Reference article on OSI and security
This is a sample chapter out of a book that is a good reference for the OSI model in general (which you need to know backwards, forwards and sideways) and some interesting discussion about how security and the layers interact.
I want you to pick one of the layers and post an answer to the following questions:
1) Which layer did you pick?
2) Why do you feel this layer poses the greatest security risk?
Tuesday, January 30, 2007
Subscribe to:
Post Comments (Atom)
4 comments:
1) Which layer did you pick? I chose the Network Layer
2) Why do you feel this layer poses the greatest security risk? One main reason I chose this to talk about is because when you send items over the internet, not all of it is encypted. Some of it is actually sent in plain text viewable to anyone who has some type of packet sniffer. In the network layer the main consern for a packet is getting to its destination. It is not concerned on how it gets there or which routes it takes all it wants is to reassemble with the other packets. I think the network layer plays a big part in computer security for the computer that users always leave on. They are most vulnerable because packets are constantly being sent and without an adequet protection software they are the most vulernable to IP attacks as well as other various attacks.
1) I chose the Transport Layer
2) I think that here is were al the big problem began!! I think that here lots of things such by better. For example at first we didn't have any type of protection here, so hackers do whatever they like, so they invented the IPSec that is getting better. So the thing I am saying is that it should be more enfacis on trying to get the problem from the root. I think that every layer could be better.. but here is where everything begins!
1)I chose the Network layer.
2)This layer has more responsibilities than other layers of sending the information (data), this layer transmits data from joint (node) to joint (node) and also is responsible for addressing and routes sending. So that’s why I believe that this layer poses the greatest security risk.
Well well, choose a layer. It’s a toss up between Transport and Network. I think I’ll go with Transport. I feel it’s always good to get to the root of the problem and this layer is where information is first exchanged.
The biggest thing that stands out to me is the ability to falsify identification information of the sender. I feel this right away opens the door for all kinds of mischievous activity. If it were possible to ensure accountability I think people would think twice before doing damage.
Post a Comment