"Firewall": A Seminar Report On
"Firewall": A Seminar Report On
com
A Seminar
Report on
“Firewall”
Submitted in partial fulfillment of the requirement for the award of degree
Of Bachelor of Technology in Computer Science
www.SeminarSlide.com
www.SeminarSlide.com
INTRODUCTION
The Internet has made large amount of information available to the average computer
user at home, in business and education. For many people, having access to this
information is no longer just an advantage; it is essential.
U s e r s w ho c o n n e c t t he ir c o m p u t e r s t o t h e I nt e r n e t mu s t be a w a r e o f
t h e s e d a n g e r s , t h e i r implications and how to protect their data and their critical
systems. Therefore, security of network is the main criteria here and firewalls provide
this security.
The Internet firewalls keep the flames of Internet hell out of your network or, to keep the
members of your LAN pure by denying them access the all the evil Internet temptations.
www.SeminarSlide.com
What is a Firewall?
• A Firewall is simply a program or hardware device that filters the information
coming through the internet connection into your private network or computer
system.
A web application firewall is less concerned with source and destination addresses, and
focuses on the actual data in the packet to see if the requests being sent to a web server,
and the replies issued from the web server, meet its rules.
For example, a web application firewall may have a rule that says a requested URL may
not be more than 256 characters long. When a packet is found that has a longer URL in
the request field it can be dropped without giving it to the web server.
www.SeminarSlide.com
Hardware firewalls are integrated into the router that sits between a co mputer and the
Internet. They typically use packet filtering, which means they scan packet headers to
determine their source, origin, destination addresses and check with the existing user
defined rules to make an allow/deny decision.
1. Speed: Hardware firewalls are tailored for faster response times, so it can handle more
traffic loads.
2. Security: A firewall with its own operating system is less prone for attacks. This in turn
reduces the security risk and in addition, hardware firewalls have enhanced security
controls.
3. No Interference: Since the hardware firewall is an isolated network component, it can
be managed better, and does not load or slowdown other applications. The firewall can be
moved, shutdown, or reconfigured with minimal interference to the network.
Software firewall
Software firewalls are installed on individual servers. They intercept each connection
request and then determine whether the request is valid or not. Software firewall process
all requests by using the server resources. Apart from performance limitation, the
software firewall has numerous advantages.
1.While comparing with the hardware firewalls, software firewalls are easier to configure
and setup.
2.Through the software firewall, we can restrict some specific application from the
Internet. This makes the software firewall more flexible.
3.The software firewall give users complete control on their Internet traffic through a nice
user friendly interface that requires little or no knowledge.
www.SeminarSlide.com
History of Firewalls
Firewall technology first began to emerge in the late 1980s. Internet was still a fairly new
technology in terms of its global usage and connectivity. The original idea was formed in
response to a number of major internet security breaches, which occurred in the late
1980s.
In 1988 an employee at the NASA Ames Research Center in California sent a memo by
email to his colleagues that read, "We are currently under attack from an Internet VIRUS!
It has hit Berkeley, UC San Diego, Lawrence Livermore, Stanford, and NASA Ames."
This virus known as the Morris Worm was carried by e-mail and is now a common
nuisance for even the most innocuous domestic user.
The Morris Worm was the first large scale attack on Internet security, of which the online
community neither expected, nor were prepared for. The internet community made it a
top priority to combat any future attacks from happening and began to collaborate on new
ideas, systems and software to make the internet safe again.
The first paper published on firewall technology was in 1988, when Jeff Mogul from
Digital Equipment Corp. developed filter systems know as packet filter firewalls. This
fairly basic system was the first generation of what would become a highly evolved and
technical internet security feature. From 1980-1990 two colleagues from AT&T Bell
Laboratories, Dave Presetto and Howard Trickey, developed the second generation of
firewalls known as circuit level firewalls.
The product was released by Digital Equipment Corporation's (DEC) who named it the
SEAL product. DEC’s first major sale was on June 13, 1991 to a chemical company
based on the East-Coast of the USA.
At AT&T Bill Cheswick and Steve Bellovin were continuing their research in packet
filtering and developed a working model for their own company based upon their original
1st generation architecture. In 1992, Bob Braden and Annette DeSchon at the University
of Southern California were developing their own fourth generation packet filter firewall
system.
The product known as “Visas” was the first system to have a visual integration interface
with colours and icons, which could be easily implemented to and accessed on a
computer operating system such as Microsoft's Windows or Apple's Mac/OS. In 1994 an
www.SeminarSlide.com
Israeli company called Check Point Software Technologies built this in to readily
available software known as FireWall-1.
A second generation of proxy firewalls was based on Kernel Proxy technology. This
design is constantly evolving but its basic features and codes are currently in widespread
use in both commercial and domestic computer systems. Cisco, one of the largest internet
security companies in the world released the product to the public in 1997.
The second design goal would be only authorized traffic which is delineated by
the local security policy will be allowed to proceed.
