I

Index

[SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [Z]

IANA (Internet Assigned Numbers Authority) website
ICMP
     packet-too-big ICMP unreachable messages
     reflexive ACL
ICMP (Internet Control Message Protocol)
     packet-too-big unreachable messages 2nd
     router hardening
         directed broadcasts
         redirects
         unreachables 2nd 3rd
    state
         tracking 2nd
ICMP destination unreachable messages
ICMP echo requests
     blocking 2nd
ICMP flooding
    DDoS attacks
         network performance 2nd 3rd 4th
     network performance
    smurfing attacks
         network performance 2nd
     zombie systems
ICMP messages
     filtering 2nd
     TCP/IP network performance 2nd
ICMP scans
     network security assessments 2nd
     Nmap
ICV (integrity check values)
identification phase (incident response)
identifying risks (security policies)
identifying weaknesses (IDS)
     security auditing
     security policy violations 2nd
IDS
     Snort 2nd
IDS (intrsion detection systems)
     reasons for 2nd
IDS (intrusion detection system)
     HTTP tunneling 2nd
IDS (intrusion detection systems)
     anomaly detection 2nd
    case studies
         networks with multiple external access points 2nd
         simple network infrastructures 2nd 3rd
         unrestricted network environments 2nd 3rd
     defining 2nd
    HIDS
         defining 2nd
     host-based 2nd 3rd
         categories of
         compromised hosts
         deploying 2nd
         file integrity checkers 2nd 3rd
         file integrity checkers, AIDE
         file integrity checkers, Samhain
         file integrity checkers, Tripwire
         file integrity checkers, Tripwire Manager
         file integrity checkers, Winalysis
         log analyzers
         log file monitoring utilities, Logcheck 2nd
         network connection monitoring utilities, BlackICE 2nd
         network connection monitoring utilities, PortSentry 2nd
         versus network IDS 2nd
     logs
    network
         versus host-based 2nd
    NIDS
         defining 2nd
         role in perimeter defense
     perimeter defense components, compatibility with
     perimeter defense, role in 2nd
     reporting
    roles of
         host attack detection 2nd
         incident handling
         weakness identification
         weakness identification, security auditing
         weakness identification, security policy violations 2nd
     sensors, deploying 2nd
         encrypted network traffic
         external networks 2nd
         firewalls 2nd
         high volume network traffic
         IDS management networks 2nd
         internal networks 2nd 3rd
         packet filters
         security maintenance 2nd
         spanning ports
         switches 2nd
     services
         distributed
         outsourced monitoring
     signature detection 2nd
         alerts
         detecting evasion techniques
         false positive/negative signatures 2nd 3rd
         unwanted alerts
     software 2nd
    worms
         identifying
IDS Is Dead report 2nd
IDS logs
     host-based firewalls 2nd
IDS management networks
     IDS sensor placement 2nd
ifconfig utility
     link layer troubleshooting
     network layer troubleshooting
IIOP (Internet Inter-ORB Protocol)
     interapplication communication
IKE (Internet Key Exchange) protocol
    authentication
         digital certificates
         pre-shared keys
     phase 1 negotiations 2nd 3rd
         authentication exchanges, main mode
         example of 2nd 3rd
     phase 2 negotiations
         example of
implicit denies 2nd 3rd
implicit permits
in/out keywords (ACL) 2nd 3rd
     VLAN interfaces
incident handling
     HoneyNet Project
     IDS
     log files 2nd
     security policies, implementing 2nd
incident response (perimeter security maintenance)
     automating 2nd
     notifications 2nd
     phases of 2nd
     response guidelines 2nd
incoming rulebase (NetScreen-100 external firewall) 2nd
information
     as crown jewels 2nd
    defense in depth
         cryptography
         cryptography, PGP
         cryptography, PKI
         diffusion of information 2nd 3rd
         diffusion of information, remote controlware
         diffusion of information, WAP
infrastructure mode (wireless networks)
ingress filtering 2nd 3rd 4th
     perimeter defense, role in 2nd
ingress filters
    adversarial reviews
         determining attacker access 2nd
initiators (proxy servers)
inline firewalls
     secure perimeter design 2nd
inline security devices
     system performance
Insertion, Evasion, and Denial of Service[COLON] Eluding Network Intrusion Detection [ITAL]
insiders
     Cisco stock options exploits
