiality. The algorithm allows these sets to work independently without affecting other parts of
the implementation. The IPsec implementation is operated in a host or security gateway environment giving
protection to IP traffic.

Electronic mail security (E-mail)

Background
Email messages are composed, delivered, and stored is helpful in a multiple step process, which starts with the
message's composition. When the user finishes composing the message and sends it, the message is transformed into
a standard format: an RFC 2822 formatted message. Afterwards, the message can be transmitted. Using a network
connection, the mail client, referred to as a mail user agent (MUA), connects to a mail transfer agent (MTA)
operating on the mail server; the mail client then provides the sender’s identity to the server. Next, using the mail
server commands, the client sends the recipient list to the mail server; the client then supplies the message. Once the
mail server receives and processes the message, several events occur: recipient server identification, connection
establishment, and message transmission. Using Domain Name System (DNS) services, the sender’s mail server
determines the mail server(s) for the recipient(s). Then, the server opens up a connection(s) to the recipient mail
server(s) and sends the message employing a process similar to that used by the originating client, delivering the
message to the recipient(s).
Internet security 2

Pretty Good Privacy (PGP)

PGP provides confidentiality by encrypting messages to be transmitted or data files to be stored using an encryption
algorithm such 3DES or CAST-128. Email messages can be protected by using cryptography in various ways, such
as the following:
• Signing an email message to ensure its integrity and confirm the identity of its sender.
• Encrypting the body of an email message to ensure its confidentiality.
• Encrypting the communications between mail servers to protect the confidentiality of both the message body
and message header.
The first two methods, message signing and message body encryption, are often used together; however, encrypting
the transmissions between mail servers is typically used only when two organizations want to protect emails
regularly sent between each other. For example, the organizations could establish a virtual private network (VPN) to
encrypt the communications between their mail servers over the Internet.[3] Unlike methods that can only encrypt a
message body, a VPN can encrypt entire messages, including email header information such as senders, recipients,
and subjects. In some cases, organizations may need to protect header information. However, a VPN solution alone
cannot provide a message signing mechanism, nor can it provide protection for email messages along the entire route
from sender to recipient.

Multipurpose Internet Mail Extensions (MIME)

MIME transforms non-ASCII data at the sender's site to Network Virtual Terminal (NVT) ASCII data and delivers it
to client's Simple Mail Transfer Protocol (SMTP) to be sent through the internet.[4] The server SMTP at the
receiver's side receives the NVT ASCII data and delivers it to MIME to be transformed back to the original
non-ASCII data.
• Secure/Multipurpose Internet Mail Extensions (S/MIME)
S/MIME provides a consistent means to securely send and receive MIME data. S/MIME is not only limited to email
but can be used with any transport mechanism that carries MIME data, such Hypertext Transfer Protocol (HTTP).[5]

Firewalls
A firewall controls access between networks. It generally consists of gateways and filters which vary from one
firewall to another. Firewalls also screen network traffic and are able to block traffic that is dangerous. Firewalls act
as the intermediate server between SMTP and HTTP connections.

Role of Firewalls in Internet Security

Firewalls impose restrictions on incoming and outgoing packets to and from private networks. All the traffic,
whether incoming or outgoing, must pass through the firewall; only authorized traffic is allowed to pass through it.
Firewalls create checkpoints between an internal private network and the public Internet, also known as choke
points. Firewalls can create choke points based on IP source and TCP port number. They can also serve as the
platform for IPsec. Using tunnel mode capability, firewall can be used to implement VPNs. Firewalls can also limit
network exposure by hiding the internal network system and information from the public Internet.
Internet security 3

Types of firewalls

Packet Filters
Packet filters are one of several different types of firewalls that process network traffic on packet-by-packet basis.
Their main job is to filter traffic from a remote IP host, so a router is needed to connect the internal network to the
internet. The router is known as a screening router, which screens packets leaving and entering the network.

Circuit-Level Gateways
The Circuit-Level Gateway is a proxy server that statically defines what traffic will be allowed. Circuit proxies
always forward packets containing a given port number, provided the port number is permitted by the rules set. This
gateway operates at the network level of an OSI model. The main advantage of proxy server is its ability to provide
Network Address Translation (NAT), which can hide the user's IP address from the Internet, effectively protecting
all internal information from the Internet.

Application-Level Gateways
An application-level gateway is a proxy server operating at the TCP/IP application level. A packet is forwarded only
if a connection is established using a known protocol. Application-level gateways are notable for analyzing entire
messages rather than individual packets of data when the data are being sent or received.

