Our social:

Latest Post

Monday, 25 November 2013

Who provides internet to ISP??

Question:How do I figure out the Internet's infrastructure?
Let's suppose we don't know about the history of the Internet, nor do we have access to any online resources that explain us this. Then, the only way to learn how the Internet infastructure is built is to go back to the roots. Using existing protocols to discover how our Internet is built.

Specifically, the Internet Control Message Protocol or ICMP defines the Echo request and the Echo reply. By increasing the Time To Live of IP packets by 1 each iteration, you can find each next hop on the path to your target. This allows you to get a list of hops between you and your target, the classic traceroute.

On Windows, you can use tracert; on Linux and Mac OS X, you can use traceroute.

So, let's do a traceroute from Belgium to the United States; Stack Exchange looks like a good target.

Tracing route to stackexchange.com [64.34.119.12] over a maximum of 30 hops:


  5    10 ms    12 ms    12 ms  te-3-3.car2.Brussels1.Level3.net [212.3.237.53]
  6    11 ms    11 ms    15 ms  ae-0-11.bar2.Brussels1.Level3.net [4.69.148.178]
  7    20 ms    13 ms    15 ms  ae-7-7.ebr1.London1.Level3.net [4.69.148.182]
  8    16 ms    16 ms    18 ms  vlan101.ebr2.London1.Level3.net [4.69.143.86]
  9    83 ms    84 ms    87 ms  ae-44-44.ebr1.NewYork1.Level3.net [4.69.137.78]
 10    84 ms    93 ms    97 ms  ae-71-71.csw2.NewYork1.Level3.net [4.69.134.70]
 11    87 ms    96 ms    83 ms  ae-2-70.edge1.NewYork1.Level3.net [4.69.155.78]
 12    84 ms    93 ms    84 ms  gig2-0.nyc-gsr-b.peer1.net [216.187.123.5]
 13    87 ms    84 ms    85 ms  gwny01.stackoverflow.com [64.34.41.58]
 14    87 ms    82 ms    87 ms  stackoverflow.com [64.34.119.12]

Interesting, we now know that Belgium, London and New York are all connected to Level3. Level3 can be seen as an ISP to ISPs, they simply interconnect multiple ISPs. Here is a picture of how it's connected:







Let's go the opposite direction, China! The first thing I could find is the search engine Baidu.

Tracing route to baidu.com [123.125.114.144] over a maximum of 30 hops:


  5    12 ms    10 ms    12 ms  ae0.anr11.ip4.tinet.net [77.67.65.177]
  6   167 ms   167 ms   167 ms  xe-5-1-0.sjc10.ip4.tinet.net [89.149.185.161]
  7   390 ms   388 ms   388 ms  as4837.ip4.tinet.net [77.67.79.150]
  8   397 ms   393 ms   397 ms  219.158.30.41
  9   892 ms     *      392 ms  219.158.97.13
 10   407 ms   403 ms   403 ms  219.158.11.197
 11   452 ms   451 ms   452 ms  219.158.15.5
 12     *      434 ms   434 ms  123.126.0.66
 13   449 ms   450 ms   450 ms  61.148.3.34
 14   432 ms   433 ms   431 ms  202.106.43.66
 15   435 ms   435 ms   436 ms  123.125.114.144

Well, not much information about the Chinese ISPs there but we at least found Tinet. Here is a nice picture of their site that shows how they connect with the various ISPs:



They simply have a cloud of hops spread about the relevant part of the world they serve, and at the end points they connect to the ISPs. The reason they have a cloud of hops is for reliability, for when some hops fall out...

If you repeat this a few times, you can get an idea of how everything is connected.




So, what Network Tiers are there?

The huge networks we found through trace-routing are known as Tier 1 networks.

    Although there is no authority that defines tiers of networks participating in the Internet, the most common definition of a tier 1 network is one that can reach every other network on the Internet without purchasing IP transit or paying settlements.

    By this definition, a tier 1 network is a transit-free network that peers with every other tier-1 network. But not all transit-free networks are tier 1 networks. It is possible to become transit-free by paying for peering or agreeing to settlements.

Common definitions of tier 2 and tier 3 networks:

        Tier 2: A network that peers with some networks, but still purchases IP transit or pays settlements to reach at least some portion of the Internet.

        Tier 3: A network that solely purchases transit from other networks to reach the Internet.

If you click through to Tier 1 networks from the Internet Backbone page you get to a list of the current Tier 1 networks:

        AT&T from USA
        Centurylink (formerly Qwest and Savvis) from USA
        Deutsche Telekom AG from Germany
        Inteliquent (formerly Tinet) from USA
        Verizon Business (formerly UUNET) from USA
        Sprint from USA
        TeliaSonera International Carrier from Sweden
        NTT Communications from Japan
        Level 3 Communications from USA
        Tata Communications from India

It is not known if AOL Transit Data Network (ATDN) is still a Tier 1 network.

