Chapter 6: Network Security

Front 1

all-in-one network security appliance

Back 1

Network hardware that provides multiple security functions

Front 2

anomaly-based monitoring

Back 2

A monitoring technique used by an IDS that creates a baseline of normal activities and compares actions against the baseline. Whenever a significant deviation from this baseline occurs, an alarm is raised.

Front 3

behavior-based monitoring:

Back 3

A monitoring technique used by an IDS that uses the normal processes and actions as the standard and compares actions against it.

Front 4

demilitarized zone (DMZ):

Back 4

A separate network that rest outside the secure network perimeter; untrusted outside users can access the DMZ but cannot enter the secure network;

Front 5

heuristic monitoring:

Back 5

A monitoring technique used by an IDS that uses an algorithm to determine if a threat exist.

Front 6

host intrusion setection system(HIDS)

Back 6

A software-based application that runs on a local host computer that can detect an attack as it occurs.

Front 7

intrusion detection system(IDS):

Back 7

A device designed to be active security; it can detect an attack as it occurs.

Front 8

Load balancer:

Back 8

A device that can direct request to different servers based on a variety of factors, such as the number of server connections, the server's processor utilization, and overall performance of the server.

Front 9

Network access control (NAC):

Back 9

A technique that examines the current state of a system or network device before it is allowed to connect to the network.

Front 10

Network address translation (NAT):

Back 10

A technique that allows private IP addresses to be used on the public Internet.

Front 11

Network Intrusion detection system (NIDS)

Back 11

A technology that watches for attacks on the network and reports back to a central device.

Front 12

network intrusion prevention system (NIPS)

Back 12

A technology that monitors network traffic to immediately react to block a malicious attack.

Front 13

proxy server:

Back 13

A computer or an application program that intercepts a user request from the internal secure network and then processes that request on behalf of the user.

Front 14

remote access:

Back 14

Any combination of hardware and software that enables remote users to access a local internal network.

Front 15

reverse proxy:

Back 15

A computer or an application program that routes incoming request to the correct server.

Front 16

router:

Back 16

A device that can forward packets across computer networks.

Front 17

signature-based monitoring:

Back 17

A monitoring technique used by an IDS that examines network traffic to look for well-known patterns and compares the activities against a predefined signature.

Front 18

subnetting (subnet addressing):

Back 18

A technique that uses IP addresses to divide a network into network, subnet, and host.

Front 19

switch:

Back 19

A device that connects network segments and forwards only frames intended for that specific device or frames sent to all devices.

Front 20

virtual LAN (VLAN):

Back 20

A technology that allows scattered users to be logically grouped together even though they may be attached to different switches.

Front 21

virtual private network(VPN):

Back 21

A technology to use an unsecured public network, such as the internet, like a secure private network.

Front 22

VPN concentrator:

Back 22

A device that aggregates hundreds or thousands of VPN connections.

Front 23

web application firewall:

Back 23

A special type of firewall that looks more deeply into packets that carry HTTP traffic.

Front 24

web security gateway:

Back 24

A device that can block malicious content in "real time" as it appears (without first knowing the URL of a dangerous site)