EE579TNetwork Security9 An Overview of SNMP.ppt

EE579TNetwork Security9: An Overview of SNMP  Prof. Richard A. Stanley Overview of Tonight’s Class Review last week’s lesson Security in the news SNMP Summary TCP/IP was not intended as a secure protocol; as a result, it has vulnerabilities that can be exploited There are many ways to get access to info There are many types of attacks that can be mounted over network connections in order to gain unauthorized access to resources Never forget, the best access is hands-on Top Ten Security Concerns Crypto Security--Again Bugtraq reports 1024-bit RSA encryption should be “considered compromised” Estimates factoring can be done for $1B What uses a key stronger than 1024 bits? So, are SSL, S/MIME, all toast? What about risk management? Is what you have worth $1B to someone? If so, do they have the $1B to spend on it? SNMP Outline Basic Concepts of SNMP SNMPv1 Community Facility SNMPv2 SNMPv3 Why SNMP? To provide a simple means of managing objects across a network These objects need not be network elements The objects need not support SNMP (although it makes things easier if they do!) “Management” can be tailored to mean what we need it to mean First introduced in 1988 Basic Concepts of SNMP An integrated collection of tools for network monitoring and control. Single operator interface Minimal amount of separate equipment. Software and network communications capability built into the existing equipment SNMP key elements: Management station (physical device) Management agent (software implementation) Management information base (collection of objects) Network Management protocol Get, Set and Trap SNMP MIB Management Information Base = MIB Database held at the managed client Scalar variables 2D tables Uses streamlined protocol to: Allow manager to Get and Set MIB variables Enable agent to issue unsolicited notifications These are called traps SNMP Characteristics Runs over UDP/IP or TCP/IP, depending on version Uses Port 161 (for messages) Port 162 (for traps) SNMP