Wait, what... What is Peering?

These networks connect to each other through a process known as 'peering'. Most traffic needs to go over at least 2 different top tier networks in order to reach its destination, and the networks are bridged with peering arrangements. The way this usually works is that each party to the agreement will commit to routing x amount of traffic for the other party on their network, and vice-verse. There is usually no money exchanged in these arrangements, unless one side is sending or receiving a lot more data than the other sides.

Large companies can also go out and arrange their own peering relationships. For example Netflix has arranged its own peering and network infrastructure directly with multiple tier-1 networks so that its traffic is both cheaper and closer to end users on each of the popular US broadband ISP's.

Some Reference links to understand network:

https://en.wikipedia.org/wiki/Internet_protocol_suite
https://en.wikipedia.org/wiki/Packet_switching
https://en.wikipedia.org/wiki/End-to-end_principle
https://en.wikipedia.org/wiki/Internet_Protocol#Reliability
https://en.wikipedia.org/wiki/Encapsulation_(networking)
https://en.wikipedia.org/wiki/Connectionless_communication
https://en.wikipedia.org/wiki/Network_topology#Decentralization 









Saturday, 19 October 2013

Files That Can Be Stored In The Cloud Storage




With the virtual disk, you can store files from various extents, in the same way as it does with the physical hd. The difference is that the HD will continue to operate on a virtual platform to which it has remote access from any device with an internet connection. Furthermore, storing files online are completely safe, as there is no risk of losing data due to possible instabilities operating systems or damage to external hardware such as cd, dvd and pen drive.

Possibilities and advantages of saving your files in “cloud data center“

Video Library

Drama, adventure, suspense, horror, comedy, romantic comedy, animations and more varied series. Have your own movie collection and the best possible environment: The virtual hd can be configured on the “cloud”. Using cloud storage services, you can organize all your media files in folders identical to known and daily used by your operating system. Simple and practical.

CD Library

Similarly the video library, compile all music downloads in one place. Stay calm and get your mind free to focus on other more pressing activities. Discographies in mp3 or any other format will be sound and saved online in cloud hd. The library will be always at your fingertips, wherever you are, all your favorite records or those new to hear are separated calmly in a timely manner.

Photo Album

It is not difficult to find beautiful photo albums. However, it is not feasible to carry physical album everywhere and for this, there is a free server and unlimited capacity data storage. Entering your photos into digital albums, photos will never be yellowed with aged appearance or brittle enough to dissolve over long years. The cloud storage will allow unforgettable moments to be always well represented by faithful record of events stored in user memory and virtual memory.

 Library without limits

The regular reader of the great classics of the past, present, and other relics have a contemporary immeasurable space to gather their favorite authors, creating the most diverse collections of books, etc.. Lovers of comics and graphic novels to read and reread rare editions whenever they want and wherever they want.

Games

The advanced games are extremely heavy and consume a lot of CPU resources, memory and hard drive. Therefore, it is increasingly feasible to store a file like this in a conventional hd. Opting to store your games in a virtual disk, it will be convenient to uninstall other games to gain disk space, since the games arcade remain allocated on the server, regardless of the size of each file. That way, you avoid excessive consumption of virtual memory and preserves the common speed processing of your machine – one of the great advantages of storing a file online. Separate any number of games, sorting them by genre, or create custom lists.


source:esds

What will happen with Cloud Computing in the Future?



Every time, analysts, forecasters and experts, forecast the prospects of technology in the coming years. And it is no secret that cloud computing has become the most discussed and the hot topic. Cloud has loudly declared itself in business technology. IT-directors, vendors and analysts as one, trying to have time to determine what is behind it and what leads us. To that end, I have selected some of the predictions which are likely to come true, of course, if this had not already happened. So, the following are the most likely forecast:

1. More Private Cloud Solutions

Such clouds have not completely moved to the site of the customer or consumer, in other words, they are not “on-premises clouds”. But they also are not public. The following years, the tendency was to the formation of an increasing number of private clouds, but driven by someone else, so-called “off-premises clouds”. In addition, such an approach would be cheaper. Only well-protected isolated private clouds can meet all the necessary requirements. The original company’s commitment to its own cloud infrastructure was severely limited and time-consuming with a lot of investment, and while virtual private clouds provide sufficient effective solution for some organizations.

2. Cloud And Mobile Technologies Merge Together

This is an interesting hypothesis. The existence of many projects due to the cloud just need a mobile access to remote data and services. Almost certainly, for each, there is a cloud infrastructure connected to it with a mobile application that can flexibly respond to requests of mobile clients and deal with heavy traffic. By the way, almost every SaaS application currently has a mobile client that is also a proof of the plausibility of this model.

