Solved

HomeWork-Network Security using TCP

Posted on 2011-03-20
4
464 Views
Last Modified: 2012-05-11
Hello:

I am interested in learning which protocol is best either TCP, UDP, or Tunneling (Proxy). Please see assignment question below.

Question:
Suppose there are two separate domains, one at SECRET (S) and one at Top Secret (TS), with a guard between them. Assume the guard is truly a “diode”, allowing packets in only one direction. What direction will the guard allow traffic to flow? Suppose you want to move traffic in the allowed direction. Can you run an ordinary TCP connection through the guard to pass it through the guard? Explain why/why not, and if not, what protocol can you use to move the data?
0
Comment
Question by:Sundayy
4 Comments
 
LVL 31

Accepted Solution

by:
Justin Owens earned 500 total points
ID: 35182788
It would have to be one way.  Remember that each level of classification builds on other levels.  If you have Top Secret clearance, it assumes Secret clearance.  Because of this, a Secret domain will be allowed to pass information UP to a Top Secret domain, but not from Top Secret DOWN to Secret.

Because UPD is the only protocol listed which doesn't require two way traffic, it defaults to the type of traffic which must be utilized through the guard.  Ordinary TCP never works only one way.

DrUltima
0
 

Author Closing Comment

by:Sundayy
ID: 35186745
Thanks for the clarification.
0

Featured Post

Superior storage. Superior surveillance.

WD Purple drives are built for 24/7, always-on, high-definition security systems. With support for up to 8 hard drives and 32 cameras, WD Purple drives are optimized for surveillance.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction This article explores the design of a cache system that can improve the performance of a web site or web application.  The assumption is that the web site has many more “read” operations than “write” operations (this is commonly the ca…
Load balancing is the method of dividing the total amount of work performed by one computer between two or more computers. Its aim is to get more work done in the same amount of time, ensuring that all the users get served faster.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now