Malicious software and antivirus

Malware
Commonly, a computer user can be tricked or forced into downloading software onto a computer that is of malicious
intent. Such programs are known as malware and come in many forms, such as viruses, Trojan horses, spyware, and
worms. Malicious software is sometimes used to form botnets.

Viruses
Viruses are programs that can replicate their structures or effects by infecting other files or structures on a computer.
The common use of a virus is to take over a computer to steal data.

Trojan horse
A Trojan horse (commonly known as a Trojan) is a general term for malicious software that pretends to be harmless
so that a user willingly allows it to be downloaded onto the computer.

Spyware
The term spyware referrs to programs that surreptitiously monitor activity on a computer system and report that
information to others without the user's consent.
Internet security 4

Worms
Worms are programs that can replicate themselves thoughout a computer network, performing malicious tasks
throughout.

Botnet
A botnet is a network of "zombie" computers that have been taken over by a "bot" that performs large-scale
malicious acts for the creator of the botnet.

Antivirus
Antivirus programs and Internet security programs are useful in protecting a computer or programmable device from
malware.
Such programs are used to detect and usually eliminate viruses; however, it is now common to see security suites,
containing also firewalls, anti-spyware, theft protection, and so on to more thoroughly protect users [6] .
Traditionally, a user would pay for antivirus software; however, computer users now can, and do, download from a
host of free security applications on the Internet.[7]

Browser choice
Web browser statistics tend to affect the amount a Web browser is exploited. For example, Internet Explorer 6,
which used to own a majority of the Web browser market share[8] , is considered extremely insecure[9] because
vulnerabilities were commonly exploited due to its former popularity. Now, however, browser choice is more evenly
distributed (Internet Explorer at 29.7%, Firefox at 44.1%, Google Chrome at 19.2%, and so on)[8] ; vulnerabilities
are commonly exploited in many browsers.[10] [11] [12]

Buffer overflow attacks

A buffer overflow is an attack that could be used by a cracker to get full system access through various methods by
essentially cracking a computer using brute force. Most security applications and suites are incapable of adequate
defense against these kinds of attacks.

See also
• Computer security
• Cyberspace Electronic Security Act (in the US)
• Firewalls and Internet Security (book)
• Identity Driven Networking
• Network security policy
• Antivirus software
• Securelist.com
Internet security 5

References
Guidelines on Electronic Mail Security [13]
[1] Gralla, Preston (2007). How the Internet Works. Que Pub, Indianapolis. ISBN 0789721325.
[2] Rhee, M. Y. (2003). Internet Security: Cryptographic Principles,Algorithms and Protocols. Chichester: Wiley. ISBN 0470852852.
[3] http:/ / itcd. hq. nasa. gov/ networking-vpn. html Virtual Private Network
[4] http:/ / www. pvv. org/ ~asgaut/ crypto/ thesis/ node6. html Network Virtual Terminal
[5] http:/ / www. w3. org/ Protocols/
[6] Rebbapragada, Narasu. | All-in-one Security (http:/ / www. pcworld. com/ article/ 125817/ allinone_security. html). Retrieved 19 November
2010.
[7] Larkin, Eric. | Build Your Own Free Security Suite (http:/ / www. pcworld. com/ article/ 150204/ build_your_own_free_security_suite. html).
Retrieved 19 November 2010.
[8] W3Schools.com. | Browser Statistics (http:/ / www. w3schools. com/ browsers/ browsers_stats. asp). Retrieved 19 November 2010.
[9] Bradly, Tony. | "It's Time to Finally Drop Internet Explorer 6" (http:/ / www. pcworld. com/ businesscenter/ article/ 191356/
its_time_to_finally_drop_internet_explorer_6. html). Retrieved 19 November 2010.
[10] Messmer, Ellen and NetworkWorld. | "Google Chrome Tops 'Dirty Dozen' Vulnerable Apps List" (http:/ / www. pcworld. com/
businesscenter/ article/ 210797/ google_chrome_tops_dirty_dozen_vulnerable_apps_list. html). Retrieved 19 November 2010.
[11] Keizer, Greg. | Firefox 3.5 Vulnerability Confirmed (http:/ / www. pcworld. com/ article/ 168461/ firefox_35_vulnerability_confirmed.
html). Retrieved 19 November 2010.
[12] Skinner, Carrie-Ann. | Opera Plugs "Severe" Browser Hole (http:/ / www. pcworld. com/ article/ 155854/
opera_plugs_severe_browser_hole. html). Retrieved 19 November 2010.
[13] http:/ / csrc. nist. gov/ publications/ nistpubs/ 800-45-version2/ SP800-45v2. pdf