3. New PCs Own Cloud

Experts at Gartner predicts that personal cloud will gradually displace conventional personal computers, taking on the role of content storage, personal information, providing access to services and becoming the center of our virtual life (by the way, they can still retain the name of the personal computer). The emergence and spread of such private custom cloud will entail the creation of entirely new services, trends and interactions that will become the new center of economic relations and activities. Personal clouds should shift the focus from the client devices to the cloud-based services, which, in turn, has to be delivered to a variety of devices.

4. Increasing The Number Of Brokers Of Cloud Services

Gartner predicts that more and more IT-companies will take on the role of internal brokers in cloud services, controlling the redundancy and the use of diverse and always complex cloud services for their internal users and external business partners.

5. The Growing Number Of Specialized Clouds And Community Clouds

One needs only to refer to the cloud infrastructures, created especially for highly specialized areas such as healthcare, core banking, financial markets, retail sales and industry. This kind of clouds will provide each of the areas of specialized protection, processes, and will also meet other special requirements of each industry. The specific requirements of each industry will increasingly be met with community clouds. A striking example can serve the growing demands of the standards of storage and data protection related to health care. Another example – community clouds in the telecommunications industry to ensure compliance with all standards of disaster recovery.

6. Planned A Serious Lack Of Staff And Expertise

IDC warns about an impending shortage of skills and experience that will emerge as the hallmark of innovation, but at the same time, it will limit the introduction of technology in the workplace. Complicating the issue further is the fact that the attraction of cloud computing comes from different lines of business. The inaccessibility of relevant training and experience is also exacerbated by an increase in the needs of different departments in IT. IT-team very soon cease to be a team of system administrators, network managers, developers and database administrators, and will also include the management and service delivery, contract managers, relationship managers (both with clients and with partners) and business analysts.

7. The Disappearance Of The “Cloud” As A Terms

In the end, we stop everything and everyone to call the clouds and begin a more realistic assessment that falls under this concept and what does not. Every company with the word “cloud” in the title will try to change the brand… How many companies with the terms “Internet” and “client / server” in their names you see today? It is ridiculous-sounding names that end in “aaS”, will suffer the same fate. What do you think? How many of these trends are realistic?








source:esds.co.in

Wireless Security Basics



In this lesson, you’ll learn some of the basics of Wi-Fi security. We’ll also share our recommendation on which type you should choose – eliminating the guesswork and helping you keep your network as secure as possible.

WHAT ARE THE TYPES OF WIRELESS SECURITY?

There are several types of wireless security that you’ll come across– here’s a quick rundown on the details.

WEP

Wired Equivalent Privacy, aka WEP, is the grandfather of wireless security types, dating back to 1999 (an eternity in the world of technology!). When a client (like your laptop or iPad) connects to a WEP-protected network, the WEP key is added to some data to create an “initialization vector”, or “IV” for short. For example, a 128-bit hexadecimal key is comprised of 26 characters from the keyboard (totaling 104 bits) combined with a 24-bit IV. When a client goes to connect to an AP, it sends a request to authenticate, which is met with a challenge reply from the AP. The client encrypts the challenge with the key, the AP decrypts it, and if the challenge it receives matches the original one it sent, the AP will authenticate the client.

This may sound secure, but there was room in this scheme for an exploit to be discovered. The risk presents itself when a client sends its request to the access point– the portion containing the IV is transmitted wirelessly in clear-text (not encrypted). In addition, the IV is simple compared to the key, and when there are several clients using the same WEP key on a network, IVs have an increased probability of repeating. In a busy environment, a malicious user wishing to gain access to a network utilizing WEP security can passively eavesdrop and quickly collect IVs. When enough IVs have been collected, the key becomes trivial to decrypt.

Clearly, WEP is not the correct choice for securing your network, and in light of this, other types of wireless security were created.  

WPA

Wi-FI Protected Access (WPA) was ratified by the Wi-Fi Alliance in 2003 as a response to the insecurities that were discovered in WEP. This new security standard, the Temporal Key Integrity Protocol (TKIP), included several enhancements over WEP, including a new message integrity check nicknamed “Michael.”

While Michael offered a great deal of improvement over the old way of securing networks, there was still some worry about some security issues with using a similar (though much stronger) implementation.

WPA2

The concerns about Michael led to WPA2’s introduction in 2004. At the center of WPA2 is its use of a security protocol based on Advanced Encryption Standard (AES), the U.S. Government’s preferred choice of encryption.

As it stands now, the only people who should still be using TKIP on a wireless network are those who are dealing with hardware that is rated for 802.11g only.

