BUSINESS DATA NETWORKS AND SECURITY

ELEVENTH EDITIONBUSINESS DATA NETWORKSAND SECURITYRaymond R. PankoUniversity of Hawai i at MānoaJulia L. PankoWeber State University330 Hudson Street, NY NY 10013

Vice President, IT & Careers: Andrew GilfillanSenior Portfolio Manager: Samantha LewisManaging Producer: Laura BurgessAssociate Content Producer: Stephany HarringtonPortfolio Management Assistant: Madeline HouptDirector of Product Marketing: Brad ParkinsProduct Marketing Manager: Heather TaylorProduct Marketing Assistant: Jesika BetheaField Marketing Manager: Molly SchmidtField Marketing Assistant: Kelli FisherCover Image: uschools/E /Getty ImagesVice President, Product Model Management: Jason FournierSenior Product Model Manager: Eric HakansonLead, Production and Digital Studio: Heather DarbyDigital Studio Course Producer: Jaimie NoyProgram Monitor: Christopher Rualizo, SPi GlobalProject Manager: Neha Bhargava, Cenveo Publisher ServicesComposition: Cenveo Publisher ServicesPrinter/Binder: LSC CommunicationsCover Printer: Phoenix ColorText Font: Palatino LT ProCredits and acknowledgments borrowed from other sources and reproduced, with permission, in this textbook appear onthe appropriate page within text or at the end of book.Microsoft and/or its respective suppliers make no representations about the suitability of the information contained in thedocuments and related graphics published as part of the services for any purpose. All such documents and related graphicsare provided “as is“ without warranty of any kind. Microsoft and/or its respective suppliers hereby disclaim all warrantiesand conditions with regard to this information, including all warranties and conditions of merchantability, whether express,implied or statutory, fitness for a particular purpose, title and non-infringement. In no event shall Microsoft and/or itsrespective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resultingfrom loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or inconnection with the use or performance of information available from the services.The documents and related graphics contained herein could include technical inaccuracies or typographical errors. Changesare periodically added to the information herein. Microsoft and/or its respective suppliers may make improvements and/or changes in the product(s) and/or the program(s) described herein at any time. Partial screen shots may be viewed in fullwithin the software version specified.TrademarksMicrosoft Windows , and Microsoft Office are registered trademarks of the Microsoft Corporation in the U.S.A. and othercountries. This book is not sponsored or endorsed by or affiliated with the Microsoft Corporation.Copyright 2019, 2016, 2013 by Pearson Education, Inc. All rights reserved. Manufactured in the United States ofAmerica. This publication is protected by Copyright, and permission should be obtained from the publisher prior to anyprohibited reproduction, storage in a retrieval system, or transmission in any form or by any means, electronic, mechanical,photocopying, recording, or likewise. For information regarding permissions, request forms and the appropriate contactswithin the Pearson Education Global Rights & Permissions department, please visit www.pearsoned.com/permissions.Acknowledgements of third party content appear on the appropriate page within the text, which constitutes an extension ofthis copyright page.Unless otherwise indicated herein, any third-party trademarks that may appear in this work are the property of theirrespective owners and any references to third-party trademarks, logos or other trade dress are for demonstrative ordescriptive purposes only. Such references are not intended to imply any sponsorship, endorsement, authorization,or promotion of Pearson’s products by the owners of such marks, or any relationship between the owner and PearsonEducation, Inc. or its affiliates, authors, licensees or distributors.Library of Congress Cataloging-in-Publication DataNames: Panko, Raymond R., author. Panko, Julia L., author.Title: Business data networks and security / Raymond R. Panko, University ofHawai’i at Mānoa, Julia L. Panko, Weber State University.Description: Tenth edition. Boston : Pearson, [2018] Includesbibliographical references and index.Identifiers: LCCN 2017048586 ISBN 9780134817125 (alk. paper) ISBN0134817125 (alk. paper)Subjects: LCSH: Business enterprises–Computer networks–Security measures. Computer networks–Management. Computer networks–Security measures. Computer security.Classification: LCC HD30.37 .P36 2018 DDC 658.4/78–dc23 LC record available athttps://lccn.loc.gov/2017048586ISBN 10:0134817125ISBN 13: 9780134817125

To Sal Aurigemma. A great partner in crime in research and teaching.