Finally the last design goal is that the firewall itself is resistant to penetration
inclusive is a solid trustworthy system with a protected operating system.
www.SeminarSlide.com
Types of firewalls
Three common types of Firewalls:
Packet-filtering routers
Application-level gateways
Circuit-level gateways (Bastion host)
Packet-filtering Router
Advantages:
Simplicity
Transparency to users
High speed
Disadvantages:
Application-level Gateway
Advantages:
Disadvantages:
Circuit-level Gateway
• Stand-alone system or
• Specialized function performed by an Application-level Gateway
• Sets up two TCP connections
• The gateway typically relays TCP segments from one connection to the other
without examining the contents
• The security function consists of determining which connections will be allowed
• Typically use is a situation in which the system administrator trusts the internal
users
• An example is the SOCKS package
Bastion Host
To understand what a firewall is, one can simply imagine it in biological terms as the
organ of a human known as skin. Skin does not actually kill foreign hostile bodies, it
simply obstructs them.
In a human for example, the loss of more than 50% of skin will result in death, simply
because the immune system cannot repel invaders from such a large and exposed surface
area. The same can be said of firewalls which unlike IDS (Intrusion Detection Systems)
can not actually detect hostile invaders but simply limits their access to your sensitive
internal servers.
Properly designed and deployed, a firewall operates as a shield around your network just
as skin on a human.
Source
o This is where the IP traffic is coming from and is comprised of the
following
o Single IP address or multiple IP addresses
o One or more networks in the form of a network ID and subnet mask
o A combination of IP addresses and Network addresses
Destination
o This is where the IP traffic is going to and is comprised of the following
o Single IP address or multiple IP addresses
o One or more networks in the form of a network ID and subnet mask
o A combination of IP addresses and Network addresses
Service
o This is the type of protocol that the traffic is using and is comprised of the
following
o One or more destination TCP ports
o One or more destination UDP ports
o A group or combination of destination TCP and UDP ports
o Although source port can be limited to a certain range, it is generally left
wide open. It is the destination port that is primarily specified.
Action
o The administrator chooses from the following options if all the above
three criteria match
o Reject the traffic
o Drop the traffic
o Permit the traffic
o Encrypt the traffic on IPSEC VPN capable firewalls
www.SeminarSlide.com
There are two basic reasons for using a firewall at present: to save money in
concentrating your security on a small number of components, and to simplify the
architecture of a system by restricting access only to machines that trust each other.
Firewalls are often regarded as some as an irritation because they are often regarded as an
impediment to accessing resources. This is not a fundamental flaw of firewalls, but rather
is the result of failing to keep up with demands to improve the firewall.
There is a fairly large group of determined and capable individuals around the world who
take pleasure in breaking into systems. Other than the sense of insecurity that it has
instilled in society, the amount of actual damage that has been caused is relatively slight.
It highlights the fact that essentially any system can be compromised if an adversary is
determined enough. It is a tried and true method to improve security within DOD projects
to have a ``black hat'' organization that attempts to break into systems rather than have
them found by your real adversaries. By bringing the vulnerabilities of systems to the
forefront, the Internet hackers have essentially provided this service, and an impetus to
improve existing systems. It is probably a stretch to say that we should thank them, but I
believe that it is better to raise these issues early rather than later when our society will be
almost 100% dependent on information systems.
www.SeminarSlide.com
Advantages of firewall
Concentration of security all modified software and logging is located on the
firewall system as opposed to being distributed on many hosts;
P r oto co l f ilt er ing, w her e t he f ir ew a ll f ilt er s pr oto co ls a nd ser vice s t hat
ar e e it her no t nece ss ar y o r t hat cannot be adequately secured from
exploitation;
I n fo r ma t io n h id in g , in w h i c h a f ir e w a l l c a n ` ` h id e ' ' n a m e s o f
i n t e r n a l s y s t e m s o r e l e c t r o n i c m a i l addresses, thereby revealing less
information to outside hosts;
Disadvantages of firewall
A s e c o nd d is a d va nt a g e w it h a f ir e w a l l s ys t e m i s t ha t it
c o n c e n t r a t e s s e c u r i t y i n o n e s p o t a s o p p o s e d t o dist r ibut ing it
a mo ng s yst e ms, t hu s a co mpr o mis e o f t he f ir ewa ll co u ld be d is ast r o us
to ot he r le ss- pr o t ect ed systems on the subnet. This weakness can be
countered; however, with the argument that lapses and weakness in se cur it y ar e
mo r e like ly t o be fo und a s t he nu mber o f s yst e ms in a s u bnet incr e ase,
t her e by mu lt ip lying t he ways in which subnets can be exploited.
Conclusion
One of the best things about a firewall from a security standpoint is that it
stops anyone on the outside from logging onto a computer in your private
network.
While this is a big deal for businesses, most home networks will probably
not be threatened in this manner. Still, putting a firewall in place provides
some peace of mind.
www.SeminarSlide.com
References
www.SeminarSlide.com
www.google.com
www.wilipedia.com
www.SeminarSlide.com