text:
Network Security Tutorial
- Cameron Britton Gibbs
- 3 years ago
- Views:
1 Network Security Tutorial Contact: TSEC01_v1.0
2 Overview Network Security Fundamentals Security on Different Layers and Attack Mitigation Cryptography and PKI Resource Registration (Whois Database) Virtual Private Networks and IPsec
3 Network Security Fundamentals Network Security Workshop
4 Overview Why We Need Security Definitions and Concepts Access Control Risk vs. Vulnerability Threats and Attack Types
5 Why Security? The Internet was initially designed for connectivity Trust assumed We do more with the Internet nowadays Security protocols are added on top of the TCP/IP Fundamental aspects of information must be protected Confidential data Employee information Business models Protect identity and resources We can t keep ourselves isolated from the Internet Most business communications are done online We provide online services We get services from third-party organizations online
6 Internet Evolution LAN connectivity Application-specific More online content Cloud computing Application/data hosted in the cloud environment Different ways to handle security as the Internet evolves
7 Why Security? Key findings: Hacktivism and vandalism are the common DDoS attack motivation High-bandwidth DDoS attacks are the new normal First-ever IPv6 DDoS attacks are reported Trust issues across geographic boundaries Source: Arbor Networks Worldwide Infrastructure Security Report Volume VII
8 Breach Sources Aggregation Infiltration Exfiltration Source: Trustwave 2012 Global Security Report
9 Types of Security Computer Security generic name for the collection of tools designed to protect data and to thwart hackers Network Security measures to protect data during their transmission Internet Security measures to protect data during their transmission over a collection of interconnected networks
10 Goals of Information Security Confidentiality Integrity Availability prevents unauthorized use or disclosure of information safeguards the accuracy and completeness of information authorized users have reliable and timely access to information SECURITY
11 Access Control The ability to permit or deny the use of an object by a subject. It provides 3 essential services: Authentication (who can login) Authorization (what authorized users can do) Accountability (identifies what a user did)
12 Authentication A means to verify or prove a user s identity The term user may refer to: Person Application or process Machine or device Identification comes before authentication Provide username to establish user s identity To prove identity, a user must present either of the following: What you know (passwords, passphrase, PIN) What you have (token, smart cards, passcodes, RFID) Who you are (biometrics such as fingerprints and iris scan, signature or voice)
13 Examples of Tokens etoken RFID cards Smart Cards Fingerprint scanner
14 Trusted Network Standard defensive-oriented technologies Firewall Intrusion Detection Build TRUST on top of the TCP/IP infrastructure Strong authentication Public Key Infrastructure (PKI)
15 Strong Authentication An absolute requirement Two-factor authentication Passwords (something you know) Tokens (something you have) Examples: Passwords Tokens Tickets Restricted access PINs Biometrics Certificates
16 Two-factor Authentication Requires a user to provide at least two authentication factors to prove his identity something you know Username/userID and password something you have Token using a one-time password (OTP) The OTP is generated using a small electronic device in physical possession of the user Different OTP generated each time and expires after some time An alternative way is through applications installed on your mobile device Multi-factor authentication is also common
17 Authorization Defines the user s rights and permissions on a system Typically done after user has been authenticated Grants a user access to a particular resource and what actions he is permitted to perform on that resource Access criteria based on the level of trust: Roles Groups Location Time Transaction type
18 Authentication vs. Authorization Service Authentication Mechanism Authorization Mechanism Client Authentication simply identifies a party, authorization defines whether they can perform certain action RFC 3552
19 Authorization Concepts Authorization creep When users may possess unnecessarily high access privileges within an organization Default to Zero Start with zero access and build on top of that Need to Know Principle Least privilege; give access only to information that the user absolutely need Access Control Lists List of users allowed to perform particular access to an object (read, write, execute, modify)
20 Single Sign On Property of access control where a user logs in only once and gains access to all authorized resources within a system. Benefits: Ease of use Reduces logon cycle (time spent re-entering passwords for the same identity) Common SSO technologies: Kerberos, RADIUS Smart card based OTP Token Disadvantage: Single point of attack
21 Types of Access Control Centralized Access Control Radius TACACS+ Diameter Decentralized Access Control Control of access by people who are closer to the resources No method for consistent control
22 Accountability The security goal that generates the requirement for actions of an entity to be traced uniquely to that entity Senders cannot deny sending information Receivers cannot deny receiving it Users cannot deny performing a certain action Supports nonrepudiation, deterrence, fault isolation, intrusion detection and prevention and after-action recovery and legal action Source: NIST Risk Management Guide for Information Technology Systems
23 Integrity Security goal that generates the requirement for protection against either intentional or accidental attempts to violate data integrity Data integrity The property that data has when it has not been altered in an unauthorized manner System integrity The quality that a system has when it performs its intended function in an unimpaired manner, free from unauthorized manipulation Source: NIST Risk Management Guide for Information Technology Systems
24 Risk, Threat and Vulnerability Vulnerability - weakness in a system Risk - likelihood that a particular threat using a particular attack will exploit a particular vulnerability Exploit - taking advantage of a vulnerability Non-repudiation assurance that both parties are involved in the transaction
25 Vulnerability A weakness in security procedures, network design, or implementation that can be exploited to violate a corporate security policy Software bugs Configuration mistakes Network design flaw Lack of encryption Exploit Taking advantage of a vulnerability
26 Threat Any circumstance or event with the potential to cause harm to a networked system. These are some example of threats: Denial of service Attacks make computer resources (e.g., bandwidth, disk space, or CPU time) unavailable to its intended users Unauthorised access Access without permission issues by a rightful owner of devices or networks Impersonation Worms Viruses
27 Risk The possibility that a particular vulnerability will be exploited IT-related risks arise from: Unauthorized (malicious or accidental) disclosure, modification, or destruction of information Unintentional errors or omissions IT disruptions due to natural or man-made disasters Failure to exercise due care and diligence in implementation and operation of the IT system Risk = Threat * Vulnerability (* Impact)
28 Risk Analysis Identification, assessment and reduction of risks to an acceptable level the process of identifying security risks and probability of occurrence, determining their impact, and identifying areas that require protection Three parts: Risk assessment determine the possible risks Risk management evaluating alternatives for mitigating the risk Risk communication presenting this material in an understanble way to decision makers and/or the public
29 Risk Management vs. Cost of Security Risk mitigation The process of selecting appropriate controls to reduce risk to an acceptable level The level of acceptable risk Determined by comparing the risk of security hole exposure to the cost of implementing and enforcing the security policy Trade-offs between safety, cost, and availability
30 Attack Sources Active vs. passive Active involves writing data to the network. It is common to disguise one s address and conceal the identity of the traffic sender Passive involves only reading data on the network. Its purpose is breach of confidentiality. This is possible if: Attacker has gained control of a host in the communication path between two victim machines Attacker has compromised the routing infrastructure to arrange the traffic pass through a compromised machine Active Attacks Denial of Service attacks Spoofing Man in the Middle ARP poisoning Smurf attacks Buffer overflow SQL Injection Passive Attacks Reconnaissance Eavesdropping Port scanning Source: RFC 4778
31 Attack Sources On-path vs. Off-path On-path routers (transmitting datagrams) can read, modify, or remove any datagram transmitted along the path Off-path hosts can transmit datagrams that appear to come from any hosts but cannot necessarily receive datagrams intended for other hosts If attackers want to receive data, they have to put themselves on-path How easy is it to subvert network topology? It is not easy thing to do but, it is not impossible Insider vs. outsider What is definition of perimeter/border? Deliberate attack vs. unintentional event Configuration errors and software bugs are as harmful as a deliberate malicious network attack Source: RFC 4778
32 General Threats Masquerade An entity claims to be another entity Eavesdropping An entity reads information it is not intended to read Authorization violation An entity uses a service or resource it is not intended to use Loss or modification of information Data is being altered or destroyed Denial of communication acts (repudiation) An entity falsely denies its participation in a communication act Forgery of information An entity creates new information in the name of another entity Sabotage Any action that aims to reduce the availability and/or correct functioning of services or systems
33 Reconnaissance Attack Unauthorised users to gather information about the network or system before launching other more serious types of attacks Also called eavesdropping Information gained from this attack is used in subsequent attacks (DoS or DDoS type) Examples of relevant information: Names, address Common practice to use a person s first initial and last name for accounts Practically anything
34 Man-in-the-Middle Attack Active eavesdropping Attacker makes independent connections with victims and relays messages between them, making them believe that they are talking directly to each other overa private connection, when in fact the entire conversation is controlled by the attacker Usually a result of lack of end-to-end authentication Masquerading - an entity claims to be another entity
35 Session Hijacking Exploitation of a valid computer session, to gain unauthorized access to information or services in a computer system. Theft of a magic cookie used to authenticate a user to a remote server (for web developers) Four methods: Session fixation attacker sets a user s session id to one known to him, for example by sending the user an with a link that contains a particular session id. Session sidejacking attacker uses packet sniffing to read network traffic between two parties to steal the session cookie.
36 Denial of Service (DoS) Attack Attempt to make a machine or network resource unavailable to its intended users. Purpose is to temporarily or indefinitely interrupt or suspend services of a host connected to the Internet Methods to carry out this attack may vary Saturating the target with external communications requests (such that it can t respond to legitimate traffic) SERVER OVERLOAD May include malware to max out target resources (such as CPU), trigger errors, or crash the operating system DDoS attacks are more dynamic and comes from a broader range of attackers Examples: SYN flooding, Smurf attacks, Starvation Can be used as a redirection and reconnaissance technique
37 Questions?
38 Layered Security & Attack Mitigation Network Security Workshop
39 Overview Attacks in Different Layers Security Technologies Link-Layer Security Network Layer Security Transport Layer Security Application Layer Security
40 Attacks on Different Layers Application Presentation Session Transport Network Data Link Physical OSI Reference Model Layer 5: SMB, NFS, Socks Layer 2: PPTP, Token Ring Application Layer 7: DNS, DHCP, HTTP, FTP, IMAP, LDAP, NTP, Radius, SSH, SMTP, SNMP, Telnet, TFTP DNS Poisoning, Phishing, SQL injection, Spam/Scam Transport Layer 4: TCP, UDP TCP attacks, Routing attack, SYN flooding, Sniffing Layer 3: IPv4, IPv6, ICMP, Internet IPSec Ping/ICMP Flood Network Access ARP spoofing, MAC flooding TCP/IP Model
41 Layer 2 Attacks ARP Spoofing MAC attacks DHCP attacks VLAN hopping
42 1 ARP Spoofing I want to connect to I don t know the MAC address Wait, I am ! ARP Request BB-BB-BB-BB-BB-BB AA-AA-AA-AA-AA-AA ARP Reply CC-CC-CC-CC-CC-CC Client s ARP Cache already poisoned It will communicate directly to the fake destination I am This is my MAC address DD-DD-DD-DD-DD- DD
43 MAC Flooding Exploits the limitation of all switches fixed CAM table size CAM = Content Addressable memory = stores info on the mapping of individual MAC addresses to physical ports on the switch. Port 1 Port 2 Port 3 Port 4 00:01:23:45:67:A1 x 00:01:23:45:67:B2 x 00:01:23:45:67:C3 x 00:01:23:45:67:D4 x
44 DHCP Attacks DHCP Starvation Attack Broadcasting vast number of DHCP requests with spoofed MAC address simultaneously. DoS attack using DHCP leases Rogue DHCP Server Attacks Server runs out of IP addresses to allocate to valid users Attacker sends many different DHCP requests with many spoofed addresses.