External links
• IP Authentication Header (http://www.ietf.org/rfc/rfc2402.txt)
• Encapsulating Security Payload (http://www.ietf.org/rfc/rfc2406.txt)
• Internet Security Concepts (http://www.securitypresentations.com) - Presentations showing everything from
how to secure a home system, to multi-factor authentication, encryption, social engineering, and advanced topics
like XSS, IDS and SSL Certificate Hijacking.
• Wireless Safety (http://www.wireless-safety.org) - Up to date info on the latest security threats, top news
stories, and step by step tutorials on how to best protect yourself and family or organization.
• Broadband Reports (http://www.dslreports.com/) - FAQs and forums on Internet security etc. and PwdHash
(http://crypto.stanford.edu/PwdHash/) - Firefox & IE browser extensions that transparently converts a user's
password into a domain-specific password.
• Internet security (http://www.internetinsecure.net) - by JC & Goio (security programs).
• The Internet and Data Security Guide (http://www.ruleworks.co.uk/Security/) - A to Z Glossary of terms
• Cybertelecom :: Security (http://www.cybertelecom.org/security/) - surveying federal Internet security work
Article Sources and Contributors 6

Article Sources and Contributors

Internet security  Source: http://en.wikipedia.org/w/index.php?oldid=401817109  Contributors: *drew, 1exec1, 30, A Clown in the Dark, A little insignificant, Aarontay, AdjustShift, Akamad,
AlistairMcMillan, Amcfreely, Anapazapa, Andyype, Apollo2011, Argav, Autoerrant, Baa, Beetstra, Bestija11, BritishWatcher, Bryan.dollery, Bsdlogical, Caltas, Can't sleep, clown will eat me,
CanadianLinuxUser, CanisRufus, Carlosguitar, Chevymontecarlo, CliffC, Craftyminion, DARTH SIDIOUS 2, DVdm, Da monster under your bed, DaBler, DavidGGG, Dawnseeker2000, Dbiel,
Dcampbell30, Debog, Debsalmi, Deltabeignet, Discospinster, DoriSmith, Draicone, Edupedro, Ehheh, Elfguy, Elroch, EoGuy, Equendil, ErrantX, Evgeni Sergeev, Excirial, Fjollig arme,
FleetCommand, Frap, Frencheigh, Gogo Dodo, Gomm, GraemeL, Gstroot, Gurch, HamburgerRadio, HopeSeekr of xMule, Humannetwork, Ianmacm, In3go, Intsafetycenter, Io Katai, Itbuddy,
JDavis680, Jerrypcjr, Jim Mikulak, Jjalexand, JoeSmack, John254, JohnLai, Johntex, JonHarder, JudyJohn, Jujutacular, KGasso, Karrade, Kevinkinnett, KneeLess, KnowledgeOfSelf, Kubigula,
LSnK, La Pianista, La goutte de pluie, LilHelpa, Lutz.hausmann, MBisanz, MathMaven, Matt Crypto, McGeddon, Mere Mortal, Mgf12rw, Mindmatrix, Minghong, Mortense, Mr Nic, N2f,
Ninnnu, Nixeagle, Oxymoron83, Pearle, Phantomsteve, Philip Trueman, QueenCake, Raanoo, Rameez-NJITWILL, Rich Farmbrough, Riittaajo, S0aasdf2sf, S33k3r, SWAdair, Sarranduin,
Sbanker, Seldridge99, Singaporesuperboy, SiobhanHansa, Sjjupadhyay, Smeago, Smoothy, Stephenb, Stephenchou0722, Tcwolf, Th1rt3en, The Thing That Should Not Be, Thespian,
Thumperward, Tiger williams, TonyW, Train2104, Tuomas, Ulric1313, Vary, Vec, Versageek, Versus22, Waltzmoore66, Wavelength, Wiki-ay, WikiBone, Willlangford, Wmahan, Xp54321,
Yuva raju raj, ZeWrestler, Zifert, Zollerriia, 293 anonymous edits

License
Creative Commons Attribution-Share Alike 3.0 Unported
http:/ / creativecommons. org/ licenses/ by-sa/ 3. 0/