WPS

In 2007, a new security method – Wi-Fi Protected Setup (WPS) – began to show up on wireless access points. With this type of security, a user is able to add new devices to their network by simply pushing a button (within administration software or physically on the router) and then typing in an 8-digit PIN number on the client device. The PIN feature acts as a sort of shortcut for entering in a longer WPA (Wi-Fi Protected Access) key. The basic idea behind WPS is that having physical access to the AP to hit a button and reading a sticker would provide a more secure implementation of Wi-Fi authentication. Everything was well and good in the WPS world, until last winter, when a security researcher discovered the Achilles Heel in the implementation. Here’s how it works:

The eighth and final digit of the PIN number is a checksum, which is used to make sure the 7 digits that matter don’t get corrupted. From these 7 digits, we can see that there are 10,000,000 possibilities (since each of the 7 digits can be 0-9, with repeats allowed). This is still a pretty huge amount of possibilities, and alone could arguably still be considered quite safe — but there’s a flaw in the checking process. When a PIN is being examined by the AP, the first 4 digits (10,000 possibilities) are checked separately from the last 3 digits (1,000 possibilities). This translates into a malicious user only needing to make at most 11,000 guesses, which a computer can handle in a matter of hours!

As you can see, if you or someone you know is currently using WPS on an access point, you should disable the feature ASAP.

OUR RECOMMENDATION

If your access point or clients are only capable of using WEP, it’s time for you to look at upgrading your technology, for the sake of increased security– not to mention increased throughput speeds on newer devices.

Right now, the best security for your Wi-Fi network is WPA2 with WPS disabled. Using this security combination provides the most secure Wi-Fi network possible today, and gives you the peace of mind you need to “set it and forget it.”

Besides, do you really want to trust a single button to provide all the security for your network? If WPA2 with WPS disabled ever becomes vulnerable, we’ll be sure and keep you updated on the adjustments you should make to remain secure.

Source: metageek

Saturday, 22 June 2013

CLOUD COMPUTING: BASIC CONCEPTS


-->

Cloud Computing – The technology of distributed data processing in which some scalable information resources and capacities are provided as a service to multiple external customers through Internet technology.

Cloud computing concept includes all of the following concepts:

IaaS (Infrastructure as a Service) – A computer infrastructure, typically presented in the form of virtualization. Is a service within the concept of cloud computing.

PaaS (Platform as a Service) – An integrated platform for the development, deployment, testing and support of web-applications. Presented as a service on the basis of the concept of “cloud hosting“. 

SaaS (Software as a service) – Is the business model of software license, which involves the development and support of the software vendor. Customers also have the opportunity of paid use of it, usually through the Internet.

DaaS (Desktop as a Service) – Another business model license the software, which is a slightly improved model of SaaS, mostly involving the use of multiple services at the same time necessary to complete the work. Was first introduced in the early 2000s.

In addition to the above within the concept of cloud computing there are also common notion Data as a service and Everything as a service respectively. Both concepts show that, through the World Wide Web using Cloud Computing, can meet any requirements in the processing of information. This is the main advantage of cloud computing in the IT-based business solutions.

Sunday, 16 June 2013

What is Intrusion Detection System? How it works ?

This is a post which i stared learning recently so sharing my little knowledge so intrusion detection system (IDS) is basically used for monitoring the network, it detects intruders; that is, unexpected, unwanted or unauthorized people or programs on network.



An intrusion detection system has a number of sensors that is used to detect unwanted or unexpected flow of network traffic, the major sensors as follows:



  • A sensor monitor log files

  • A sensor monitor TCP ingoing or outgoing connections


    How Intrusion Detection System Works?

    Intrusion detection system works by collecting information and then examining it.IDS collects data from it sensors and analyze this data to give notice to the system administrator about malicious activity on the network.

  • An intrusion detection system can be run manually but most IT administrators find it easier to automate the system checks to ensure that nothing is accidentally overlooked.

  • We can mainly categorize an IDS into two type:

    1. NIDS (Network Intrusion Detection Systems).
    2. HIDS (Host Intrusion Detection Systems)

    There is still a question, why we use IDS if there is firewall to perform these tasks, Firewall is used to stop unwanted traffic from entering or leaving the internal enterprise network, where as the IDS is deployed to monitor traffic in vital segments in the network, generating alerts when an intrusion is detected.

    A firewall has got holes to let things through, without it you wouldn't be able to access the Internet or send or receive emails, there are different ways to bypass or cheat a firewall.

    Snort is an excellent open source Network Intrusion Detection System, OSSEC is an Open Source Host-based Intrusion Detection System.

    Below is an an overview of the basic architecture as well as practical examples of how to customize Open Source Host-based Intrusion Detection System to manage logging from your infrastructure and applications.

    • Video On Intrusion Detection System

    source:DARKSITE

    Copyright 2015. All Rights Reserved

    Design By Premium Blogger Templates | Distributed By Gooyaabi Templates