45 DHCP Attack Types Solution: enable DHCP snooping ip dhcp snooping (enable dhcp snooping globally) ip dhcp snooping vlan <vlan-id> (for specific vlans) ip dhcp snooping trust ip dhcp snooping limit rate <rate>
46 Layer 3 Attacks ICMP Ping Flood ICMP Smurf Ping of death
47 1 Ping Flood Internet Attacker Victim Other forms of ICMP attack: - Ping of death - ICMP ping flood Broadcas t Enabled Network
48 Mitigating Sniffing Attacks Avoid using insecure protocols like basic HTTP authentication and telnet. If you have to use an insecure protocol, try tunneling it through something to encrypt the sensitive data. Run ARPwatch. Try running tools like sniffdet and Sentinel to detect network cards in promiscuous mode that may be running sniffing software.
49 Routing Attacks Attempt to poison the routing information Distance Vector Routing Announce 0 distance to all other nodes Blackhole traffic Eavesdrop Link State Routing Can drop links randomly Can claim direct link to any other routers A bit harder to attack than DV BGP attacks ASes can announce arbitrary prefix ASes can alter path
50 TCP Attacks SYN Flood occurs when an attacker sends SYN requests in succession to a target. Causes a host to retain enough state for bogus halfconnections such that there are no resources left to establish new legitimate connections.
51 TCP Attacks Exploits the TCP 3-way handshake Attacker sends a series of SYN packets without replying with the ACK packet Finite queue size for incomplete connections SYN SYN+ACK Attacker ACK? Server (Victim) OPEN CONNECTIONS
52 1 Application Layer Attacks Applications don t authenticate properly Authentication information in clear FTP, Telnet, POP DNS insecurity DNS poisoning DNS zone transfer
53 1 Application Layer Attacks Scripting vulnerabilities Cookie poisoning Buffer overflow Hidden field manipulation Parameter tampering Cross-site scripting SQL injection
54 Application-Layer Attacks Source: Arbor Networks Worldwide Infrastructure Security Report Volume VII
55 Application Layer DDoS: Slowloris Incomplete HTTP requests Properties Low bandwidth Keep sockets alive Only affects certain web servers Doesn t work through load balancers Managed to work around accf_http
56 Web Application Security Risks Injection Cross-Site Scripting Broken authentication and Session Management Insecure Direct Object References Cross-site Request Forgery (CSRF) Insecure Cryptographic Storage Failure to Restrict URL Access Insufficient Transport Layer Protection Unvalidated Redirects and Forwards Source: OWASP Top 10 Application Security Risks, 2010
57 DNS Changer Criminals have learned that if they can control a user s DNS servers, they can control what sites the user connects to the Internet. How: infect computers with a malicious software (malware) This malware changes the user s DNS settings with that of the attacker s DNS servers Points the DNS configuration to DNS resolvers in specific address blocks and use it for their criminal enterprise For more: see the NANOG presentation by Merike
58 Rogue DNS Servers through through through through through through If your computer is configured with one of these DNS servers, it is most likely infected with DNSChanger malware
59 Top DNS Changer Infections By country (as of 11 June, 2012): USA IT IN GB DE By ASNs AS9829 (India) AS3269 () AS7922 () AS3320 () 9250 AS7132 () 6743 More info at
60 DNS Vulnerabilities Corrupting data" Zone administrator 1" Zone file master Impersonating master" 4" Caching forwarder Cache impersonation" Dynamic updates 2" Unauthorized updates" slaves 3" Cache pollution by" Data spoofing" 5" resolver Server protection! Data protection!
61 DNS Cache Poisoning Caching incorrect resource record that did not originate from authoritative DNS sources. Result: connection (web, , network) is redirected to another target (controlled by the attacker)
62 DNS Cache Poisoning 1 I want to access QID=64569 QID=64570 QID=64571 match! (pretending to be the authoritative zone) Client 2 DNS Caching Server QID= Root/GTLD QID= Webserver ( ) ns.example.com
63 DNS Amplification Queries for Root/GTLD DNS Recursive server Compromised Machines (spoofed IP) ns.example.com Victim Server Attacker
64 Common Types of Attack Ping sweeps and port scans - reconnaissance Sniffing capture packet as they travel through the network Man-in-the-middle attack intercepts messages that are intended for a valid device Spoofing - sets up a fake device and trick others to send messages to it Hijacking take control of a session Denial of Service (DoS) and Distributed DoS (DDoS)
65 Wireless Attacks WEP first security mechanism for wireless networks Weaknesses in this protocol were discovered by Fluhrer, Mantin and Shamir, whose attacks became known as FMS attacks Tools were developed to automate WEP cracking Chopping attack were released to crack WEP more effectively and faster Cloud-based WPA cracker
66 Man in the Middle Attacks (Wireless) Creates a fake access point and have clients authenticate to it instead of a legitimate one. Capture traffic to see usernames, passwords, etc that are sent in clear text.
67 Botnet Collection of compromised computers (or bot ) Computers are targeted by malware (malicious software) Once controlled, an attacker can use the compromised computer via standards-based network protocol such as IRC and HTTP How to become a bot: Drive-by downloads (malware) Go to malicious websites (exploits web browser vulnerabilities) Run malicious programs (Trojan) from websites or as attachment
68 Password Cracking Dictionary attacks Guessing passwords using a file of 1M possible password values Ordinary words and people s names Offline dictionary attack when the entire password file has been attacked Use random characters as password with varying upper and lower case, numbers, and symbols Brute-force attacks Checking all possible values until it has been found The resource needed to perform this attack grows exponentially while increasing the key size Social engineering
69 Pharming and Phishing Phishing victims are redirected to a fake website that looks genuine. When the victim supplies his account and password, this can be used by the attacker to the target site Typically uses fraud s with clickable links to fake websites Pharming redirect a website s traffic to another fake site by changing the victim s DNS settings or hosts file
70 Security on Different Layers Application Presentation Session Transport Network Data Link Physical Layer 7: DNS, DHCP, HTTP, FTP, IMAP, LDAP, NTP, Radius, SSH, SMTP, SNMP, Telnet, TFTP DNS HTTPS, Poisoning, DNSSEC, Phishing, PGP, SQL SMIME injection, Spam/Scam Layer 5: SMB, NFS, Socks TCP attacks, TLS, Routing SSL, SSH attack, Layer 4: TCP, UDP Layer 3: IPv4, IPv6, ICMP, IPSec Ping/ICMP IPSec Flood Layer 2: ARP, Token Ring SYN flooding, Sniffing ARP IEEE spoofing, 802.1X, PPP MAC & flooding PPTP
71 Link-Layer Security Layer 2 Forwarding (L2F) Point-to-Point Tunneling Protocol (PPTP) Layer 2 Tunneling Protocol (L2TP)
72 Layer 2 Forwarding Protocol Created by Cisco Systems and replaced by L2TP Permits the tunneling of the link layer High-level Data Link Control (HDLC), async HDLC, or Serial Line Internet Protocol (SLIP) frames of higher-level protocols IP/UDP L2F PPP (Data) Carrier Protocol Encapsulator Protocol Passenger Protocol
73 Point to Point Tunneling Protocol Initiated by Microsoft but later became an informational standard in the IETF (RFC 2637) Client/server architecture that allows PPP to be tunneled through an IP network and decouples functions that exist in current NAS. Connection-oriented
74 Layer 2 Tunneling Protocol Combination of L2F and PPTP Published as RFC 2661 and known as L2TPv2 L2TPv3 provides additional security features and the ability to carry data links other than PPP The two end-points are L2TP Access Concentrator (LAC) or L2TP Network Server (LNS)
75 PPPoE PPP over Ethernet Defined in RFC 2516 A means to encapsulate PPP packets over the Ethernet link layer Mostly used in ADSL environments to provide access control, billing, and type of service on a per-user rather than a per-site basis
76 Transport Layer Security Secure Socket Layer (SSL) Secure Shell Protocol SOCKS Protocol
77 SSL/TLS TLS and SSL encrypts the segments of network connections above the Transport Layer. Versions: SSLv1 designed by Netscape SSLv2 publicly released in 1994; has a number of security flaws; uses RC4 for encryption and MD5 for authentication SSLv3 added support for DSS for authentication and DH for key agreement TLS based on SSLv3; uses DSS for authentication, DH for key agreement, and 3DES for encryption TLS is the IETF standard which succeeded SSL.
78 SSL Handshake SSL Client SSL Server Client initiates SSL connection Server sends digital certificate and selected cipher suite Client sends encrypted shared secret Message encryption and integrity algorithms are negotiated Session keys are generated
79 Advantages of SSL The connection is private Encryption is used after initial handshake to define a secret key Encryption uses symmetric cryptography (DES or RC4) Peer s identity can be authenticated using asmmetric cryptography (RSA or DSS) The connection is reliable Message transport includes message integrity check using a keyed MAC. Secure hash functions (SHA or MD5) are used for MAC computation.
