|
|||||||||||||||||
![]() |
|||||||||||||||||
|
Many of the are based on those available through the operating system. The following sections outline TCP/IP security.
The security policy for networking is an extension of the security policy for the operating system, and it consists of the following major components:
User authentication is provided at the remote host by a user name and password, the same as when a user logs in to the local system. Trusted TCP/IP commands, such as ftp, rexec, and telnet, have the same requirements and go through the same verification process as trusted commands in the operating system.
Connection authentication is provided to ensure that the remote host has the expected Internet Protocol (IP) address and name. This prevents a remote host from masquerading as another remote host.
Data import and export security permits data at a specified security level to flow to and from network interface adapters at the same security and authority levels. For example, top secret data can flow only between adapters that are set to the top secret security level.
Tags: tcp/ip, ip, tcp, telnet, data, security