IT Governance, Risk, and Compliance » Virtual Private Network

A Few Fundamentals of Networking Electronically Encoded Data – Part IV

Robert Davis — Sat, 22 Sep 2012 00:07:07 +0000

In TDM (typically utilized for digital signals) a device is given a specific time slot during which it can utilize a particular channel. In contrast, with FDM (typically utilized for analog signals) the channel is subdivided into sub-channels, each with a different frequency width that is assigned to a specific signal.

Through TDM incorporation, optical-fiber networks can use dense wavelength-division multiplexing (DWDM), also known as wave division multiplexing (WDM), in which different data signals are sent in different wavelengths of light in the fiber-optic medium.

How networking services are maintained by enterprises

Network Administration is the function designated to maintain a secure as well as reliable on-line communications network and serves as liaison with user departments to resolve network needs and problems. Specifically, this function is generally responsible for maintaining network security, maintaining optimum system performance, and providing technical assistance to users. Thus, just like the ‘telephone service technician‘, the network administrator should be considered the specialist capable of reestablishing communication if service quality is diminished.

“View Part I of the A Few Fundamentals of Networking Electronically Encoded Data series here”

Post Note: “A Few Fundamentals of Networking Electronically Encoded Data – Part IV” was originally published through Suite101.com under the title “A Few Fundamentals of Networking Electronically Encoded Data”

A Few Fundamentals of Networking Electronically Encoded Data – Part III

Robert Davis — Thu, 20 Sep 2012 01:09:51 +0000

Packet assembly and disassembly between telecommunication links

Input or output (I/O) channels are paths along which datum are transmitted to and from primary storage. These communication channels also handle the transfer of datum to and from I/O devices. As a result, this function can relieve the Central Processing Unit (CPU) of responsibility for data transfers to and from I/O devices, increase the number of input and output operations that can be performed simultaneously and reduce the time a CPU must wait for datum to arrive from, or sent to, an I/O device.

A common IT transmission technique for telecommunications is multiplexing. Multiplexing is the process of transmitting multiple (but separate) signals simultaneously over a single channel or line. The two main types of multiplexing methods are time-division multiplexing (TDM) and frequency-division multiplexing (FDM). Because the signals are sent in one complex transmission, the receiving end has to separate the individual signals through de-multiplexing.

“View Part I of the A Few Fundamentals of Networking Electronically Encoded Data series here”

Post Note: “A Few Fundamentals of Networking Electronically Encoded Data – Part III” was originally published through Suite101.com under the title “A Few Fundamentals of Networking Electronically Encoded Data”

A Few Fundamentals of Networking Electronically Encoded Data – Part II

Robert Davis — Sat, 15 Sep 2012 00:24:41 +0000

All of the computers and other hardware connected to a particular network must follow the same rules or operations commonly called protocols. Operational rules are typically divided up into layers so a programmer or network administrator need only be concerned with the layer with which the software is communicating. In defining these layers, reference models have been created. At this level, available reference models for classifying communication protocols and protocol suites include the: U.S. Department of Defense, Open Systems Interconnection and Berkeley University framework.

In order to send data over a network, the necessary programs must be executed. However, datum must be organized for transmission. Consequently, a very important networking concept is the packet. Packets are telecommunication units transmitted from a sending device to a receiving device with an appended header. Substantively, a packet header contains information that is required to transfer attached data across the network.

“View Part I of the A Few Fundamentals of Networking Electronically Encoded Data series here”

Post Note: “A Few Fundamentals of Networking Electronically Encoded Data – Part II” was originally published through Suite101.com under the title “A Few Fundamentals of Networking Electronically Encoded Data”

A Few Fundamentals of Networking Electronically Encoded Data – Part I

Robert Davis — Thu, 13 Sep 2012 00:42:31 +0000

Any distributed IT infrastructure requires a complex set of communication functions for proper operation. Many of these functions, such as reliability mechanisms, are common across IT architectures. Thus, the communication task is generally viewed as consisting of a modular architecture, in which the various elements of the IT configuration perform designated functions.

Standard network telecommunication approaches

There are two major concepts regarding how communication occurs on networks: successive-links and direct-links. Successive-links exist when a definite connection is made from one computer to another until the destination is reached. Alternatively, networks may establish direct-links between sending points and destination points.

