The Experts below are selected from a list of 96 Experts worldwide ranked by ideXlab platform
Xiaohu Yang - One of the best experts on this subject based on the ideXlab platform.
-
a reference model and system architecture for database Firewall
Systems Man and Cybernetics, 2005Co-Authors: Xiaohu YangAbstract:More and more network attacks are focusing on application level vulnerabilities. Recently, several examples of this trend have been highly publicized such as the SQL Slammer and SQL Snake attacks. Traditional Firewalls, used for protecting the database, only prevent attacks searching for vulnerabilities. Database Firewalls take defense deep into the organization by providing full syntax control and audit of the SQL API stream before it reaches the database, and enforcing content-driven access to database. This paper proposes a layered reference model for database Firewalls by enhancing the capability of COAST Laboratorys model. It separates a database Firewall into three layers (network layer, schematic layer and semantic layer) according to the knowledge, computation target, and the control granularity of each layer. Based on this model, a database Firewall Product had been prototyped. It can greatly improve the database security by introducing self-controlled authentication, principal mapping, object mapping, and mandatory access control modules.
-
SMC - A reference model and system architecture for database Firewall
2005 IEEE International Conference on Systems Man and Cybernetics, 2005Co-Authors: Xiaohu YangAbstract:More and more network attacks are focusing on application level vulnerabilities. Recently, several examples of this trend have been highly publicized such as the SQL Slammer and SQL Snake attacks. Traditional Firewalls, used for protecting the database, only prevent attacks searching for vulnerabilities. Database Firewalls take defense deep into the organization by providing full syntax control and audit of the SQL API stream before it reaches the database, and enforcing content-driven access to database. This paper proposes a layered reference model for database Firewalls by enhancing the capability of COAST Laboratorys model. It separates a database Firewall into three layers (network layer, schematic layer and semantic layer) according to the knowledge, computation target, and the control granularity of each layer. Based on this model, a database Firewall Product had been prototyped. It can greatly improve the database security by introducing self-controlled authentication, principal mapping, object mapping, and mandatory access control modules.
Rick Stiffler - One of the best experts on this subject based on the ideXlab platform.
-
cisco secure pix Firewalls
2001Co-Authors: David W Chapman, Andy Fox, Rick StifflerAbstract:From the Publisher: Reduce the threat of network attacks with the official CSPFA Coursebook Prepare for the Cisco Security Specialist 1 PIX exam with the official CSPFA Coursebook Understand the physical characteristics of PIX models 506, 515, 520, 525, and 535, including LED information and port and slot numbering Upgrade PIX OS code, perform password recovery, and install feature licenses Configure IPSec Phase I and Phase II Security Associations Configure Cisco routers to perform Context Based Access Control (CBAC) Examine the many operating features of the PIX, such as Cut-Through Proxy, Advanced Protocol Handling, Attack Guards, and the Adaptive Security Algorithm (ASA) Learn the ins and outs of address translation and access control Install the Cisco Secure ACS server and configure corresponding services on the PIX to authenticate and authorize users and services Understand attack guards such as Syn Flood, Fragmentation, AAA, DNS, and Mail Examine the workings of the PIX failover mechanism and learn the difference between failover, stateful failover, interface testing, and the failover poll One of the primary components of any organization's security policy is the implementation and maintenance of Firewalls. Firewalls are network devices residing at the perimeter of corporate networks that protect internal networks from intrusion by the outside world. The integrated hardware/software PIX Firewall series delivers high security without impacting network performance while scaling to meet the entire range of customer requirements. Based on the official instructor-led training course (Cisco Secure PIX FirewallAdvanced-CSPFA), Cisco Secure PIX Firewalls teaches you the skills needed to describe, configure, verify, and manage the PIX Firewall Product family and the Cisco IOS(r) Firewall feature set. Starting with a discussion of hacking methodologies and internal and external threats, the book opens by describing the Cisco Security Wheel, emphasizing network security as a continuous process. The authors then familiarize you with the characteristics of the various PIX models and examine upgrade tasks. The book covers basic installation details, as well as how to enable more advanced features and access control. In addition, the book details management and monitoring with PIX Syslog services and the PIX AAA subsystem. You also learn to configure the PIX Failover mechanism, IPSec on the PIX, and the Cisco IOS Firewall feature set. The appendixes provide helpful references, including configuring PIX intrusion detection features, SNMP management support, DHCP client and server, Secure Shell Protocol (SSH) connection, and dozens of security-related resources. Whether you are preparing for the Cisco Security Specialist 1 certification or simply want to understand and make the most efficient use of PIX Firewalls, Cisco Secure PIX Firewalls provides you with a complete solution for planning, deploying, and managing PIX Firewall protected networks. This volume is in the Certification and Training Series offered by Cisco Press. Books in this series provide officially developed training solutions on key internetworking topics to help networking professionals understand technology implementations and prepare for the Cisco Career Certifications examinations.
