You're reading from Network Protocols for Security Professionals Probe and identify network-based vulnerabilities and safeguard against network protocol breaches

Product type Paperback

Published in Oct 2022

Publisher Packt

ISBN-13 9781789953480

Length 580 pages

Edition 1st Edition

Languages

Python

Tools

Metasploit

Concepts

Network Security

Authors (2):

Deepanshu Khanna

Yoram Orzach

View More author details

Table of Contents (23) Chapters

Preface

1. Part 1: Protecting the Network – Technologies, Protocols, Vulnerabilities, and Tools

2. Chapter 1: Data Centers and the Enterprise Network Architecture and its Components FREE CHAPTER

3. Chapter 2: Network Protocol Structures and Operations

4. Chapter 3: Security Protocols and Their Implementation

5. Chapter 4: Using Network Security Tools, Scripts, and Code

6. Chapter 5: Finding Protocol Vulnerabilities

7. Part 2: Network, Network Devices, and Traffic Analysis-Based Attacks

8. Chapter 6: Finding Network-Based Attacks

9. Chapter 7: Detecting Device-Based Attacks

10. Chapter 8: Network Traffic Analysis and Eavesdropping

11. Chapter 9: Using Behavior Analysis and Anomaly Detection

12. Part 3: Network Protocols – How to Attack and How to Protect

13. Chapter 10: Discovering LAN, IP, and TCP/UDP-Based Attacks

14. Chapter 11: Implementing Wireless Network Security

15. Chapter 12: Attacking Routing Protocols

16. Chapter 13: DNS Security

17. Chapter 14: Securing Web and Email Services

18. Chapter 15: Enterprise Applications Security – Databases and Filesystems

19. Chapter 16: IP Telephony and Collaboration Services Security

20. Assessments

21. Index

Why subscribe?

22. Other Books You May Enjoy

SSL/TLS and proxies

Secured Socket Layer (SSL) and its successor, Transport Layer Security (TLS), are protocols that are used for encrypting the upper layer. These protocols work over TCP or UDP port 443 to access web pages by secured HTTP (HTTPS) over TCP port 443, and to access Google Drive with UDP port 443 using QUIC/GQUIC.

Protocol basics

SSL was first introduced by Netscape in 1994, to be standardized as TLSv1 in RFC 2246 (IETF, January 1999), TLSv1.1 in RFC 4346 (IETF, April 2006), TLSv1.2 (IETF, August 2008), and the latest version TLSv1.3 in RFC 8446 (IETF, August 2018).

The common use for TLS is to provide secure communication between a client and a server (the peers) while providing the following services:

Authentication: The server side is always authenticated; the client side is optionally authenticated.
Confidentiality: The data that's sent over the communication channel is encrypted and only visible to the two peers.
Integrity: Data that...

The rest of the chapter is locked

You're reading from Network Protocols for Security Professionals Probe and identify network-based vulnerabilities and safeguard against network protocol breaches

Table of Contents (23) Chapters

SSL/TLS and proxies

Protocol basics

Unlock this book and the full library FREE for 7 days

Authors (2)

Personalised recommendations for you