BRIEF CONTENTSPreface for AdoptersxxiPreface for Students xxxvAbout the AuthorsxliChapter 1Chapter 1aChapter 2Chapter 3Chapter 3aChapter 4Chapter 5Chapter 5aChapter 6Chapter 6aChapter 7Chapter 8Chapter 8aChapter 9Chapter 9aChapter 10Chapter 11AppendixCore Network Concepts and Terminology 1Hands-On: A Few Internet Tools 36Network Standards 37Network Management 73Hands-On: Microsoft Office Visio 102Network Security 107Ethernet (802.3) Switched LANs 145Hands-On: Cutting and Connectorizing UTP 175Wireless LANs I 181Hands-On: Using Xirrus Wi-Fi Inspector 213Wireless LANs II 223TCP/IP Internetworking I 255Hands-On: Wireshark Packet Capture 286TCP/IP Internetworking II 293Cisco’s IOS Command Line Interface (CLI) 322Carrier Wide Area Networks (WANs) 327Networked Applications 353Managing the Security Process 387Glossary 425IndexCredits449469Online ModulesModule AModule BModule CModule DMore on TCPMore on ModulationMore on TelecommunicationsDirectory Serversv

CONTENTSPreface for AdoptersxxiPreface for Students xxxvAbout the AuthorsxliCHAPTER 1 CORE NETWORK CONCEPTS AND TERMINOLOGY1A State of Siege 1Anything, Anytime, Anywhere 4The Internet Reorganizes to Get Commercial 4Old Yet Always New 5Owning and Managing the Internet 7The Snake in the Garden 8Next Steps 9Outside the Internet 9Client and Server Hosts 10Networked Applications 12The Job of the Source Host 13The Job of the Destination Host 16Inside the Internet 17The Main Characters: IP Addresses, Packets, Routers,Data Links, and Routes 17IP Addresses 17IP Packets 19Routers 20Data Links and Routes 21The Transport and Internet Processes in the Network Stack 22Supervisory Standards: Beyond TCP and IP 23Single Networks, Data Links, and Physical Links 26Point-to-Point Single Networks 26Ethernet Single Networks 27Frames and Packets 29Single Network Addresses 31Internet Routers and Personal Access Routers 32Internet Core Routers 32Residential Access Router 32vii

viiiContentsCorporate Access Point 33Where to Next? 33End-of-Chapter Questions 34Chapter 1a HANDS-ON: A FEW INTERNET TOOLSChapter 2 NETWORK STANDARDS3637How Internet Standards Come to Be IN MORE DEPTH: April 1 and RFCs3740Introduction 40Standard Protocol 41What Are Network Standards? 41The Importance of Standards 41Creating Standards 42Standards Agencies 42Standards Architectures 43The OSI Standards Architecture 45The TCP/IP Standards Architecture 46When Do We Capitalize “Internet?“ 46The Hybrid TCP/IP–OSI Standards Architecture 47Message Ordering (Plus Reliability and Connection Orientation)in Standards 49Simple Message Ordering in HTTP 49Message Ordering and Reliability in TCP at theTransport Layer 50Message Syntax in Standards 54Syntax: General Message Organization 54The Syntax of the Internet Protocol (IP) Packet 56Transmission Control Protocol (TCP) Segment Syntax 57User Datagram Protocol (UDP) Datagram Syntax 59Port Numbers 60Frame Syntax 63Encoding Application Messages into Binary 64Encoding 64Encoding Text as ASCII 65Converting Integers into Binary Numbers (1s and 0s) 66Encoding Alternatives 68Protocols in this Chapter 70End-of-Chapter Questions 71

