Router Security Strategies: Securing IP Network Traffic Planes

Description

Two Cisco consulting system engineers describe security measures available within the data plane to protect against IP network threats and review techniques to secure and mitigate attacks within the IP control, management, and service planes. Enterprise network and service provider network case studies further illustrate how optimizing the selection of IP traffic plane protection measures using in depth and breadth principles provides an effective security strategy. The appendices map common IOS 12.0S security configuration commands to their IOS XR counterparts, and outline the header format for several common IP network protocols. Two Person Nonzero Sum Games. 3.1 The Basics. Problems. 3.2 2 x 2 Bimatrix Games. Problems. 3.3 Interior Mixed Nash Points by Calculus. Problems. 3.3.1 Proof that there is a Nash Equilibrium for Bimatrix Games (Optional).3.4 Nonlinear Programming Method for Nonzero Sum 2 person Games. Problems. 3.5 Choosing among several Nash Equilibria (Optional). Problems. 4. N Person Nonzero Sum Games with a Continuum of Strategies. 4.1 The Basics. 4.2 Economics applications of Nash equilibria. Problems. 4.2.1 Duels. Problems. 4.3 Auctions (Optional).4.3.1 Complete Information 208. Problems. 4.3.2 Incomplete Information. 4.3.3 Symmetric Independent Private Value Auctions. Problems. 4.3.4 Symmetric Individual private value auctions again. Problems. 5. Cooperative games. 5.1 Coalitions and Characteristic Functions. Problems. 5.1.1 Finding the least core. Problems. 5.2 The Nucleolus. Problems. 5.3 The Shapley Value. Problems. 5.4 Bargaining. 5.4.1 The Nash model with security point. 5.4.2 Threats. Problems. 6. Evolutionary Stable Strategies and Population games. 6.1 Evolution. Problems. 6.2 Population games. Problems. Appendix A: The essentials of matrix analysis. Appendix B: The essentials of probability. B.0.1 Order Statistics. Appendix C: The Essentials of Maple. Appendix D: The Mathematica commands. Appendix E: Biographies. Appendix F: Solutions to selected Problems. Problem Solutions. References. Index. Router Security Strategies Contents Foreword Introduction Part I: IP Network and Traffic Plane Security Fundamentals Chapter 1 Internet Protocol Operations Fundamentals IP Network Concepts IP Protocol Operations IP Traffic Concepts IP Traffic Planes IP Router Packet Processing Concepts General IP Router Architecture Types Summary Review Questions Further Reading Chapter 2 Threat Models for IP Networks Threats Against IP Network Infrastructures Threats Against Layer 2 Network Infrastructures Threats Against IP VPN Network Infrastructures Summary Review Questions Further Reading Chapter 3 IP Network Traffic Plane Security Concepts Principles of Defense in Depth and Breadth Network Edge Security Concepts Network Core Security Concepts Summary Review Questions Further Reading Part II: Security Techniques for Protecting IP Traffic Planes Chapter 4 IP Data Plane Security Interface ACL Techniques Unicast RPF Techniques Flexible Packet Matching QoS Techniques IP Options Techniques ICMP Data Plane Mitigation Techniques Disabling IP Directed Broadcasts IP Sanity Checks BGP Policy Enforcement Using QPPB IP Routing Techniques IP Transport and Application Layer Techniques Layer 2 Ethernet Security Techniques Summary Review Questions Further Reading Chapter 5 IP Control Plane Security Disabling Unused Control Plane Services ICMP Techniques Selective Packet Discard IP Receive ACLs Control Plane Policing Neighbor Authentication Protocol-Specific ACL Filters BGP Security Techniques Layer 2 Ethernet Control Plane Security Summary Review Questions Further Reading Chapter 6 IP Management Plane Security Management Interfaces Password Security SNMP Security Remote Terminal Access Security Disabling Unused Management Plane Services Disabling Idle User Sessions System Banners Secure IOS File Systems Role-Based CLI Access Management Plane Protection Authentication, Authorization, and Accounting AutoSecure Network Telemetry and Security Management VPN for MPLS VPNs Summary Review Questions Further Reading Chapter 7 IP Services Plane Security Services Plane Overview Quality of Service MPLS VPN Services IPsec VPN Services Other Services Summary Review Questions Further Reading Part III: Case Studies Chapter 8 Enterprise Network Case Studies Case Study 1: IPsec VPN and Internet Access Case Study 2: MPLS VPN Summary Further Reading Chapter 9 Service Provider Network Case Studies Case Study 1: IPsec VPN and Internet Access Case Study 2: MPLS VPN Summary Further Reading Part IV: Appendixes Appendix A: Answers to Chapter Review Questions Appendix B: IP Protocol Headers IP Version 4 Header TCP Header UDP Header ICMP Header Ethernet/802.1Q Header MPLS Protocol Header Further Reading Appendix C: Cisco IOS to IOS XR Security Transition Data Plane Security Commands Control Plane Security Commands Management Plane Security Commands Services Plane Security Commands Further Reading Appendix D: Security Incident Handling Six Phases of Incident Response Cisco Product Security Industry Security Organizations Regional Network Operators Groups Further Reading Index A B C D E F G H I J K L M N O P Q R S T U V W X Y