80 Applications Using SSL/TLS Protocol Defined Port Number SSL/TLS Port Number HTTP NNTP LDAP FTP-data FTP-control Telnet IMAP POP SMTP
81 Secure Shell Protocol (SSH) Protocol for secure remote login Provides support for secure remote login, secure file transfer, and secure forwarding of TCP/IP and X Window System traffic Consists of 3 major components: Transport layer protocol (server authentication, confidentiality, integrity) User authentication protocol (authenticates client to the server) Connection protocol (multiplexes the encrypted tunnel into several logical channels)
82 Application Layer Security HTTPS PGP (Pretty Good Privacy) SMIME (Secure Multipurpose Internet Mail Extensions) TSIG and DNSSEC Wireless Encryption - WEP, WPA, WPA2
83 HTTPS Hypertext Transfer Protocol Secure Widely-used, message-oriented communications protocol Connectionless oriented protocol Technically not a protocol in itself, but simply layering HTTP on top of the SSL/TLS protocol Encapsulates data after security properties of the session Not to be confused with S-HTTP Note: A website must use HTTPS everywhere, otherwise it is still vulnerable to some attacks
84 Pretty Good Privacy (PGP) Stands for Pretty Good Privacy, developed by Phil Zimmerman in 1995 PGP is a hybrid cryptosystem combines some of the best features of both conventional and public key cryptography Assumptions: All users are using public key cryptography and have generated private/public key pairs (using RSA or El Gamal) All users also use symmetric key system (DES or Rijndael) Offers authentication, confidentiality, compression, compatibility and segmentation
85 S/MIME Secure Multipurpose Internet Mail Extensions Uses public key certificates conforming to standard X.509 Very similar to PGP
86 Securing the Nameserver Run the most recent version of the DNS software Bind or Unbound Apply the latest patches Hide version Restrict queries Allow-query { acl_match_list; }; Prevent unauthorized zone transfers Allow-transfer { acl_match_list; }; Run BIND with the least privilege (use chroot) Randomize source ports don t use query-source option Secure the box Use TSIG and DNSSEC
87 DNSSEC DNSSEC Domain Name Security Extensions A set of extensions to DNS that provides Origin authentication of DNS data Data integrity Authenticated denial of existence designed to protect against attacks such as DNS cache poisoning. Adds four new resource record types: RRSIG (Resource Record Signature) DNSKEY (DNS Public Key) DS (Delegation Signer) NSEC (Next Secure)
88 Questions?
89 Cryptography Network Security Workshop
90 Overview What is Cryptography? Symmetric Key Cryptography Asymmetric Key Cryptography Block and Stream Cipher Digital Signature and Message Digest
91 Cryptography Cryptography is everywhere German Lorenz cipher machine
92 Cryptography Cryptography deals with creating documents that can be shared secretly over public communication channels Other terms closely associated Cryptanalysis = code breaking Cryptology Kryptos (hidden or secret) and Logos (description) = secret speech / communication combination of cryptography and cryptanalysis Cryptography is a function of plaintext and a cryptographic key C = F(P, k) Notation: Plaintext (P) Ciphertext (C) Cryptographic Key (k)
93 Typical Scenario Alice wants to send a secret message to Bob What are the possible problems? Data can be intercepted What are the ways to intercept this message? How to conceal the message? Encryption
94 Crypto Core Secure key establishment Alice has key (k) Bob has key (k) Secure communication Confidentiality and integrity m Alice has key (k) Bob has key (k) Source: Dan Boneh, Stanford
95 It can do much more Digital Signatures Anonymous communication Anonymous digital cash Spending a digital coin without anyone knowing my identity Buy online anonymously? Elections and private auctions Finding the winner without actually knowing individual votes (privacy) Source: Dan Boneh, Stanford
96 Other uses are also theoretically possible (Crypto magic) Privately outsourcing computation E(query) What did she search for? Alice with search query E(results) Google Zero knowledge (proof of knowledge) I know the factorial of N Proof I know the factorial of N Bob Source: Dan Boneh, Stanford
97 History: Ciphers Substitution cipher involves replacing an alphabet with another character of the same alphabet set Can be mono-alphabetic (single set for substitution) or polyalphabetic system (multiple alphabetic sets) Example: Caesar cipher, a mono-alphabetic system in which each character is replaced by the third character in succession Vigenere cipher, a poly-alphabetic cipher that uses a 26x26 table of characters
98 How to Break a Substitution Cipher UKBYBIPOUZBCUFEEBORUKBYBHOBBRFESPVKBWFOFERVNBCVBZPRUBOFERVNBCVBPCYYFVUFO FEIKNWFRFIKJNUPWRFIPOUNVNIPUBRNCUKBEFWWFDNCHXCYBOHOPYXPUBNCUBOYNRVNIWN CPOJIOFHOPZRVFZIXUBORJRUBZRBCHNCBBONCHRJZSFWNVRJRUBZRPCYZPUKBZPUNVPWPCYVF ZIXUPUNFCPWRVNBCVBRPYYNUNFCPWWJUKBYBIPOUZBCUIPOUNVNIPUBRNCHOPYXPUBNCUB OYNRVNIWNCPOJIOFHOPZRNCRVNBCUNENVVFZIXUNCHPCYVFZIXUPUNFCPWZPUKBZPUNVR (1) Use frequency of the English letters e = 12.7% t = 9.1 % a = 8.1% (2) Use frequency of pairs of letters he, in, an, th In the example, B appeared 36 times, U 33 times, and P 32 times NC appeared 11 times, PU 10 times UKB appeared 6 times Source: Dan Boneh, Stanford
99 Transposition Cipher No letters are replaced, they are just rearranged. Rail Fence Cipher another kind of transposition cipher in which the words are spelled out as if they were a rail fence.
100 History: Rotor Machines ( ) Hebern machine single rotor Enigma rotors
101 Modern Crypto Algorithms specifies the mathematical transformation that is performed on data to encrypt/decrypt Crypto algorithm is NOT proprietary Analyzed by public community to show that there are no serious weaknesses Explicitly designed for encryption
102 Encryption process of transforming plaintext to ciphertext using a cryptographic key Used all around us In Application Layer used in secure , database sessions, and messaging In session layer using Secure Socket Layer (SSL) or Transport Layer Security (TLS) In the Network Layer using protocols such as IPSec Benefits of good encryption algorithm: Resistant to cryptographic attack They support variable and long key lengths and scalability They create an avalanche effect No export or import restrictions
Network Security Fundamentals
APNIC elearning: Network Security Fundamentals 27 November 2013 04:30 pm Brisbane Time (GMT+10) Introduction Presenter Sheryl Hermoso Training Officer firstname.lastname@example.com Specialties: Network Security IPv6More information
APNIC elearning: Network Security Fundamentals. 20 March 2013 10:30 pm Brisbane Time (GMT+10)
APNIC elearning: Network Security Fundamentals 20 March 2013 10:30 pm Brisbane Time (GMT+10) Introduction Presenter/s Nurul Islam Roman Senior Training Specialist firstname.lastname@example.com Specialties: Routing &More information
APNIC elearning: Cryptography Basics. Contact: esec02_v1.0
APNIC elearning: Cryptography Basics Contact: firstname.lastname@example.com esec02_v1.0 Overview Cryptography Cryptographic Algorithms Encryption Symmetric-Key Algorithm Block and Stream Cipher Asymmetric Key AlgorithmMore information
Internet and Network Security Fundamentals
Internet and Network Security Fundamentals Presenters Champika Wijayatunga Training Manager, APNIC email@example.com Overview Network Security Basics Security Issues, Threats and Attacks CryptographyMore information
Security. Contents. S-72.3240 Wireless Personal, Local, Metropolitan, and Wide Area Networks 1
Contents Security requirements Public key cryptography Key agreement/transport schemes Man-in-the-middle attack vulnerability Encryption. digital signature, hash, certification Complete security solutionsMore information
Network Security Workshop
Network Security Workshop Contact: firstname.lastname@example.com WSEC01_v1.0 Overview Network Security Fundamentals Security on Different Layers and Attack Mitigation Cryptography and PKI Device and InfrastructureMore information
7 Network Security. 7.1 Introduction 7.2 Improving the Security 7.3 Internet Security Framework. 7.5 Absolute Security?
7 Network Security 7.1 Introduction 7.2 Improving the Security 7.3 Internet Security Framework 7.4 Firewalls 7.5 Absolute Security? 7.1 Introduction Security of Communications data transport e.g. riskMore information
Security+ Guide to Network Security Fundamentals, Third Edition. Chapter 12 Applying Cryptography
Security+ Guide to Network Security Fundamentals, Third Edition Chapter 12 Applying Cryptography Objectives Define digital certificates List the various types of digital certificates and how they are usedMore information
Chapter 10. Network Security
Chapter 10 Network Security 10.1. Chapter 10: Outline 10.1 INTRODUCTION 10.2 CONFIDENTIALITY 10.3 OTHER ASPECTS OF SECURITY 10.4 INTERNET SECURITY 10.5 FIREWALLS 10.2 Chapter 10: Objective We introduceMore information
CS5008: Internet Computing
CS5008: Internet Computing Lecture 22: Internet Security A. O Riordan, 2009, latest revision 2015 Internet Security When a computer connects to the Internet and begins communicating with others, it isMore information
IT Networks & Security CERT Luncheon Series: Cryptography
IT Networks & Security CERT Luncheon Series: Cryptography Presented by Addam Schroll, IT Security & Privacy Analyst 1 Outline History Terms & Definitions Symmetric and Asymmetric Algorithms Hashing PKIMore information
Overview. SSL Cryptography Overview CHAPTER 1
CHAPTER 1 Note The information in this chapter applies to both the ACE module and the ACE appliance unless otherwise noted. The features in this chapter apply to IPv4 and IPv6 unless otherwise noted. SecureMore information
Security vulnerabilities in the Internet and possible solutions
Security vulnerabilities in the Internet and possible solutions 1. Introduction The foundation of today's Internet is the TCP/IP protocol suite. Since the time when these specifications were finished inMore information
a) Encryption is enabled on the access point. b) The conference room network is on a separate virtual local area network (VLAN)
MIS5206 Week 12 Your Name Date 1. Which significant risk is introduced by running the file transfer protocol (FTP) service on a server in a demilitarized zone (DMZ)? a) User from within could send a fileMore information
CS 356 Lecture 27 Internet Security Protocols. Spring 2013
CS 356 Lecture 27 Internet Security Protocols Spring 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access Control ListsMore information
Lecture 9 - Network Security TDTS41-2006 (ht1)
Lecture 9 - Network Security TDTS41-2006 (ht1) Prof. Dr. Christoph Schuba Linköpings University/IDA firstname.lastname@example.com Reading: Office hours: [Hal05] 10.1-10.2.3; 10.2.5-10.7.1; 10.8.1 9-10am on Oct. 4+5,More information
Overview of Network Security The need for network security Desirable security properties Common vulnerabilities Security policy designs
Overview of Network Security The need for network security Desirable security properties Common vulnerabilities Security policy designs Why Network Security? Keep the bad guys out. (1) Closed networksMore information
EXAM questions for the course TTM4135 - Information Security May 2013. Part 1
EXAM questions for the course TTM4135 - Information Security May 2013 Part 1 This part consists of 5 questions all from one common topic. The number of maximal points for every correctly answered questionMore information
APNIC elearning: IPSec Basics. Contact: firstname.lastname@example.com. esec03_v1.0
APNIC elearning: IPSec Basics Contact: email@example.com esec03_v1.0 Overview Virtual Private Networks What is IPsec? Benefits of IPsec Tunnel and Transport Mode IPsec Architecture Security AssociationsMore information
Client Server Registration Protocol
Client Server Registration Protocol The Client-Server protocol involves these following steps: 1. Login 2. Discovery phase User (Alice or Bob) has K s Server (S) has hash[pw A ].The passwords hashes areMore information
E-Commerce Security. The Client-Side Vulnerabilities. Securing the Data Transaction LECTURE 7 (SECURITY)
E-Commerce Security An e-commerce security system has four fronts: LECTURE 7 (SECURITY) Web Client Security Data Transport Security Web Server Security Operating System Security A safe e-commerce systemMore information
12/3/08. Security in Wireless LANs and Mobile Networks. Wireless Magnifies Exposure Vulnerability. Mobility Makes it Difficult to Establish Trust
Security in Wireless LANs and Mobile Networks Wireless Magnifies Exposure Vulnerability Information going across the wireless link is exposed to anyone within radio range RF may extend beyond a room orMore information
INF3510 Information Security University of Oslo Spring 2011. Lecture 9 Communication Security. Audun Jøsang
INF3510 Information Security University of Oslo Spring 2011 Lecture 9 Communication Security Audun Jøsang Outline Network security concepts Communication security Perimeter security Protocol architectureMore information
Content Teaching Academy at James Madison University
Content Teaching Academy at James Madison University 1 2 The Battle Field: Computers, LANs & Internetworks 3 Definitions Computer Security - generic name for the collection of tools designed to protectMore information
TCP/IP and Encryption. CIT304 University of Sunderland Harry R. Erwin, PhD
TCP/IP and Encryption CIT304 University of Sunderland Harry R. Erwin, PhD Resources Garfinkel and Spafford, 1996, Practical UNIX and Internet Security, O Reilly, ISBN: 1-56592-148-8 B. Schneier, 2000,More information
VPN SECURITY. February 2008. The Government of the Hong Kong Special Administrative Region
VPN SECURITY February 2008 The Government of the Hong Kong Special Administrative Region The contents of this document remain the property of, and may not be reproduced in whole or in part without theMore information
SY0-201. system so that an unauthorized individual can take over an authorized session, or to disrupt service to authorized users.
