Port knocking

Ramesh Krishnan Gurusamy

Diplomová práce

Abstract:

The objective of the diploma thesis is to set up secured mechanism called Port Knocking between a client and a server machine, which provides an extra layer of security. Port Knocking’s primary aim is to supply an additional layer of protection through the utilisation of authentication with an additional advantage of concealment. Port knocking is not an alternative for SSH or any other authentication system, instead it provides an extra layer of security with the existing authentication scheme, it is a method which permit’s the firewall to open a port on the machine, where all the ports are blocked.The main goal is to secure a system from the attacks by pre-defining a mechanism which is Port Knocking. Firewall's could easily limit the services by closing all the ports on a system which has to be secured and then open a desired port by recognising a knock mechanism. The other goal is to monitor the system for any threats or attacks, by monitoring the input traffic by an Intrusion Detection System (IDS) and by performing log analysis which helps to find out the traffic which were attempting to get access to our secure system

Keywords

Port Security, Port Knocking, Network Administration, Firewall, NAT, Authentication, Port Scan, Daemon

Jazyk práce: angličtina

Datum vytvoření / odevzdání či podání práce: 29. 3. 2019

Obhajoba závěrečné práce

• Vedoucí: Ing. Martin Havránek, Ph.D.

Česká zemědělská univerzita v Praze

Provozně ekonomická fakulta

Magisterský studijní program / obor:
Systems Engineering and Informatics / Informatics