Tell me one, welcome back. Let's take a
look at. How do you secure the Network's? Such an eye chart in attacks?
One of the biggest things that I would really like to touch upon is
that it will be open in such a way that
a communication is always being sent in plain text.
As we have looked at the various attack vectors, most
of the cases tackle sitting on the same network,
was able to snap the data since it was been sent in,
plain text format, and either reader sensitive information,
or he was able to read the package that
are being sent and perform various applicable such
an adjustment techniques.
So, in order to prevent all of this mandible attack, we should
ensure that we Implement PLS in please.
So what do I mean by that? Is that the name of you
protocols starting with HTTP. That
is being used by all of our web servers by default. So
if we Implement HTTP as a protocol, that
is going to ensure that all the data is being sent in plain
text.
We need to ensure that we add an additional capability
of SSL layer. That
means we need to generate SSL certificates that
are added on top of this protocol in
such a way that the data is being sent on HTTP
protocol, one link. So that even though
attacker title snifter data, it will always be encrypted
in nature. One of the protocol that
is commonly used in the industry is FTP.
This is useful for file transfer mechanisms.
So even this spring protocol horses, the
same Threat by default FTP, you
always send data in plain text. In
order to prevent this either. We have an
alternative of adding SSL here so that we
initiate ftps connection. So
that data is always encrypted.
One of the alternative could be using SFTP, SFTP
would be running on top of SSH, and ensuring the
data is always encrypted.
On a fur companies use
email exchange protocol such as IMAP and POP
and even SMTP all of these particular protocols.
Can also be implemented using TLS and SSL so
that always sensitive communication. Always happen to
encrypted Channel.
So now, take a let's take a look at different secure.
Protocols. For example, when we talk about
telnet itself, which we actually
saw, which actually opens up a
bi-directional connection and it also has
the same vulnerability, but instead of using telnet
as a protocol itself, we can actually switch to
SSH as a protocol that says it
will also provide.
The same mechanism in order to login and this
will actually create an encrypted tunnel. Ensuring
the data is always encrypted and solid between the
two endpoints.
In cases where SSH can Darcy not
be used and we want to connect to and critical infrastructure. We
can use VPN. So these would be the
virtual private networks. That always run establishing
a secret tunnel between the
endpoint and the network. So in even trying
to skip the traffic between the endpoint,
And the particular for such a network. It will always
be encrypted. So these two protocol can
always suffice the need wherever we
need to have secure, protocols
implemented to encrypt traffic.
That's it for this video. Thank you.