Ciberseguridad: Encriptación y Protocolos

Quick Review

• Link encryption encrypts data along a specific communication path.
• End-to-end encryption (E2EE) doesn't encrypt routing information, allowing attackers to learn packet destinations.
• Transport Layer Security (TLS) provides confidentiality and data integrity for network communications.
• Secure Sockets Layer (SSL), a predecessor to TLS, is considered insecure.
• A virtual private network (VPN) is a secure, private connection through an untrusted network.
• Point-to-Point Tunneling Protocol (PPTP) is an outdated and insecure VPN method.
• Layer 2 Tunneling Protocol (L2TP) tunnels PPP traffic but doesn't encrypt it.
• Internet Protocol Security (IPSec) provides authentication, integrity, and confidentiality protections at the network layer.
• TLS can provide VPN connectivity at layer 5 of the OSI model.
• Web services use HTTP for client/server communication over networks like the internet.
• Service-oriented architecture (SOA) describes systems as interconnected components.
• Application Programming Interfaces (APIs) facilitate communication between components.
• Hypertext Transfer Protocol (HTTP) transfers data between clients and servers in a connectionless, stateless manner.
• Uniform Resource Identifier (URI) uniquely identifies resources on the internet.
• HTTP Secure (HTTPS) runs HTTP over TLS.
• Simple Object Access Protocol (SOAP) uses XML over HTTP for platform-independent remote process invocation.
• SOAP security uses Web Services Security (WS-Security) for message confidentiality, integrity, and authentication

Additional Information

• Representational State Transfer (REST) is a web service architectural pattern without SOAP.
• Domain Generation Algorithm (DGA) creates seemingly random domain names.
• DNS tunneling hides messages within DNS queries or responses.
• DNS reflection attacks exploit DNS servers, spoofing source addresses.
• DNS amplification attacks leverage small queries for large responses.
• Domain Name System Security Extensions (DNSSEC) ensures DNS record integrity, not confidentiality/availability.
• DNS over HTTPS (DoH) protects DNS queries via HTTPS/TCP/IP.
• Email spoofing disguises email sender identity.
• Simple Authentication and Security Layer (SASL) is a protocol-independent authentication framework.
• Sender Policy Framework (SPF) validates email senders to prevent spam.
• DomainKeys Identified Mail (DKIM) digitally signs emails to verify origin.
• Domain-based Message Authentication, Reporting & Conformance (DMARC) uses SPF and DKIM to protect emails.
• Secure MIME (S/MIME) encrypts and digitally signs emails.
• Distributed Network Protocol 3 (DNP3) is a communications protocol for SCADA systems.
• Controller Area Network (CAN) bus facilitates microcontroller and embedded device communication.
• Converged protocols combine independent functionalities over time.

Protocols and Technologies

• Fibre Channel over Ethernet (FCoE) encapsulates FC frames over Ethernet.
• Internet Small Computer Systems Interface (iSCSI) encapsulates SCSI data in TCP segments.
• Network segmentation divides networks into smaller subnetworks.
• Virtual LAN (VLAN) creates logical networks on a single physical network.
• Virtual eXtensible LAN (VxLAN) encapsulates Layer 2 frames for distributed networking.
• Software-Defined Networking (SDN) separates network control and forwarding planes using software.
• Software-Defined Wide Area Networking (SD-WAN) applies SDN principles to WANs.