Post Note: “A Few Fundamentals of Networking Electronically Encoded Data – Part I” was originally published through Suite101.com under the title “A Few Fundamentals of Networking Electronically Encoded Data”

Trans-border Communication Protection – Part IV

Robert Davis — Mon, 06 Jul 2009 19:02:31 +0000

The primary distinguishing feature between IPSec and SSL is their respective OSI reference model protocol communication tier levels. IPSec operates at the network layer of the OSI reference model while SSL operates at the transport layer. Protection mechanism utilization should be determined by information sensitivity. IPSec or SSL can be combined with a VPN to limit data interception, manipulation, and redirection. Standards exist for encryption systems, such as SSL and IPSec, which ensure compatibility among various hardware and software platforms. Comparatively, regarding trans-border privacy issues, SSL VPN can be considered a viable alternative to stand-alone IPSec deployment.

“View Part I of the Trans-border Communication Protection series here“

Trans-border Communication Protection – Part III

Robert Davis — Thu, 02 Jul 2009 20:12:46 +0000

Generally, a VPN is recognized as a confidential data plexus that employs the public telecommunication infrastructure while maintaining privacy through the utilization of a tunneling protocol and security procedures. A VPN can provide remote offices and telecommuters with secure access to the connected local or wide area networks. When a VPN is introduced to the secure protocol privacy protection equation, IPSec and SSL technologies require mobile users to deploy client software on specific computers for utilization enablement.

Concerning secure access, virtual private networking requires a carrier as well as encapsulating protocol to provide tunneling functionality. Therefore, encryption, authentication, and data packaging usually are incorporated in a SSL VPN. Furthermore, below the OSI transport layer, a VPN can provide additional privacy data protection. This has many manifestations, the most popular being IPSec, typically implemented as a protected ‘tunnel’ between two gateway routers. An IPSec ‘vanilla’ VPN only uses the Encapsulating Security Payload (ESP) header record. However, ESP protects against IT communication eavesdropping, forgery, or replay risks.

“View Part I of the Trans-border Communication Protection series here“

Trans-border Communication Protection – Part II

Robert Davis — Mon, 29 Jun 2009 18:52:19 +0000

SSL is a protocol suite enabling in transit security through data encryption, server authentication, and message integrity at four Open Systems Interconnection (OSI) reference model layers. For Internet communications, SSL is normally utilized in conjunction with an entity’s public key infrastructure. Commonly, when the trans-border privacy breach risk is low, the Hyper Text Transfer Protocol Security service is employed with SSL encryption to protect sensitive web packets. Beneficially, where SSL is integrated for required privacy related communication, applications no longer need to implement secure connectivity. Nevertheless, security managers should not interpret SSL deployment as the ‘bullet-proof’ technology that completely defers application communication privacy issues. Specifically, SSL should initiate deployment caution when utilized for mutual application authentication, since there are two different session keys seeking connectivity authorization during bidirectional interfaces. Consequently, each key should be verified before transmitting legally protected data.

Alternatively, IPSec is a protocol suite that enables security at five OSI reference model layers during internetworking communications. The IPSec model is an architecture composed of standard rules for protecting Internet Protocol traffic. These standard rules can be incorporated into transport and tunnel mode encapsulation. Tunnel mode provides two additional header records for sending messages, thus requiring more processing. Neither the application nor the stacking protocol needs to be cryptographically aware, since all designated traffic is encrypted regardless of origin within the entity’s information security perimeter. Possible IPSec issues are network device computational and/or bandwidth overhead.

“View Part I of the Trans-border Communication Protection series here“

Trans-border Communication Protection – Part I

Robert Davis — Thu, 25 Jun 2009 19:43:58 +0000

Legal compliance with local, national and regional privacy requirements is complex and dynamic. Every problem on the local level compounds exponentially when private data is shared across multiple jurisdictions. What data is private, who possess particular data and what laws and regulations apply are by no means transparent. Trans-border communication privacy risks may emanate from sources presumed technologically secure, including the entity’s network architecture and/or application programs. Realization of how vulnerable data is in transit has spurred various, yet unique, technological communication protection solutions. The Internet Protocol Security (IPSec) and Secure Socket Layer (SSL) protocols are two well-known configuration items redressing privacy compliance mandates during information conveyance. However, in-depth security considerations can necessitate transporting messages within a Virtual Private Network (VPN).