system so that an unauthorized individual can take over an authorized session, or to disrupt service to authorized users. From a high-level standpoint, attacks on computer systems and networks can be groupedMore information
Applied Cryptology. Ed Crowley
Applied Cryptology Ed Crowley 1 Basics Topics Basic Services and Operations Symmetric Cryptography Encryption and Symmetric Algorithms Asymmetric Cryptography Authentication, Nonrepudiation, and AsymmetricMore information
Security + Certification (ITSY 1076) Syllabus
Security + Certification (ITSY 1076) Syllabus Course: ITSY 1076 Security+ 40 hours Course Description: This course is targeted toward an Information Technology (IT) professional who has networking andMore information
Cornerstones of Security
Internet Security Cornerstones of Security Authenticity the sender (either client or server) of a message is who he, she or it claims to be Privacy the contents of a message are secret and only known toMore information
Today s Topics SSL/TLS. Certification Authorities VPN. Server Certificates Client Certificates. Trust Registration Authorities
SSL/TLS Today s Topics Server Certificates Client Certificates Certification Authorities Trust Registration Authorities VPN IPSec Client tunnels LAN-to-LAN tunnels Secure Sockets Layer Secure Sockets LayerMore information
Chapter 7 Transport-Level Security
Cryptography and Network Security Chapter 7 Transport-Level Security Lectured by Nguyễn Đức Thái Outline Web Security Issues Security Socket Layer (SSL) Transport Layer Security (TLS) HTTPS Secure ShellMore information
CS 665: Computer System Security. Network Security. Usage environment. Sources of vulnerabilities. Information Assurance Module
CS 665: Computer System Security Network Security Bojan Cukic Lane Department of Computer Science and Electrical Engineering West Virginia University 1 Usage environment Anonymity Automation, minimal humanMore information
Chapter 17. Transport-Level Security
Chapter 17 Transport-Level Security Web Security Considerations The World Wide Web is fundamentally a client/server application running over the Internet and TCP/IP intranets The following characteristicsMore information
Network Security [2] Plain text Encryption algorithm Public and private key pair Cipher text Decryption algorithm. See next slide
Network Security [2] Public Key Encryption Also used in message authentication & key distribution Based on mathematical algorithms, not only on operations over bit patterns (as conventional) => much overheadMore information
Overview of CSS SSL. SSL Cryptography Overview CHAPTER
CHAPTER 1 Secure Sockets Layer (SSL) is an application-level protocol that provides encryption technology for the Internet, ensuring secure transactions such as the transmission of credit card numbersMore information
Network Access Security. Lesson 10
Network Access Security Lesson 10 Objectives Exam Objective Matrix Technology Skill Covered Exam Objective Exam Objective Number Firewalls Given a scenario, install and configure routers and switches.More information
ELE548 Research Essays CRYPTOGRAPHY IN NETWORK SECURITY AUTHOR: SHENGLI LI INSTRUCTOR: DR. JIEN-CHUNG LO Date: March 5, 1999 Computer network brings lots of great benefits and convenience to us. We canMore information
COSC 472 Network Security
COSC 472 Network Security Instructor: Dr. Enyue (Annie) Lu Office hours: http://faculty.salisbury.edu/~ealu/schedule.htm Office room: HS114 Email: firstname.lastname@example.com Course information: http://faculty.salisbury.edu/~ealu/cosc472/cosc472.htmlMore information
Outline. INF3510 Information Security. Lecture 10: Communications Security. Communication Security Analogy. Network Security Concepts
Outline INF3510 Information Security Lecture 10: Communications Security Network security concepts Communication security Perimeter security Protocol architecture and security services Example securityMore information
Transport Level Security
Transport Level Security Overview Raj Jain Washington University in Saint Louis Saint Louis, MO 63130 firstname.lastname@example.com Audio/Video recordings of this lecture are available at: http://www.cse.wustl.edu/~jain/cse571-14/More information
Lecture 10: Communications Security
INF3510 Information Security Lecture 10: Communications Security Audun Jøsang University of Oslo Spring 2015 Outline Network security concepts Communication security Perimeter security Protocol architectureMore information
EUCIP - IT Administrator. Module 5 IT Security. Version 2.0
EUCIP - IT Administrator Module 5 IT Security Version 2.0 Module 5 Goals Module 5 Module 5, IT Security, requires the candidate to be familiar with the various ways of protecting data both in a singleMore information
20-CS-6053-00X Network Security Spring, 2014. An Introduction To. Network Security. Week 1. January 7
20-CS-6053-00X Network Security Spring, 2014 An Introduction To Network Security Week 1 January 7 Attacks Criminal: fraud, scams, destruction; IP, ID, brand theft Privacy: surveillance, databases, trafficMore information
Network Security. Tampere Seminar 23rd October 2008. Overview Switch Security Firewalls Conclusion
Network Security Tampere Seminar 23rd October 2008 1 Copyright 2008 Hirschmann 2008 Hirschmann Automation and and Control GmbH. Contents Overview Switch Security Firewalls Conclusion 2 Copyright 2008 HirschmannMore information
Topics in Network Security
Topics in Network Security Jem Berkes MASc. ECE, University of Waterloo B.Sc. ECE, University of Manitoba www.berkes.ca February, 2009 Ver. 2 In this presentation Wi-Fi security (802.11) Protecting insecureMore information
Overview. Securing TCP/IP. Introduction to TCP/IP (cont d) Introduction to TCP/IP
Overview Securing TCP/IP Chapter 6 TCP/IP Open Systems Interconnection Model Anatomy of a Packet Internet Protocol Security (IPSec) Web Security (HTTP over TLS, Secure-HTTP) Lecturer: Pei-yih Ting 1 2More information
INTERNET SECURITY: FIREWALLS AND BEYOND. Mehernosh H. Amroli 4-25-2002
INTERNET SECURITY: FIREWALLS AND BEYOND Mehernosh H. Amroli 4-25-2002 Preview History of Internet Firewall Technology Internet Layer Security Transport Layer Security Application Layer Security BeforeMore information
IINS Implementing Cisco Network Security 3.0 (IINS)
IINS Implementing Cisco Network Security 3.0 (IINS) COURSE OVERVIEW: Implementing Cisco Network Security (IINS) v3.0 is a 5-day instructor-led course focusing on security principles and technologies, usingMore information
Högskolan i Halmstad Sektionen för Informationsvetenskap, Data- Och Elektroteknik (IDÉ) Ola Lundh. Name (in block letters) :
Högskolan i Halmstad Sektionen för Informationsvetenskap, Data- Och Elektroteknik (IDÉ) Ola Lundh Written Exam in Network Security ANSWERS May 28, 2009. Allowed aid: Writing material. Name (in block letters)More information
Network Security and Firewall 1
Department/program: Networking Course Code: CPT 224 Contact Hours: 96 Subject/Course WEB Access & Network Security: Theoretical: 2 Hours/week Year Two Semester: Two Prerequisite: NET304 Practical: 4 Hours/weekMore information
Chapter 8. Cryptography Symmetric-Key Algorithms. Digital Signatures Management of Public Keys Communication Security Authentication Protocols
Network Security Chapter 8 Cryptography Symmetric-Key Algorithms Public-Key Algorithms Digital Signatures Management of Public Keys Communication Security Authentication Protocols Email Security Web SecurityMore information
General Network Security
4 CHAPTER FOUR General Network Security Objectives This chapter covers the following Cisco-specific objectives for the Identify security threats to a network and describe general methods to mitigate thoseMore information
USING ENCRYPTION TO PROTECT SENSITIVE INFORMATION Commonwealth Office of Technology Security Month Seminars October 29, 2013
USING ENCRYPTION TO PROTECT SENSITIVE INFORMATION Commonwealth Office of Technology Security Month Seminars Alternate Title? Boy, am I surprised. The Entrust guy who has mentioned PKI during every SecurityMore information
Other VPNs TLS/SSL, PPTP, L2TP. Advanced Computer Networks SS2005 Jürgen Häuselhofer
Other VPNs TLS/SSL, PPTP, L2TP Advanced Computer Networks SS2005 Jürgen Häuselhofer Overview Introduction to VPNs Why using VPNs What are VPNs VPN technologies... TLS/SSL Layer 2 VPNs (PPTP, L2TP, L2TP/IPSec)More information
Certified Ethical Hacker Exam 312-50 Version Comparison. Version Comparison
CEHv8 vs CEHv7 CEHv7 CEHv8 19 Modules 20 Modules 90 Labs 110 Labs 1700 Slides 1770 Slides Updated information as per the latest developments with a proper flow Classroom friendly with diagrammatic representationMore information
Network Security: Introduction
Network Security: Introduction 1. Network security models 2. Vulnerabilities, threats and attacks 3. Basic types of attacks 4. Managing network security 1. Network security models Security Security hasMore information
Case Study for Layer 3 Authentication and Encryption
CHAPTER 2 Case Study for Layer 3 Authentication and Encryption This chapter explains the basic tasks for configuring a multi-service, extranet Virtual Private Network (VPN) between a Cisco Secure VPN ClientMore information
2. From a control perspective, the PRIMARY objective of classifying information assets is to:
MIS5206 Week 13 Your Name Date 1. When conducting a penetration test of an organization's internal network, which of the following approaches would BEST enable the conductor of the test to remain undetectedMore information
Lecture Objectives. Lecture 8 Mobile Networks: Security in Wireless LANs and Mobile Networks. Agenda. References
Lecture Objectives Wireless Networks and Mobile Systems Lecture 8 Mobile Networks: Security in Wireless LANs and Mobile Networks Introduce security vulnerabilities and defenses Describe security functionsMore information
Security Goals Services
1 2 Lecture #8 2008 Freedom from danger, risk, etc.; safety. Something that secures or makes safe; protection; defense. Precautions taken to guard against crime, attack, sabotage, espionage, etc. An assurance;More information
SCP - Strategic Infrastructure Security
SCP - Strategic Infrastructure Security Lesson 1 - Cryptogaphy and Data Security Cryptogaphy and Data Security History of Cryptography The number lock analogy Cryptography Terminology Caesar and CharacterMore information
13 Virtual Private Networks 13.1 Point-to-Point Protocol (PPP) 13.2 Layer 2/3/4 VPNs 13.3 Multi-Protocol Label Switching 13.4 IPsec Transport Mode
13 Virtual Private Networks 13.1 Point-to-Point Protocol (PPP) PPP-based remote access using dial-in PPP encryption control protocol (ECP) PPP extensible authentication protocol (EAP) 13.2 Layer 2/3/4More information
VPN. Date: 4/15/2004 By: Heena Patel Email:firstname.lastname@example.com
VPN Date: 4/15/2004 By: Heena Patel Email:firstname.lastname@example.com What is VPN? A VPN (virtual private network) is a private data network that uses public telecommunicating infrastructure (Internet), maintainingMore information
E-commerce. Security. Learning objectives. Internet Security Issues: Overview. Managing Risk-1. Managing Risk-2. Computer Security Classifications