     secure perimeter design 2nd
inspect statements (CBAC)
Integrity (Check Point)
intelligent switches (NIPS) 2nd
interapplication communications
     CORBA
     DCOM 2nd
     HTTP
     IIOP
     SOA
     SOAP 2nd
     Web services 2nd 3rd
interfaces
     ACL, applying to
internal firewalls
     adversarial reviews
         determining attacker access 2nd 3rd 4th
         determining impact of misconfigurations/vulnerabilities 2nd 3rd 4th 5th 6th
         determining maximum amount of network access 2nd 3rd 4th 5th 6th 7th
    Nokia IP330
         adversarial reviews 2nd 3rd
         rulebases 2nd
     rulebases
internal network
     defense in depth infrastructure, role in
         antivirus software
         auditing 2nd
         configuration management 2nd
         host hardening 2nd
         personal firewalls 2nd 3rd
internal networks
     complex e-commerce site case studies 2nd
     hiding 2nd
     IDS sensor deployment 2nd 3rd
internal protected networks
     proxy firewalls
internal subnetting
     routers
Internet
     complex e-commerce site case studies 2nd 3rd
     VPN availability
Internet connections
    broadband
         case studies 2nd 3rd 4th 5th 6th
intranet VPN
intrasite redundancy
     fault tolerance 2nd 3rd 4th 5th
     firewall redundancy 2nd 3rd
     switch redundancy 2nd
intrasystem redundancy
     fault tolerance
introductions (network security assessment documentation)
IntruShield 2nd
intrusion detection
     alerts
     anomaly detection 2nd
    case studies
         networks with multiple external access points 2nd
         simple network infrastructures 2nd 3rd
         unrestricted network environments 2nd 3rd
     host-based IDS
         file integrity checkers
         log analyzers
     logging
     network log files
     perimeter defense components, compatibility with
     reasons for 2nd
     reporting
    roles of
         host attack detection 2nd
         incident handling
         weakness identification
         weakness identification, security auditing
         weakness identification, security policy violations 2nd
     sensors, deploying 2nd
         encrypted network traffic
         external networks 2nd
         firewalls 2nd
         high volume network traffic
         IDS management networks 2nd
         internal networks 2nd 3rd
         packet filters
         security maintenance 2nd
         spanning ports
         switches 2nd
     services
         distributed
         outsourced monitoring
     signature detection 2nd
         detecting evasion techniques
         false positive/negative signatures 2nd 3rd
         unwanted alerts
     software 2nd
intrusion prevention
intrusion prevention systems (IPS)
     CSA 2nd
     Deep Packet Inspection
     development of 2nd
     false positives
     Gartner IDS Is Dead report 2nd
    HIPS
         advantages of
         challenges of
         custom application dynamic rule creation 2nd
         deployment recommendations, attacks 2nd
         deployment recommendations, document requirements/testing procedures
         deployment recommendations, role in defense-in-depth architectures
         deployment recommendations, software update installation
         deployment recommendations, update control policies
         false positives
         monitoring application behavior
         monitoring file integrity
         OS shims
         real-world experience of
         system call interception
     limitations of 2nd 3rd
    NIPS
         ASIC 2nd
         chokepoint
         chokepoint devices
         chokepoint, firewalls 2nd 3rd 4th 5th 6th
         chokepoint, IDS plus something classification 2nd 3rd 4th 5th 6th 7th 8th 9th
         general-purpose CPU
         intelligent switches 2nd
         switch-type
         switch-type, deployment recommendations 2nd 3rd 4th 5th 6th 7th 8th 9th 10th
         switch-type, detection capabilities
         switch-type, environmental anomaly analysis
         switch-type, evasion resistance
         switch-type, latency requirements
         switch-type, organizational policy enforcement
         switch-type, passive analysis 2nd
         switch-type, product development
         switch-type, protocol scrubbing
         switch-type, rate limiting
         switch-type, security 2nd
         switch-type, stability demands
         switch-type, throughput demands
         switch-type, TippingPoint UnityOne IPS 2nd
         switch-type, TopLayer Attack Mitigator
    requirements of
         accuracy
         keeping current
         keeping state 2nd
         nullifying attacks
         speed 2nd
     Shallow Packet Inspection