Behzad Behtash - One of the best experts on this subject based on the ideXlab platform.
-
CCSP Self-Study: Cisco Secure PIX Firewall Advanced (CSPFA) (2nd Edition)
2004Co-Authors: Behzad BehtashAbstract:Cisco authorized self-study book for CCSP 642-521 foundation learning Gain proficiency with new features of PIX Firewall version 6.3, including OSPF, 802.1Q VLANs, NAT-T, and more Learn the ins and outs of the PIX Product family and its complete feature set Use the PIX Device Manager (PDM) 3.0 to configure and manage the PIX Firewall Use advanced techniques to control traffic on your network using ACLs (access control lists), content filtering, and object groups Improve security using PIX Firewall attack guards, intrusion detection, and shunning features Learn about techniques and security considerations for configuring OSPF on PIX Firewall version 6.3 Configure scalable site-to-site and client remote access VPNs using the PIX Firewall version 6.3 Configure high-availability solutions using stateful and LAN-based failover techniques Use logical interfaces and 802.1Q trunks to scale your PIX Firewall implementation Master enterprise management and maintenance techniques using CiscoWorks Management Center for Firewalls 1.2 and Auto Update Server 1.1 Configure the PIX Firewall Services Module (FWSM)The use of Firewalls-devices residing at the network perimeter to protect against intrusion-is an essential building block to even the most basic security program. Cisco Systems has continued the support and development of the PIX OS to provide networks top-notch security while maintaining compatibility with the latest standards and protocols. Now offered in many models, the PIX Firewall is perfectly suited to meet the requirements of small offices (501 model), medium to large businesses (506E, 515E, and 525 models), and large enterprise and service provider customers (525 and 535 models and the Firewall Services Module). CCSP Self-Study: Cisco Secure PIX Firewall Advanced (CSPFA), Second Edition, offers in-depth configuration and deployment information for this popular and versatile Firewall solution.CCSP Self-Study: Cisco Secure PIX Firewall Advanced (CSPFA), Second Edition, teaches you the skills needed to configure and operate the PIX Firewall Product family. Chapter overviews bring you quickly up to speed and help you get to work right away. Lab exercises and scenario-based solutions allow you to adapt configurations to your network for rapid implementation, helping you make the most of your PIX Firewall. Chapter-ending review questions test your knowledge. PIX Device Manager (PDM) configuration procedures are presented to complement extensive coverage of traditional CLI commands.Whether you are looking for a reference guide on working with the various PIX Firewall models or seeking a study tool for the CSPFA 642-521 exam, CCSP Self-Study: Cisco Secure PIX Firewall Advanced (CSPFA), Second Edition, supports your effective use of the PIX Firewall.CCSP Self-Study: Cisco Secure PIX Firewall Advanced (CSPFA), Second Edition, is part of a recommended learning path from Cisco Systems that can include simulation and hands-on training from authorized Cisco Learning Partners and self-study Products from Cisco Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered by authorized Cisco Learning Partners worldwide, please visit www.cisco.com/go/authorizedtraining.This volume is in the Certification Self-Study Series offered by Cisco Press. Books in this series provide officially developed training solutions to help networking professionals understand technology implementations and prepare for the Cisco Career Certifications examinations.
David W Chapman - One of the best experts on this subject based on the ideXlab platform.