Learning objectives E-commerce Security Threats and Protection Mechanisms. This lecture covers internet security issues and discusses their impact on an e-commerce. Nov 19, 2004 www.dcs.bbk.ac.uk/~gmagoulas/teaching.htmlMore information
Information Security Basic Concepts
Information Security Basic Concepts 1 What is security in general Security is about protecting assets from damage or harm Focuses on all types of assets Example: your body, possessions, the environment,More information
JK0 015 CompTIA E2C Security+ (2008 Edition) Exam
JK0 015 CompTIA E2C Security+ (2008 Edition) Exam Version 4.1 QUESTION NO: 1 Which of the following devices would be used to gain access to a secure network without affecting network connectivity? A. RouterMore information
Authentication applications Kerberos X.509 Authentication services E mail security IP security Web security
UNIT 4 SECURITY PRACTICE Authentication applications Kerberos X.509 Authentication services E mail security IP security Web security Slides Courtesy of William Stallings, Cryptography & Network Security,More information
CPS 590.5 Computer Security Lecture 9: Introduction to Network Security. Xiaowei Yang firstname.lastname@example.com
CPS 590.5 Computer Security Lecture 9: Introduction to Network Security Xiaowei Yang firstname.lastname@example.com Previous lectures Worm Fast worm design Today Network security Cryptography building blocks ExistingMore information
Site to Site Virtual Private Networks (VPNs):
Site to Site Virtual Private Networks Programme NPFIT DOCUMENT RECORD ID KEY Sub-Prog / Project Information Governance NPFIT-FNT-TO-IG-GPG-0002.01 Prog. Director Mark Ferrar Owner Tim Davis Version 1.0More information
CCNA Security 1.1 Instructional Resource
CCNA Security 1.1 Instructional Resource Chapter 8 Implementing Virtual Private Networks 2012 Cisco and/or its affiliates. All rights reserved. 1 Describe the purpose and types of VPNs and define whereMore information
Part III-b. Universität Klagenfurt - IWAS Multimedia Kommunikation (VK) M. Euchner; Mai 2001. Siemens AG 2001, ICN M NT
Part III-b Contents Part III-b Secure Applications and Security Protocols Practical Security Measures Internet Security IPSEC, IKE SSL/TLS Virtual Private Networks Firewall Kerberos SET Security MeasuresMore information
642 552 Securing Cisco Network Devices (SND)
642 552 Securing Cisco Network Devices (SND) Course Number: 642 552 Length: 1 Day(s) Course Overview This course is part of the training for the Cisco Certified Security Professional, Cisco Firewall Specialist,More information
Wireless Networks. Welcome to Wireless
Wireless Networks 11/1/2010 Wireless Networks 1 Welcome to Wireless Radio waves No need to be physically plugged into the network Remote access Coverage Personal Area Network (PAN) Local Area Network (LAN)More information
Chapter 5. Data Communication And Internet Technology
Chapter 5 Data Communication And Internet Technology Purpose Understand the fundamental networking concepts Agenda Network Concepts Communication Protocol TCP/IP-OSI Architecture Network Types LAN WANMore information
Security Protocols HTTPS/ DNSSEC TLS. Internet (IPSEC) Network (802.1x) Application (HTTP,DNS) Transport (TCP/UDP) Transport (TCP/UDP) Internet (IP)
Security Protocols Security Protocols Necessary to communicate securely across untrusted network Provide integrity, confidentiality, authenticity of communications Based on previously discussed cryptographicMore information
Network Security 網 路 安 全. Lecture 1 February 20, 2012 洪 國 寶
Network Security 網 路 安 全 Lecture 1 February 20, 2012 洪 國 寶 1 Outline Course information Motivation Introduction to security Basic network concepts Network security models Outline of the course 2 CourseMore information
Application Note: Onsight Device VPN Configuration V1.1
Application Note: Onsight Device VPN Configuration V1.1 Table of Contents OVERVIEW 2 1 SUPPORTED VPN TYPES 2 1.1 OD VPN CLIENT 2 1.2 SUPPORTED PROTOCOLS AND CONFIGURATION 2 2 OD VPN CONFIGURATION 2 2.1More information
Security (II) ISO 7498-2: Security Architecture of OSI Reference Model. Outline. Course Outline: Fundamental Topics. EE5723/EE4723 Spring 2012
Course Outline: Fundamental Topics System View of Network Security Network Security Model Security Threat Model & Security Services Model Overview of Network Security Security Basis: Cryptography SecretMore information
VIRTUAL PRIVATE NETWORKS (VPN) Niti gupta
VIRTUAL PRIVATE NETWORKS (VPN) Niti gupta Traditional Connectivity [From Gartner Consulting] What is VPN? Virtual Private Network is a type of private network that uses public telecommunication, such asMore information
Description: Objective: Attending students will learn:
Course: Introduction to Cyber Security Duration: 5 Day Hands-On Lab & Lecture Course Price: $ 3,495.00 Description: In 2014 the world has continued to watch as breach after breach results in millions ofMore information
What is network security?
Network security Network Security Srinidhi Varadarajan Foundations: what is security? cryptography authentication message integrity key distribution and certification Security in practice: applicationMore information
Overview. SSL Cryptography Overview CHAPTER 1
CHAPTER 1 Secure Sockets Layer (SSL) is an application-layer protocol that provides encryption technology for the Internet. SSL ensures the secure transmission of data between a client and a server throughMore information
: Network Security. Name of Staff: Anusha Linda Kostka Department : MSc SE/CT/IT
Subject Code Department Semester : Network Security : XCS593 : MSc SE : Nineth Name of Staff: Anusha Linda Kostka Department : MSc SE/CT/IT Part A (2 marks) 1. What are the various layers of an OSI referenceMore information
Network Security. Abusayeed Saifullah. CS 5600 Computer Networks. These slides are adapted from Kurose and Ross 8-1
Network Security Abusayeed Saifullah CS 5600 Computer Networks These slides are adapted from Kurose and Ross 8-1 roadmap 1 What is network security? 2 Principles of cryptography 3 Message integrity, authenticationMore information
WEB Security & SET. Outline. Web Security Considerations. Web Security Considerations. Secure Socket Layer (SSL) and Transport Layer Security (TLS)
Outline WEB Security & SET (Chapter 19 & Stalling Chapter 7) Web Security Considerations Secure Socket Layer (SSL) and Transport Layer Security (TLS) Secure Electronic Transaction (SET) Web Security ConsiderationsMore information
Implementing Cisco IOS Network Security
Implementing Cisco IOS Network Security IINS v3.0; 5 Days, Instructor-led Course Description Implementing Cisco Network Security (IINS) v3.0 is a 5-day instructor-led course focusing on security principlesMore information
Domain 6.0: Network Security
ExamForce.com CompTIA Network+ N10-004 Study Guide 1 Domain 6.0: Network Security Chapter 6 6.1 Explain the function of hardware and software security devices Network based firewall, Host based firewallMore information
Introduction to Network Security. 1. Introduction. And People Eager to Take Advantage of the Vulnerabilities
TÜBİTAK Ulusal Elektronik ve Kriptoloji Araştırma Enstitüsü Introduction to Network Security (Revisit an Historical 12 year old Presentation) Prof. Dr. Halûk Gümüşkaya Why Security? Three primary reasonsMore information
Part I. Universität Klagenfurt - IWAS Multimedia Kommunikation (VK) M. Euchner; Mai 2001. Siemens AG 2001, ICN M NT
Part I Contents Part I Introduction to Information Security Definition of Crypto Cryptographic Objectives Security Threats and Attacks The process Security Security Services Cryptography Cryptography (codeMore information
Firewalls, Tunnels, and Network Intrusion Detection
Firewalls, Tunnels, and Network Intrusion Detection 1 Part 1: Firewall as a Technique to create a virtual security wall separating your organization from the wild west of the public internet 2 1 FirewallsMore information
Local Area Networks: Internetworking
Local Area Networks: Internetworking Chapter 81 Learning Objectives List the reasons for interconnecting multiple local area networks and interconnecting local area networks to wide area networks. IdentifyMore information
Communication Systems 16 th lecture. Chair of Communication Systems Department of Applied Sciences University of Freiburg 2009
16 th lecture Chair of Communication Systems Department of Applied Sciences University of Freiburg 2009 1 25 Organization Welcome to the New Year! Reminder: Structure of Communication Systems lecturesMore information
Firewalls, Tunnels, and Network Intrusion Detection. Firewalls
Firewalls, Tunnels, and Network Intrusion Detection 1 Firewalls A firewall is an integrated collection of security measures designed to prevent unauthorized electronic access to a networked computer system.More information
Chapter 11 Security+ Guide to Network Security Fundamentals, Third Edition Basic Cryptography
Chapter 11 Security+ Guide to Network Security Fundamentals, Third Edition Basic Cryptography What Is Steganography? Steganography Process of hiding the existence of the data within another file Example:More information
Chapter 8 Security Pt 2
Chapter 8 Security Pt 2 IC322 Fall 2014 Computer Networking: A Top Down Approach 6 th edition Jim Kurose, Keith Ross Addison-Wesley March 2012 All material copyright 1996-2012 J.F Kurose and K.W. Ross,More information
(d-5273) CCIE Security v3.0 Written Exam Topics
(d-5273) CCIE Security v3.0 Written Exam Topics CCIE Security v3.0 Written Exam Topics The topic areas listed are general guidelines for the type of content that is likely to appear on the exam. PleaseMore information
Chapter 4: Security of the architecture, and lower layer security (network security) 1
Chapter 4: Security of the architecture, and lower layer security (network security) 1 Outline Security of the architecture Access control Lower layer security Data link layer VPN access Wireless accessMore information
Secure Use of the New NHS Network (N3): Good Practice Guidelines
Programme NPFIT Document Record ID Key Sub-Prog / Project Information Governance NPFIT-FNT-TO-IG-GPG-0003.01 Prog. Director Mark Ferrar Status Approved Owner Tim Davis Version 1.0 Author Phil Benn VersionMore information
Secure Socket Layer. Introduction Overview of SSL What SSL is Useful For
Secure Socket Layer Secure Socket Layer Introduction Overview of SSL What SSL is Useful For Introduction Secure Socket Layer (SSL) Industry-standard method for protecting web communications. - Data encryptionMore information


text:
New CDC Report on Cholesterol Treatment in the U.S. Concerning
Nearly half of those who are eligible for cholesterol-lowering medications are not taking them, according to a new report by the Centers for Disease Control and Prevention (CDC). This number also includes those who were taking cholesterol-lowering medication, but stopped. The report, published in Morbidity and Mortality Weekly Report, highlights the fact that although the number of Americans with high cholesterol is on the decline, LDL cholesterol remains a major factor in heart disease and strokes.