ContentsChapter 3 NETWORK MANAGEMENT73Introduction 73Network Quality of Service (QoS) 74Transmission Speed 74Other Quality-of-Service Metrics 78Service Level Agreements (SLAs) 80Network Design 82Traffic Analysis 82Reliability Through Redundancy 85Traffic Requirements versus Leased Lines 86Momentary Traffic Peaks 87Centralized Network Management 90Ping 92Traceroute 93The Simple Network Management Protocol (SNMP) 94Automation 96Software-Defined Networking (SDN) 96Traditional Configuration and Its Discontents 96Software-Defined Networking Operation 99End-of-Chapter Questions 101Chapter 3a HANDS-ON: MICROSOFT OFFICE VISIO102What is Visio? 102Using Visio 102Chapter 4 NETWORK SECURITY107The Target Breach 107The POS Attack 108Damages 111Perspective 112Introduction 112Types of Attacks 113Malware Attacks 113Vulnerabilities and Patches 114Social Engineering: No Vulnerability Necessary 114Types of Malware 115Payloads 117Human Break-Ins (Hacking) 118ix

xContentsDenial-of-Service (DoS) Attacks 120Advanced Persistent Threats (APTs) 121Types of Attackers 122Cybercriminals 122Employees, Ex-Employees, and Other Insiders 123Business Competitors 124Cyberterrorists and National Governments 124Protecting Dialogues Cryptographically 125Encryption for Confidentiality 125Electronic Signatures: Message Authenticationand Integrity 126Host-to-Host Virtual Private Networks (VPNs) 127Authentication 128Authentication Terminology and Concepts 128Reusable Passwords 129Other Forms of Authentication 132Firewalls and Intrusion Detection Systems 135Dropping and Logging Provable Attack Packets 136Stateful Packet Inspection (SPI) Firewalls 137Next-Generation (Application Aware) Firewalls(NGFWs) 139Intrusion Detection System (IDSs) 141 IN MORE DEPTH: Antivirus Protection 142End-of-Chapter Questions 143Chapter 5 ETHERNET (802.3) SWITCHED LANs145Ethernet Begins 145Introduction 146Local Area Networks 146Perspective: Layer 1 and Layer 2 Standards 147Basic Physical Layer Terminology 148Ethernet Physical Layer Standards 150Signaling 1504-Pair Unshielded Twisted Pair (UTP) Physical Links 152Optical Fiber (Fiber) 155Link Aggregation (Bonding) 159Perspective on Purchasing Physical Links in Ethernet 160 IN MORE DEPTH: Fiber Modes and Light Wavelength 161

ContentsThe Ethernet Data Link Layer Switching and Frame SyntaxStandard 162Physical Link and Data Link Length Restrictions 162Ethernet Data Link Layer Switch Operation 164Core Fields in the Ethernet Frame 166 IN MORE DEPTH: Secondary Fields in The Ethernet Frame 168Management 169SNMP 169Reliability 169Ethernet Security 170Ethernet Security in Perspective 170Virtual LANs (VLANs) for Network Segregation 170Initial User Authentication Through 802.1X 171802.1AE Switch-to-Switch Protection 172ARP Cache Poisoning 172End-of-Chapter Questions 173Chapter 5a HANDS-ON: CUTTING AND CONNECTORIZING UTPIntroduction 175Solid and Stranded Wiring 175Solid-Wire UTP versus Stranded-Wire UTP 175Relative Advantages 176Adding Connectors 176Cutting the Cord 176Stripping the Cord 176Working with the Exposed Pairs 177Pair Colors 177Untwisting the Pairs 177Ordering the Pairs 177Cutting the Wires 178Adding the Connector 178Holding the Connector 178Sliding in the Wires 179Some Jacket Inside the Connector 179Crimping 179Pressing Down 179Making Electrical Contact 179Strain Relief 180175xi