Network Taps Threat Insight of HTTP SSL and TLS Protocol Monitor Cyber Security

Background

In the early days of accessing the web, we used the HTTP protocol, which used clear text when transferring data. Clear text transfer brought the following risks:

1. Information interception risk, and the third party can obtain the communication content

2. Risk of information tampering. The third party may tamper with the content of the communication

3. Identity impersonation risk. The third party can impersonate the identity of others to participate in the communication

To address the risks of plaintext transmission, netscape designed SSL for the Web as a secure transport protocol in 1994, which is the origin of SSL.The IETF standardized SSL and published the first edition of the TLS standard document in 1999.This was followed by RFC 5246 (August 2008) and RFC 6176 (March 2011).This protocol is widely used in the web.

Your network is under Attack? The Mainstreaming of Cybercrime happen everyday.

Take control and solve problems faster;

Experience Next Generation Visibility and Troubleshooting;

Achieving Service Assurance across Multi-Cloud Environments;

Smart Security is Here!

Contact our team today, see what the others can't, let's be a partner, we are here to accelerate Your NFV Journey!

SSL/TLS Protocol

TLS (Transport Layer Security) and its predecessor, SSL (Secure Sockets Layer), are Security protocols designed to provide Security and data integrity for Internet communications.

The TLS protocol USES the following three mechanisms to provide secure transmission for information communication:

1. Confidentiality. All communication is transmitted through encryption

2. Identity authentication shall be conducted through certificates

3. reliability, through the verification of data integrity to maintain a reliable security connection

Working Mechanism:

The TLS protocol consists of two parts, including (TLS Record Layer,TLS handshake protocol)

Record Layer:

Provide a header for each Message and generate a hash value from Message Authentication Code (MAC) at the end, where the header consists of 5 bytes, namely protocol description (1bytes), protocol version (2bytes) and length (2bytes). The length of protocol information following the header shall not exceed 16384bytes.

Handshake Protocol:

Starting a secure connection requires the client and server to repeatedly establish a handshake.A

TLS handshake goes through the following steps:

The SSL Handshake Protocol goes through the following steps:

3. 100G Data Acquisition, Data Capturing and Switch Service Card/Module Network Taps

NT-FTAP-32QCX Network TAP NPB.pdf

NetTAP® (Full named Chengdu Shuwei Communication Technology Co., Ltd.)was established in 2007. Focusing on the Research and Development of Network TAPs/NPBs Communication Equipment, Data Security Analysis Equipment, which provides products and solutions in Big Data Acquisition, Data Storage, Data Monitoring, Data Processing and Data Analysis for Telecom, TV Broadcasting, Government, Education, IT, Finance, Bank, Hospital, Transportation, Energy, Power, Petroleum, Enterprise and other industries.

NetTAP® has launched various types of high-density devices such as: Fast Gigabit, 10 Gigabit Ethernet Network Traffic Replication, Aggregation, Distribution Network TAPs/NPBs (Network Packet Broker), intelligent Hybrid Traffic Network TAPs, 25G, 40G, 100G, etc. high density and Performance Network TAPs/NPBs(Network Packet Broker).

NetTAP® has a hardware production plant, all the communication products have complete Software and Hardware Independent Intellectual Property Rights, with complete Copyright Registration and Product Certification.

MATRIX NetInsight™ - A Fully Function Network Visibility Control Platform

MATRIX NetInsight™ Network System Value

1- Data Acquisition with centralized planning, eliminate monitoring blind spot

2- Free distribution of data, saving analysis of the overall investment

3- Data Security Control, Reduce the risk of disclosure

4- Overall Traffic visible, Abnormal Located more accurate, Fault analysis more useful

MATRIX NetInsight™ Function Architecture

1- User Interaction Layer

2- Big Data Analysis Layer

3- Data Storage Layer

4- Analysis Visibility Layer

5- Data Acquisition Layer

                                                                                       Zain Cloud Project of Saudi Arabia Telecom