The study found that 36.7% of US adults (>21 years) were eligible for, or currently taking cholesterol-lowering medication but of this group only 55% were actively taking a cholesterol-lowering medication. The examined data spans over seven years (from 2005–2012) and was taken from National Health and Nutrition Examination Surveys. The medication use data was collected from self-reported medical history interviews or transcribed from medication bottles recorded in prescription medication interviews. While the study included people taking all forms of cholesterol-lowering medication, nearly 90% of those receiving medication were taking a statin drug.
As outlined by the 2013 ACC/AHA guidelines, persons who should initiate or continue cholesterol-lowering medication included four groups:
- People with heart disease, a prior heart attack or some types of stroke, or angina.
- People with LDL cholesterol levels of 190mg/dL or more.
- People ages 40 to 75 with diabetes and LDL cholesterol levels of 70-189 mg/dL.
- People ages 40-75 with LDL cholesterol levels of 70-189mg/dL and an estimated 10–year risk of heart disease of 7.5% or more.
RELATED: Vaccine to Prevent High Cholesterol in the Works
Apart from taking medications, those with high LDL cholesterol are strongly advised to try living a a healthy lifestyle that includes regular exercise and eating heart healthy foods. The report found that of the 36.7% of US adults eligible for, or currently taking cholesterol-lowering medication, 46.6% said they made lifestyle changes, 37.1% said they made lifestyle modifications and were taking medication, while 35.5% reported doing neither. Unsurprisingly, those who responded saying they had already changed to a heart healthy lifestyle (80%) were the group most likely to be taking cholesterol-lowering medication.
Significant discrepancies arise when the data is broken down by race and gender. Of whites eligible for or already taking medication, 58% were actively taking medication while just 46% of eligible blacks and 47.1% of eligible Mexican-Americans were actively taking medication. There were significant differences in the percentage of men (40.8%) and women (32.9%) on or eligible for treatment and a significant differences in the proportion taking cholesterol-lowering medication (52.9% for men versus 58.6% for women).
"Nearly 800,000 people die in the U.S. each year from cardiovascular diseases – that's one in every three deaths – and high cholesterol continues to be a major risk factor," said Dr. Carla Mercado, a scientist in CDC's Division for Heart Disease and Stroke Prevention. "This study reveals opportunities to reduce existing disparities through targeted patient education and cholesterol management programs."
One such program is the Million Hearts Initiative by the US Department of Health and Human Services. The goal of the initiative is to get 65% of Americans to manage their high levels of LDL cholesterol by 2017.

subset: commoncrawl


text:
Following are excerpts from the unofficial transcript of a CNBC EXCLUSIVE interview with Chicago Federal Reserve President Charles Evans. Following are links to the interview on CNBC.com: http://video.cnbc.com/gallery/?video=3000209737 and http://video.cnbc.com/gallery/?video=3000209738.
All references must be sourced to CNBC.
October's a tough one. December, I think we need a couple of good labor reports and evidence of increasing growth – G.D.P. growth. And it's probably going to take a few months to sort that one out.
It's very difficult to feel confident in December, given that we're going to repeat part of what just took place in Washington. There was a lot of fiscal drama, which I think caught everybody's attention. Business people that I talked to are, you know, still concerned about how things are going to kind of play out. So, December will be pretty tough and we could you know, in fact, get more restrictiveness.
I have been surprised that the markets have not been able to look at our separate tools of quantitative easing and forward guidance. There's nothing that we have said about our forward guidance that should cause anybody to think that we're going to step back prematurely, that is before we hit 6.5% or even-- you know, we might go on longer than that. So-- but the markets had sort of only been paying attention to one element at a time, maybe half an element at a time and they become entangled.
I think Janet will be a great chairman. She has an awful lot of experience with monetary policy up close and personal. And I think we'll see a lot of continuity. And, you know, we'll be looking at the economic situation and the inflationary pressures as they present themselves. And respond accordingly.
I do think that we have in place the forward guidance on short-term interest rates that is capable of adding an awful lot of accommodation during those periods where things might be turning down because people would have confidence that we're not going to step back prematurely. That's our number-one risk, is that people think that we're going to step back and somehow add restrictiveness to the economy at all the wrong times. We've already seen that from other people. We don't need more of that.
About CNBC:
With CNBC in the U.S., CNBC in Asia Pacific, CNBC in Europe, Middle East and Africa, CNBC World and CNBC HD , CNBC is the recognized world leader in business news and provides real-time financial market coverage and business information to approximately 390 million homes worldwide, including more than 100 million households in the United States and Canada. CNBC also provides daily business updates to 400 million households across China. The network's 16 live hours a day of business programming in North America (weekdays from 4:00 a.m. - 8:00 p.m. ET) is produced at CNBC's global headquarters in Englewood Cliffs, N.J., and includes reports from CNBC News bureaus worldwide.
CNBC also has a vast portfolio of digital products which deliver real-time financial market news and information across a variety of platforms. These include CNBC.com, the online destination for global business; CNBC PRO, the premium, integrated desktop/mobile service that provides real-time global market data and live access to CNBC global programming; and a suite of CNBC Mobile products including the CNBC Real-Time iPhone and iPad Apps.
Members of the media can receive more information about CNBC and its programming on the NBC Universal Media Village Web site athttp://www.nbcumv.com/mediavillage/networks/cnbc/


text:
Trend Tuesday: Monochrome
|Alexander Wang Jason Wu Marc Jacobs
Starting today, every week on Tuesdays I will be posting a new wearable trend for the season. This week's trend is monochrome--the classic black and white. Every spring, the pretty florals and pastels come out on the runway, which they also have, but this spring designers are emphasizing black and white prints. Seen on runways of Louis Vuitton, Marc Jacobs, Oscar de la Renta and many more in all prints: polka dots, houndstooth, checkered, stripes...you name it, it was there.
Michael Kors Oscar de la Renta BCBG
Celebs have also already jumped on the trend. Out of all trends for this season, it is definitely the most ready to wear. If you're a risk taker like Miley then definitely try out the beetle juice stripe pants. Vertical stripes on tops or pants will make you appear taller and skinnier. If you have a larger frame, definitely try to avoid horizontal stripes--it will only make you look more broad. However if you have a small upper body, then you can work horizontal stripes to your advantage. Beyonce also rocked this trend by keeping it classy with a black and white jumpsuit at the Grammy Awards.
The best part about monochrome that it is the easiest trend to wear! I know you definitely have something in your closet! It can be worn as a printed blouse, striped pants, color blocked monochrome or a simple dress. Here are some monochrome items for your closet!
Forever 21: Striped Blouse, Checkered Blouse, Geo Print Sweater, Tuxedo Blazer Tuxedo Pants, Wide-Legged Pants
H&M: Cardigan, Floral Pants
Zara: Color-Blocked Coat
Urban Outfitters: Jacket
Wet Seal: Maxi Skirt
with love,
Wet Seal: Maxi Skirt
with love,


text:
Log in to upload your profile and view our entire candidate pool of beautiful, smart and grounded women looking to match with our VIP clients
Perfect Search is for men who want to be proactive about finding their perfect woman, and don't want to spin their wheels finding the "needle in the haystack". We are not a dating service. Your personal agent is your personal headhunter. Unlike a traditional dating service, or matchmaker, who merely sits in an office, Perfect Search agents are mobile recruiters who go out and actively search for your perfect match.
If you want to be proactive about finding your perfect woman, and don't want to waste your time, we will do all the work. This concept of a personal headhunter conducting your search was created after witnessing the frustration successful men experience trying to find quality women. Like a recruiter, your Perfect Search agent will create a highly focused search on your specific needs. We learn about you fully, and find the woman who is a match for you. We get to know who you are and what you are looking for, in ways that go far beyond an online form, and then we go out and find her.
Our candidate pool of women continues to expand across the nation, and abroad. We know you want the whole package: brains, beauty, body and personality. Therefore we have been forced to meet those women and invite them into our pool. However, as your headhunter, we are not limited to our candidate pool. Your personal agent is hard working, professional and intuitive and she will actively recruit beautiful and grounded women to help you find long lasting, love. We do not charge the women, thereby eliminating any conflict of interest and allowing us to reach out to amazing women who wouldn't normally join a dating service, and who are also searching for the best. You tell us what you want, and we go out and find her.
Call Now For a Free Introductory Session: 415-370-7092


text:
Kendra Wilkinson is thanking the heavens for her baby daughter ... and it's pretty obvious from the name they've given her.
TMZ obtained the birth certificate ... and it shows Kendra and hubby Hank Baskett named their baby ... Alijah. Alijah Mary Baskett.
According to BabyNames.com ... Alijah is an Americanized version of Elijah -- which means The Lord is My God.
Alijah was born at 8:02 A.M. last Friday in Los Angeles.
The baby's name is fitting ... considering Kendra was probably screaming "oh, god" during the conception.


text:
See what questions
a doctor would ask.
Penile Itch: Sensation occurring on the penis that leads to a feeling of wanting to itch. See detailed information below for a list of 18 causes of Penile Itch, Symptom Checker, including diseases and drug side effect causes.
» Review Causes of Penile Itch: Causes | Symptom Checker »
The following medical conditions are some of the possible
causes of Penile Itch.
There are likely to be other possible causes, so ask your doctor
about your symptoms.
See full list of 18 causes of Penile Itch
» Review Causes of Penile Itch: Causes | Symptom Checker »
Home medical tests possibly related to Penile Itch:
Listed below are some combinations of symptoms associated with Penile Itch, as listed in our database. Visit the Symptom Checker, to add and remove symptoms and research your condition.
See full list of 501 Symptom Checkers for Penile Itch
Review further information on Penile Itch Treatments.