-
cisco secure pix Firewalls
2001Co-Authors: David W Chapman, Andy Fox, Rick StifflerAbstract:From the Publisher: Reduce the threat of network attacks with the official CSPFA Coursebook Prepare for the Cisco Security Specialist 1 PIX exam with the official CSPFA Coursebook Understand the physical characteristics of PIX models 506, 515, 520, 525, and 535, including LED information and port and slot numbering Upgrade PIX OS code, perform password recovery, and install feature licenses Configure IPSec Phase I and Phase II Security Associations Configure Cisco routers to perform Context Based Access Control (CBAC) Examine the many operating features of the PIX, such as Cut-Through Proxy, Advanced Protocol Handling, Attack Guards, and the Adaptive Security Algorithm (ASA) Learn the ins and outs of address translation and access control Install the Cisco Secure ACS server and configure corresponding services on the PIX to authenticate and authorize users and services Understand attack guards such as Syn Flood, Fragmentation, AAA, DNS, and Mail Examine the workings of the PIX failover mechanism and learn the difference between failover, stateful failover, interface testing, and the failover poll One of the primary components of any organization's security policy is the implementation and maintenance of Firewalls. Firewalls are network devices residing at the perimeter of corporate networks that protect internal networks from intrusion by the outside world. The integrated hardware/software PIX Firewall series delivers high security without impacting network performance while scaling to meet the entire range of customer requirements. Based on the official instructor-led training course (Cisco Secure PIX FirewallAdvanced-CSPFA), Cisco Secure PIX Firewalls teaches you the skills needed to describe, configure, verify, and manage the PIX Firewall Product family and the Cisco IOS(r) Firewall feature set. Starting with a discussion of hacking methodologies and internal and external threats, the book opens by describing the Cisco Security Wheel, emphasizing network security as a continuous process. The authors then familiarize you with the characteristics of the various PIX models and examine upgrade tasks. The book covers basic installation details, as well as how to enable more advanced features and access control. In addition, the book details management and monitoring with PIX Syslog services and the PIX AAA subsystem. You also learn to configure the PIX Failover mechanism, IPSec on the PIX, and the Cisco IOS Firewall feature set. The appendixes provide helpful references, including configuring PIX intrusion detection features, SNMP management support, DHCP client and server, Secure Shell Protocol (SSH) connection, and dozens of security-related resources. Whether you are preparing for the Cisco Security Specialist 1 certification or simply want to understand and make the most efficient use of PIX Firewalls, Cisco Secure PIX Firewalls provides you with a complete solution for planning, deploying, and managing PIX Firewall protected networks. This volume is in the Certification and Training Series offered by Cisco Press. Books in this series provide officially developed training solutions on key internetworking topics to help networking professionals understand technology implementations and prepare for the Cisco Career Certifications examinations.
Andy Fox - One of the best experts on this subject based on the ideXlab platform.
-
cisco secure pix Firewalls
2001Co-Authors: David W Chapman, Andy Fox, Rick StifflerAbstract:From the Publisher: Reduce the threat of network attacks with the official CSPFA Coursebook Prepare for the Cisco Security Specialist 1 PIX exam with the official CSPFA Coursebook Understand the physical characteristics of PIX models 506, 515, 520, 525, and 535, including LED information and port and slot numbering Upgrade PIX OS code, perform password recovery, and install feature licenses Configure IPSec Phase I and Phase II Security Associations Configure Cisco routers to perform Context Based Access Control (CBAC) Examine the many operating features of the PIX, such as Cut-Through Proxy, Advanced Protocol Handling, Attack Guards, and the Adaptive Security Algorithm (ASA) Learn the ins and outs of address translation and access control Install the Cisco Secure ACS server and configure corresponding services on the PIX to authenticate and authorize users and services Understand attack guards such as Syn Flood, Fragmentation, AAA, DNS, and Mail Examine the workings of the PIX failover mechanism and learn the difference between failover, stateful failover, interface testing, and the failover poll One of the primary components of any organization's security policy is the implementation and maintenance of Firewalls. Firewalls are network devices residing at the perimeter of corporate networks that protect internal networks from intrusion by the outside world. The integrated hardware/software PIX Firewall series delivers high security without impacting network performance while scaling to meet the entire range of customer requirements. Based on the official instructor-led training course (Cisco Secure PIX FirewallAdvanced-CSPFA), Cisco Secure PIX Firewalls teaches you the skills needed to describe, configure, verify, and manage the PIX Firewall Product family and the Cisco IOS(r) Firewall feature set. Starting with a discussion of hacking methodologies and internal and external threats, the book opens by describing the Cisco Security Wheel, emphasizing network security as a continuous process. The authors then familiarize you with the characteristics of the various PIX models and examine upgrade tasks. The book covers basic installation details, as well as how to enable more advanced features and access control. In addition, the book details management and monitoring with PIX Syslog services and the PIX AAA subsystem. You also learn to configure the PIX Failover mechanism, IPSec on the PIX, and the Cisco IOS Firewall feature set. The appendixes provide helpful references, including configuring PIX intrusion detection features, SNMP management support, DHCP client and server, Secure Shell Protocol (SSH) connection, and dozens of security-related resources. Whether you are preparing for the Cisco Security Specialist 1 certification or simply want to understand and make the most efficient use of PIX Firewalls, Cisco Secure PIX Firewalls provides you with a complete solution for planning, deploying, and managing PIX Firewall protected networks. This volume is in the Certification and Training Series offered by Cisco Press. Books in this series provide officially developed training solutions on key internetworking topics to help networking professionals understand technology implementations and prepare for the Cisco Career Certifications examinations.