Inurl search extension (Google)
inverse mapping
IOS updates (routers)
IP (Internet Protocol)
    address ranges
         blocking
    addresses
         friendly net access 2nd 3rd 4th
    spoofed addresses
         blocking
     TCP/IP, role in
    TTL
         network log analysis
     versions of 2nd
IP (Internet Protocols)
    reserved/private addresess
         ingress filtering 2nd 3rd 4th
IP addresses
     network security assessments, determining for
     probes, tracking 2nd
IP protocols
    firewalls
         software architecture
ip route statements
IP-based telephony systems
     secure perimeter design
IPChains 2nd
IPChains firewalls
     Nmap ACK scans 2nd
ipconfig utility
     link layer troubleshooting
     network layer troubleshooting 2nd
IPS (intrusion prevention systems)
     CSA 2nd
     Deep Packet Inspection
     defining
     development of 2nd
     false positives
     Gartner IDS Is Dead report 2nd
    HIPS
         advantages of
         challenges of
         custom application dynamic rule creation 2nd
         deployment recommendations, attacks 2nd
         deployment recommendations, document requirements/testing procedures
         deployment recommendations, role in defense-in-depth architectures
         deployment recommendations, software update installation
         deployment recommendations, update control policies
         false positives
         monitoring application behavior
         monitoring file integrity
         OS shims
         real-world experience of
         system call interception
     limitations of 2nd 3rd
    NIPS
         ASIC 2nd
         chokepoint
         chokepoint devices
         chokepoint, firewalls 2nd 3rd 4th 5th 6th
         chokepoint, IDS plus something classification 2nd 3rd 4th 5th 6th 7th 8th 9th
         general-purpose CPU
         intelligent switches 2nd
         switch-type
         switch-type, deployment recommendations 2nd 3rd 4th 5th 6th 7th 8th 9th 10th
         switch-type, detection capabilities
         switch-type, environmental anomaly analysis
         switch-type, evasion resistance
         switch-type, latency requirements
         switch-type, organizational policy enforcement
         switch-type, passive analysis 2nd
         switch-type, product development
         switch-type, protocol scrubbing
         switch-type, rate limiting
         switch-type, security 2nd
         switch-type, stability demands
         switch-type, throughput demands
         switch-type, TippingPoint UnityOne IPS 2nd
         switch-type, TopLayer Attack Mitigator
     perimeter defense, role in
    requirements of
         accuracy
         keeping current
         keeping state 2nd
         nullifying attacks
         speed 2nd
     Shallow Packet Inspection
IPSec 2nd
     AH protocol
         ESP protocol combinations 2nd
         ICV
         packet header information 2nd 3rd
    authentication
         pre-shared keys
    configuration examples
         Cisco routers 2nd 3rd 4th 5th 6th 7th 8th 9th
         Windows XP 2nd 3rd 4th 5th 6th 7th 8th
    ESP
         UDP encapsulation
         VPN perimeter defenses
     ESP protocol
         AH protocol combinations 2nd
         IPSec transport mode
         IPSec tunnel mode 2nd
         NAT 2nd
         packet header components 2nd
         packet traces, example of 2nd
    firewalls
         VPN
     gateway-to-gateway architectures
         VPN
     host-to-gateway architectures
         VPN
     host-to-host architectures
         VPN
     IKE protocol
         authentication, digital certificates
         authentication, pre-shared keys
         phase 1 negotiations 2nd 3rd
         phase 1 negotiations, authentication exchanges
         phase 1 negotiations, example of 2nd 3rd
         phase 2 negotiations
         phase 2 negotiations, example of
     NAT-T
     PAT 2nd
    routers
         VPN
     SA 2nd 3rd
     SAD 2nd 3rd
     SPD
     transport mode
         ESP protocol
    tunnel mode
         ESP protocol 2nd
     tunneling mode
     versus L2TP 2nd
    VPN
         case studies 2nd 3rd
         perimeter defenses 2nd 3rd
         server integration 2nd
     VPN client integration 2nd
     VPN concentrators
     wireless network security
IPSec packet-filtering
     server firewalls 2nd
IPTable logs
     analyzing
IPTables
     input rules 2nd
     IPv6
     output rules 2nd 3rd
     state tables, example of 2nd
     stateful firewalls 2nd 3rd 4th 5th 6th
IPv6
     Netfilter/IPTables
IPv6 ACL (access control lists) 2nd
ISDN network connection performance case study 2nd
isolated ports (PVLAN)
ISS Internet Scanner vulnerability scanner 2nd 3rd 4th