Real-life user stories relating to Penile Itch:
More Penile Itch animations & videos
Some of the comorbid or associated medical symptoms for Penile Itch may include these symptoms:
See all associated comorbid symptoms for Penile Itch
Research the causes of these more general types of symptom:
Research the causes of related medical symptoms such as:
Research the causes of these symptoms that are similar to, or related to, the symptom Penile Itch:
Psoriasis often undiagnosed cause of skin symptoms in children: Children who suffer from the skin disorder called psoriasis can often go undiagnosed. The main problem is that psoriasis is rare...read more »
Read more about Misdiagnosis and Penile Itch
Other ways to find a doctor, or use doctor, physician and specialist online research services:
Research extensive quality ratings and patient safety measures for hospitals, clinics and medical facilities in health specialties related to Penile Itch:
Research Hospital & Clinic Quality Ratings »
Conditions that are commonly undiagnosed in related areas may include:
The list of organs typically affected by Penile Itch may include, but is not limited to:
The list below shows some of the causes of Penile Itch mentioned in various sources:
See full list of 18 causes of Penile Itch
This information refers to the general prevalence and incidence of these diseases, not to how likely they are to be the actual cause of Penile Itch. Of the 18 causes of Penile Itch that we have listed, we have the following prevalence/incidence information:
See the analysis of the prevalence of 18 causes of Penile Itch
The following list of conditions have 'Penile Itch' or similar listed as a symptom in our database. This computer-generated list may be inaccurate or incomplete. Always seek prompt professional medical advice about the cause of any symptom.
Select from the following alphabetical view of conditions which include a symptom of Penile Itch or choose View All.
Ask or answer a question about symptoms or diseases at one of our free interactive user forums.
Medical story forums: If you have a medical story then we want to hear it.
See a list of all the medical forums
This information shows analysis of the list of causes of Penile Itch based
on whether certain risk factors apply to the patient:
Depending on the seriousness of the onset of Penile Itch, you may want to consult one of the following medical professionals.
Important:In extreme cases, always seek advice from emergency services :
Medical Conditions associated with Penile Itch:
Itching skin (1068 causes), Genital symptoms (986 causes), Male sexual symptoms (471 causes), Penis symptoms (346 causes), Genital itching (30 causes), Skin symptoms (5992 causes), Skin problems (3422 causes), Sexual symptoms (1838 causes), Male genital symptoms (427 causes), Sensory symptoms (7134 causes), Nerve symptoms (9132 causes), Neurological symptoms (9575 causes), Pain (6458 causes), Sensations (6520 causes), Brain symptoms (2787 causes), Fertility symptoms (370 causes), Women's health symptoms (1177 causes), Common symptoms (8589 causes), Body symptoms (5672 causes), Intercourse symptoms (258 causes), Head symptoms (10192 causes), Mens health symptoms (291 causes), Male reproductive symptoms (577 causes)
Symptoms related to Penile Itch:
Penis pain (53 causes), Penile rash (22 causes), Penis symptoms (346 causes), Syphilis, Candida (26 causes), Eczema (227 causes), Dermatitis (116 causes), Scabies, Genital herpes, Balanitis, Genital warts (4 causes), Lichen planus, Tinea infection, Psoriasis, Contact dermatitis, Peile cancer
Doctor-patient articles related to symptoms and diagnosis:
These general medical articles may be of interest:
See full list of premium articles on symptoms and diagnosis
Tools & Services:
Medical Articles:
Search Specialists by State and City
By using this site you agree to our Terms of Use. Information provided on this site is for informational purposes only; it is not intended as a substitute for advice from your own medical team. The information on this site is not to be used for diagnosing or treating any health concerns you may have - please contact your physician or health care professional for all your medical needs. Please see our Terms of Use.
Copyright © 2014 Health Grades Inc. All rights reserved. Last Update: 13 August, 2015 (0:25)


text:
We have unlimited option of colors and patterns to create a Butterfly room decor because butterflies are so colorful. Any color is good for this theme room, even colors you've never see on real butterflies! :)
Now let's start with the walls...
Butterfly Tree Custom Sized Mural from $81.60
Butterflies and Fairy
Custom Sized Mural from $81.60
Mini Butterflies Decal $ 21.00
Jelly Bugs
58pc Wall Sticker Set $ 15.99
First, decide on what color the walls are gonna be for this butterfly room decor. If your Girl has a favorite color, use it. If she's too young to know what her favorite is, just pick any color you like.
Then look for two different shades of paint of that color, a lighter one and a darker one.
Even though any color suits this Butterfly Bedroom, but since it's a kid's room, it's best to choose colors that are not too dark for the walls. Also try to avoid too bright colors that are not comfortable for the eyes.
Use dark and bright colors for accents only, for example to make butterfly wall murals.
Measure up from the floor to the height of 1.1 meters and make a straight horizontal pencil line on the walls. Put masking tape right below the line and paint the upper area with the lighter wall paint.
After the paint dries, take off the masking tape and place another right above the line and paint the lower area with the darker wall paint.
While waiting for the paints to dry, browse the internet for various sized pictures of butterflies and small flowers. Use the small flowers pictures to draw wall murals horizontally along the wall border on about 5 centimeters above it. Remember to give some space between each flower and connect it with brown thin twigs and add some tiny green leaves.
Then make scattered colorful Butterfly wall murals using the various Butterfly pictures and you've got a Great butterfly bedroom walls! :)
Don't have enough time to do all that? Ask the whole family to help, it'll be so much FUN and you'll get some free extra hands!
Other option for this butterfly room decor is to use Butterfly Wallpaper. Hunt for butterfly wallpaper that comes with the color you or your girl wants, or look for simple plain or striped wallpaper and add butterfly wallpaper border as accent.
Now we'll continue this butterfly room decor by filling up the room with furniture.
Since butterflies are identical with nature, it's a good idea to use wooden brown furniture for this butterfly theme room. To make the room even more alive, use wood paints to paint small flowers and butterflies on the furniture.
If the walls already got lots of butterfly wall murals on it, then paint only some corners of the furniture to avoid the room from being too crowded.
But if you use plain or striped wallpaper for the walls, consider painting a large butterfly at each center of the bedroom's door, tables, and closet doors. Then paint the corners of the furniture with some small wild flowers.
For the bedding, look for Butterfly Bedding Set with colors that match the wall's background colors.
Bloom Floral Bedding Set - Full Bed $ 79.99
Butterfly Girl Filled Throw Pillow $ 24.00
Blue Floral Bedding Set 8pc King - $65.99 8pc Queen - $55.99
Other option to tone down the room a little bit if you think the room is already too crowded with butterflies is to use plain white bed sheet, plain or striped pillow shams with any soft pastel colors, and then add a Butterfly Comforter.
Now we have done most part of this butterfly room decor and we'll just add some accessories to finish the room. Here are some butterfly room decorations ideas:
Chic Butterfly Rug $ 72.60
Kids love to play on the floor so rug is an important accessory to add. Pick a Butterfly Rug with colors that match the room's main colors. Soft colored Shaggy Rug will do great too.
Use Butterfly Frame or Flowers Frame for any picture you want to put in the room.
Put a butterfly lamp beside the bed.
Add a wooden wastebasket with pastel color that suits the room. Paint your Girl's initial on it and add some scattered small flowers around the initial.
Hang some Paper or Tulle Butterflies from the ceiling. Hang it at various heights to make it look natural.
Use butterfly themed switch plates instead of a plain one.
Hope your Girl LOVES her new Butterfly Theme Room! :)
Tree and Butterflies Decal Stickers $ 25.99 Also Available in Dark Green
Butterfly & Dragonfly
Glow in the Dark Wall Decals $ 12.99
Butterfly Wall Plaque $ 38.40
Flower Stripe Wall Accent Sticker Set $ 22.99
Butterfly Dreams Personalized Wall Decal $ 88.00
Butterfly Border in Blue or Green $ 21.99
Butterflies and Dragonflies Wallpaper Border $ 15.99
Butterfly Garden Growth Chart $ 20.99
Two Sided Butterfly Pillow $ 96.00
B is for Butterfly Custom Sized Mural from $81.60
Hand Painted Butterflies Flip Stool $ 49.99


text:
With up to 70% of employee education taking place on the job, the training and development industry will need to transform the way in which employees learn and relearn in order to keep pace with changing patterns of work.
And addressing this need of the hour, TRRAIN Foundation in partnership with R City Mall, Ghatkopar, organized a workshop for the retailers on the importance of "Education and Training". The workshop saw the participation of more than 30 members that comprised of a vibrant mix of Retail associates & Store managers.
The session stressed upon the changing scenario in the retail industry and how important has customer experience become to drive sales. It also emphasized on the fact that a timely and continuous updation of skills and knowledge was imperative, not only for the store managers and top management but for the retail associate who are the face of any retail brand. Such training will not only help an associate grow professionally but also personally.


text:
Spent the weekend helping a friend move. Rented a 24′ Uhaul, packed it up, and drove it across the state on Alligator Alley.
As I loaded the truck, I got thinking back on where I first met someone who was skilled at packing a truck to its maximum capacity. Right after high school, I was working at a custom auto interiors shop, catering to cars of the muscle cars era. The shop was picking up and moving from its metro Detroit location, and heading to El Paso, Texas. It was probably my first indication of the decline of Detroit's manufacturing dominance. In any event, there was a short Mexican guy in charge of loading the truck. He was good at it.
I've seen a lot of trucks loaded since, most recently, working as a stagehand. 5-10 trucks would pull in early in the morning, be unloaded, the show set up, and by 2:00 AM the next day be loaded and pulling out for the next show in the next town. During load outs, the guy who knew how to load the truck was the guy who made the difference between a 2-3 hour load out, and a 4 hour load out with stagehands standing around anxious to see the last truck's doors close.
There's really not much point to this little story. Just thinking back on how I remembered something that didn't mean much to me as an 18 year old kid, and how all these years later, I have more of an appreciation for an art that probably goes largely unrecognised.


text:
Home > Robotic Mowers
A revolutionary robotic mower that can take on some of the toughest challenges.
The Automower 440 is designed for working areas up to 4000 m² and can handle slopes up to 45 percent.
For a carpet-like finish thanks to clever mowing
The ideal scenario when mowing lawns is to cut them little and often. This results in the healthiest possible grass and the lushest finish. With automowers able to cut auonomously all day, every day, achieving this is now a reality. The 440 gently cuts the grass in all directions so that it grows strong and moss growth is effectively prevented. The blades are razor-like and made of strong carbon steel, while the free movement pattern this mower uses results in the beautiful, carpet-like appearance.
The latest intelligent mowing technology
The Automower 440 can automatically sense narrow passages and is able to find its way through even the smallest gaps. It knows to vary its route in these situations so as to avoid wearing the grass down. This model also has a spot cutting mode, allowing you to move garden furniture out of the way and to have the automower quickly mow a limited area of longer grass. The mower then mows in tight spirals before resuming automatic cutting when finished.
