#tcp-ip

WT32-ETH01 Serial to Ethernet Module Based on ESP32 for IoT Applications

The WT32-ETH01 serves as an embedded serial port to Ethernet module based on the ESP32 series. The module integrates an optimized TCP/IP protocol stack, allowing users to quickly implement TCP/IP networking functions of embedded devices, thus reducing development time and cost.

Comparison of DOD and OSI Model in the Internet Communication

by Ei Ei Khaing ""Comparison of DOD and OSI Model in the Internet Communication""

Published in International Journal of Trend in Scientific Research and Development (ijtsrd), ISSN: 2456-6470, Volume-3 | Issue-5 , August 2019,

URL: https://www.ijtsrd.com/papers/ijtsrd27834.pdf  

Paper URL: https://www.ijtsrd.com/computer-science/computer-network/27834/comparison-of-dod-and-osi-model-in-the-internet-communication/ei-ei-khaing

engineering journal, open access journal of chemistry, indexed journal

Managing and Troubleshooting Networks 4th Edition

Mike Meyers Comptia Network+

Chapter 11 Securing TCP/IP

((these are notes for my own use but i am blogging them for anyone actually interested in networking, not just the cyberpunk blog i usually maintain))

802.1x

A port-authentication network access control mechanism for networks.

access control list (ACL)

A clearly defined list of permissions that specifies what actions an authenticated user may perform on a shared resource.

Advanced Encryption Standard (AES)

A block cipher created in the late 1990s that uses a 128-bit block size and a 128-, 192-, or 256-bit key size. Practically uncrackable.

algorithm

A set of rules for solving a problem in a given number of steps.

asymmetric-key algorithm

An encryption method in which the key used to encrypt a a message and the key used to decrypt it are different, or asymmetrical.

authentication

A process that proves good data traffic truly came from where it says it originated by verifying the sending and receiving users and computers.

Authenticating, Authorization, and Accounting (AAA)

A security philosophy wherein a computer trying to connect to a network must first present some form of credential in order to be authenticated and then must have limitable permissions within the network.

Authentication Server (AS)

In Kerberos, a system that hands out Ticket-Granting Tickets to clients after comparing the client hash to it's own. Also known as Ticket Granting Ticket.

authorization

A step in the AAA philosophy during which a client's permissions are decided upon.

block Cipher

An encryption algorithm in which data is encrypted in "chunks" of a certain length at a time. Popular in wired networks.

certificate

A public encryption key signed with the digital signature from a trusted third party called a Certificate Authority (CA), which is used to validate the identity of its holder when that person or company sends data to other parties.

Challenge Handshake Authentication Protocol (CHAP)

A remote access authentication protocol in which the serving system challenges the remote client, which must provide an encrypted password.

cipher

A series of complex and hard-to-reverse mathematics run on a string of ones and zeroes in order to make a new set of seemingly meaningless ones and zeroes.

ciphertext

The output when cleartext is run through a cipher algorithm using a key.

cleartext

Unencrypted data in an accessible format that can be read without special utilities. Also known as plaintext

Data Encryption Standard (DES)

A symmetric-key algorithm develovoped by the US Government in the 1970s and formerly in use in a variety of TCP/IP applications, in which it uses a 64-bit block and a 56-bit key.

digital signature

An encrypted hash of a private encryption key that verifies a sender's identity to those who receive encrypted data or messages.

Discretionary Access Control (DAC)

Authorization method based on the idea that there is an owner of a resource who may at his or her discretion, assign access to that resource.

encryption

A method of securing messages by scrambling and encoding each packet as it is sent across and unsecured medium, such as the Internet.

Extensible Authentication Protocol (EAP)

Authentication wrapper that EAP-Compliant application can use to accept one of many types of authentication. Only used in Wireless Networks.

FreeRADIUS

Free RADIUS server software for UNIX/Linux systems.

hash

A mathematical function used in cryptography that is run on a string of binary digits of any length that results in a value of some fixed length.

integrity

Network process that ensures data sent in a recipient is unchanged when it is received at the destination host.

Internet Authentication Service (IAS)

Popular RADIUS server for Microsoft environments.

Internet Protocol Security (IPsec)

Network layer encryption protocol.