If the battery begins to get low, the Automower 440 knows when to return to the docking station, which it does automatically and without human interaction. This model also uses dual guide wires, reducing searching times for particularly complex gardens. The Automowers are designed for the Nordic climate, so are perfectly capable not only of mowing around the clock, but in all weathers.
A machine with the outstanding quality you would expect from Husqvarna
Offering excellent levels of reliability combined with a beautiful finish to your lawn, Husqvarna's automowers also require minimal user interaction and maintenance. They produce no direct emissions and benefit from low energy consumption, operating at a fraction of the cost when compared to conventional mowers. The 440 is superbly quiet, able to operate around the clock without an issue. With a customisable anti-theft alarm, PIN code lock and lift and tilt sensors, security and safety are also taken care of.
Electric cut height adjustment is a further hallmark of this model's quality, changed simply using the machine's settings menu. You can also customise working times and many other settings in this way.
Please note: For installation you will need a Husqvarna installation kit in addition to this machine.
Brand: HUSQVARNAPower Source: Battery
Why choose us?
Garden Machinery Direct is a family run business with over 40 years experience in selling and servicing garden equipment. We're one of the biggest garden machinery retailers in the UK. Based in the Midlands, we're well placed to deliver products across the UK - though we do deliver internationally. We are main agents for all the biggest garden machinery brands, and have fantastic working relationships with world leading manufacturers.
Our goal is to offer customers top of the range garden machinery at discount prices, delivered direct to your door. Our friendly and professional staff are available by telephone or email to give expert advice on the equipment most suited to your needs or to answer any queries you may have. We also operate an efficient spare parts service, utilising the latest computer link-ups direct to manufacturers stocks.
All of the garden machinery we sell carries a manufacturers guarantee, supported by a nationwide network of authorised service dealers.
At Garden Machinery Direct we offer our customers the best deals and even better service.
Please feel free to contact us if you have any questions.
Be the first to Write a Review for this item!
View the Husqvarna brochure for more information.
HUSQVARNA Automower Installation Kit£63.00 - £180.00
This Automower installation kit is required to facilitate installation of Husqvarna's automowers, and includes loop wire, cramps, splicers and connectors in a number of different lengths to best fit your garden.
HUSQVARNA 310 Automower£1,400.00 £1,330.00
A great robotic mower for use on complicated or larger gardens, this model is designed for areas up to 1000 m² and is able to deal with slopes that have an incline up to 40 percent.
HUSQVARNA 420 Automower£2,000.00 £1,800.00
Suitable for lawns up to 2,200m², this Automower can also handle steep slopes with inclines as much as 45 percent. An intuitive and user-friendly model, this mower adapts to changing conditions and growth rates.
HUSQVARNA 430X Automower£2,600.00 £2,470.00
An intelligent Automower that includes generous built-in competence and GPS navigation of even the most varied and demanding grass areas. Suitable for larger areas up to 3,200 m².
HUSQVARNA 450X Automower£3,200.00 £3,040.00
A premium mowing solution with the latest intelligent technology on-board, you can even control this Husqvarna Automower with your mobile phone or tablet. For areas up to 5,000m².
HUSQVARNA 315X Automower£2,100.00 £1,995.00
A great robotic mower for lawns up to 1600 m², this model has the added benefits of GPS theft-tracking and navigation assistance, LED headlights and special coloured wheel caps, plus all the standard Automower features.
HONDA MIIMO HRM 3000 Robotic Mower£2,550.00 £2,099.00
A cutting edge robotic mower with smartphone management, a mowing area of up to 4,000 m², plus a suite of the latest technology so that keeping your lawn looking its best is effortless.


text:
What is Shinji-mai, a ritual dance with strong links to Noh?
Sada Shrine is one of the three major shrines in Izumo Province (currently Shimane Prefecture). It was named as the second-ranking shrine of Izumo in Engishiki, the book of laws and regulations in the Heian Period (794-1185). Sada-shinnō, one of the Shinji-mai, a holy dance passed down at the shrine, has deep connections with Noh.
Sada-shinnō is part of the annual shrine ritual, Gozakae-sai, held on the 24th and the 25th of September. There are three elements: a festival called Shichi-za; a holy play known as Shiki-sanban; and a mythological play, Shin-nō. Shiki-sanban is a form of ancient performing art closely related to the Noh play "Okina". Shin-nō is believed to have been created in the Keichō era (late 16th and early 17th centuries) by Miyagawa Hyōbu Shōsuke Hideyuki, the shrine's chief priest and head of its shintō musicians, after he learned the postures and styles of Sarugaku, which was then popular in Kyoto.
There are many common points between Shin-nō and Noh. Both feature actor roles such as shite, waki, tsure, and tomo; pauses in dialogue are filled by songs; music is played on flutes, small and large tabors, and drums; and actors wear masks. On the other hand, there are several differences. The fact that Shin-nō musicians wear white clothes suggestive of priests tells us that Shin-nō was passed down as a shrine ritual by priests and parishioners.
In November 2011, Sada-shinnō was added to UNESCO's list of Intangible Cultural Heritage of Humanity, recognizing its history over 400 years and origins as Izumo Kagura.
| Terms of Use | Contact Us | Link to us |


text:
The Jakarta Post
State airport operator PT Angkasa Pura (AP) II is aiming to make Kuala Namu International Airport in North Sumatra a hub for airlines serving destinations in Asia and the Middle East.
Airport general manager Tengku Said Ridwan said on Wednesday that Sri Lanka-based Mihin Lanka was now the first international airline to make the airport its hub for its flights to the Middle East.
'Mihin Lanka flies from Jakarta and transits at Kuala Namu airport twice a week before heading to Jeddah [Saudi Arabia],' he told The Jakarta Post.
According to Ridwan, Malaysia-based Flying Fox Airways, a code-sharing partner of Indonesia's private airline, Sriwijaya Air, also planned to make the airport its hub for its flights to Dhaka, Bangladesh, in the near future.
'The airline is still processing the license [to allow Flying Fox to use the airport as its hub],' he said.
He added that national flag carrier Garuda Indonesia was also processing the same permit to make the airport its hub for its flights to Jeddah.
Malaysian Consul General Ahmad Rozian Abdul Gani, based in Medan, confirmed that Flying Fox Airways would soon launch a new route from Ipoh, Malaysia, to Kuala Namu and then to Dhaka.
'I heard that there were some technical issues in the license application process in Ipoh. But all the issues are expected to be overcome by June 2014 at the latest,' he told the Post.
Ahmad Rozian said Kuala Namu airport was important, especially in the lead-up to the 2015 ASEAN Economic Community (AEC).
Singaporean Consul General Mark Low said Kuala Namu International Airport had tremendous potential to be developed into a hub for flight services in western Indonesia.
The airport, he said, would be more convenient for travelers as they would not have to transit via Jakarta for trips to destinations in the western half of Indonesia.
Kuala Namu International Airport:
Area: 1,365 hectares
Runway: 3,750 x 60 square meters
Taxiway 1: 3,750 x 30 sqm
Taxiway 2: 2,000 x 30 sqm
Apron Area: 200,000 sqm
Apron Capacity: 33 planes
Terminal Area: 118,930 sqm
Terminal Capacity: 8.1 million passengers per year
Cargo Storage: 13,000 sqm
Parking Area: 50,820 sqm
Parking Capacity: 407 taxis, 55 buses, 908 cars
Source: Angkasa Pura II


text:
Mary Barber
Apollo's Edict. - Poem by Mary Barber
Ierne's now our royal Care:
We lately fix'd our Vice--roy there.
How near was she to be undone,
Till pious Love inspir'd her Son!
What cannot our Vice--gerent do,
As Poet, and as Patriot too?
Let his Success our Subjects sway,
Our Inspirations to obey:
Let beaten Paths no more be trac'd;
But study to correct your Taste.
No Simile shall be begun
With rising, or with setting Sun;
And let the secret Head of Nile
Be ever banish'd from your Isle.
When wretched Lovers live on Air,
In Pity the Chameleon spare!
And when you'd make a Hero grander,
Forget he's like a Salamander.
No Son of mine shall dare to say,
Aurora usher'd in the Day.
You all agree, I make no Doubt,
The Prophet's Mantle's quite worn out.
The Bird of Fove shall toil no more,
To teach the humble Wren to soar.
Your tragic Heroes shall not rant,
Nor Shepherds use poetic Cant.
Simplicity alone can grace
The Manners of the rural Race.
When Damon's Soul shall take its Flight,
(Tho' Poets have the second Sight)
No Trail of Light shall upwards rise,
Nor a new Star adorn the Skies:
For who can hope to place one there,
So glorious as Belinda's Hair?
Yet, if his Name you eternize,
And must exalt him to the Skies;
Without a Star it may be done--
So Tickell mourn'd his Addison.
If Anna's happy Reign you praise,
Say not a Word of Halcyon--Days:
Nor let my Vot'ries shew their Skill,
In apeing Lines from Cooper's--Hill;
For know, I cannot bear to hear
The Mimickry of deep, yet clear.
Whene'er my Vice--roy is address'd,
Against the Phoenix I protest.
When Kelly's Beauties you survey,
Forget they're like the Milky Way.
When Poets soar in youthful Strains,
No Phaeton to hold the Reins.
CUPID shall ne'er mistake another,
Not ev'n Eliza, for his Mother;
Nor shall his Darts at Random fly,
From Magazines in Rochford's Eye.
When Boyle's exalted Genius shines,
Distinguish'd in your noblest Lines;
With his own Worth your Patron grace,
And let Maecenas sleep in Peace.
When you describe a lovely Girl,
No Coral Lips, or Teeth of Pearl.
With Women Compounds I am cloy'd,
Which only pleas'd in Biddy Floyd.
For foreign Aid what need they roam,
Whom Fate hath amply bless'd at Home?
Unerring Heav'n, with bounteous Hand,
Has form'd a Model for your Land;
Whom Fove endow'd with ev'ry Grace,
The Glory of the Granard Race;
Now destin'd by the Pow'rs divine,
The Blessing of another Line.
Then would you paint a matchless Dame,
And raise her to immortal Fame;
Invoke not Cytherea's Aid,
Nor borrow from the Blue--ey'd Maid,
Nor need you on the Graces call;
Take Qualities from Donegal.
Comments about Apollo's Edict. by Mary Barber
Read this poem in other languages
This poem has not been translated into any other language yet.
I would like to translate this poem »
Famous Poems
Still I Rise
Maya Angelou
The Road Not Taken
Robert Frost
If You Forget Me
Pablo Neruda
Langston Hughes
Annabel Lee
Edgar Allan Poe
Stopping By Woods On A Snowy Evening
Robert Frost
Rudyard Kipling
Do Not Stand At My Grave And Weep
Mary Elizabeth Frye
I Do Not Love You Except Because I Love You
Pablo Neruda
Roald Dahl