Kerberos

An Authentication standard designed to allow different operating systems and applications to authenticate each other.

Key Distribution Center (KDC)

System for granting authentication in Kerberos.

key pair

Name for the two keys generated in asymmetrical key algorithm systems.

Lightweight Directory Access Protocol (LDAP)

A protocol used to query and change a database used by the network, also uses TCP port 389 by Default.

Lightweight Extensible Authentication Protocol (LEAP)

A proprietary EAP authentication used almost exclusively by CISCO wireless products.

Management Information Base (MIB)

SNMP's version of a server.

Mandatory Access Control (MAC)

A security model in which every resource is assigned a label that defines its security level. If a user lacks that security level, they do not get access.

MD5

The most popular hashing function.

MS-CHAP

Microsoft's dominant variation of the CHAP protocol, uses a slightly more advanced encryption protocol.

multifactor authentication

A form of authentication where a user must use two or more factors to prove his or her identity.

Network Access Server (NAS)

System that controls the modems in a RADIUS network.

Network Control Protocol (NCP)

Protocol used by LCP

Network Time Protocol (NTP)

Protocol that gives the current time.

nonrepudiation

The process of making sure data came from the person on entity it was supposed to come from.

OpenSSH

A series of secure programs developed by the OpenBSD organization to fix SSH's limitation of only being able to handle on session per tunnel.

Password Authentication Protocol

The oldest and most basic form of authentication and also the least safe because it sends all passwords in cleartext.

plaintext

Unencrypted data in an accessible format that can be read without special utilities. also called cleartext.

Point-To-Point Protocol (PPP)

A protocol that enables a computer to connect to the internet through a dial-in connection ad to enjoy most of the benefits of a direct connection.

Protected Extensible Authentication Protocol (PEAP)

An authentication protocol that uses a password function based on MS-CHAPv2 with the addition of an encrypted TLS tunnel similar to EAP-TLS.

public-key cryptography

A method of encryption and decryption that uses two different keys: a public key for encryption and a private key for decryption.

public-key Infrastructure (PKI)

The system for creating and distributing digital certificates using sites like Veri-Sign, Thawte, or GoDaddy.

Remote Authentication Dial-In User Service (RADIUS)

An AAA standard created to support ISPs with hundreds, if not thousands of modems in hundreds of computers to connect to a single central database.

Rivest Cipher 4 (RC4)

A popular streaming Symmetrical algorithm.

Rivest Shamir Adelman (RSA)

An improved asymmetric cryptography algorithm that enables secure digital signatures.

role-based access control (RBAC)

The most popular authentication model used in file sharing, defines a user's access to a resource based on the roles the user plays in the network environment.

Secure copy Protocol (SCP)

One of the first SSH-enabled programs to appear after the introduction of SSH.

Secure FTP (SFTP)

Designed as a replacement for FTP after many of the inadequacies of SCP were discovered.

Secure Hash Algorithm (SHA)

A popular cryptographic hash.

Secure Shell (SSH)

A terminal emulation program that looks exactly like Telnet but encrypts the data. It has replaced Telnet on the Internet.

Secure Socket Layer (SSL)

A protocol developed by Netscape for transmitting private documents over the internet, which works by using a public key to encrypt sensitive data.

Simple Network Management Protocol (SNMP)

A set of standards for communication with network devices connected to a TCP/IP network. Used basically for Network Managing.

single sign-on

A process whereby a client performs a one-time login to a gateway system. That system, in turn, takes care of the client's authentication to any other connected systems for which the client is authorized to access.

stream cipher

An encryption method that encrypts a single bit at a time, and is popular when data comes in long streams.

symmetric-key algorithm

Any encryption method that uses the same key for both encryption and decryption.

Terminal Access Controller Access Control System Plus (TACACS+)

A proprietary protocol developed by Cisco to support AAA in a network with many routers and switches. Uses TCP port 49 by default.

Ticket-Granting Ticket

Sent by an Authentication Server in a Kerberos setup if a Client's hash matches its own, signalling that the client is authenticated but not yet authorized.

Transport Layer Security (TLS)

A robust update to SSL that works with almost any TCP application.

tunnel

An encrypted link between two programs on two separated computers.

two-factor authentication

Download VTC - TCP-IP Packet Analysis.bin