# 6.7 Security Protocols This section outlines the rules and procedures designed to protect data and communications on computer networks, ensuring confidentiality, integrity, and authentication. ## Security Protocols A set of rules and procedures established to protect data and communications over a network. Their primary goals are: * **Confidentiality**: Keeping sensitive information (like passwords) private from unauthorized access. * **Authentication**: Verifying the identities of users or devices. * **Integrity**: Ensuring data is not altered or tampered with during transmission. ## Types of Protocols ### Transport Layer Security (TLS) / Secure Sockets Layer (SSL) * **Definition:** Cryptographic protocols that provide secure communication over a computer network. TLS is the modern successor to SSL. * **Function:** They offer encryption and authentication to ensure data exchanged between a client (e.g., a web browser) and a server remains confidential and unaltered. * **Common Uses:** Web browsers (as part of HTTPS), email clients, and various other online services. ### Internet Protocol Security (IPsec) * **Definition:** A suite of protocols designed to secure Internet Protocol (IP) communications. * **Function:** It works at the network layer to authenticate and encrypt each IP packet in a data stream. * **Common Uses:** Creating Virtual Private Networks (VPNs) to establish secure communication channels between networks, remote clients, and gateways. ### Secure Shell (SSH) * **Definition:** A cryptographic network protocol for operating network services securely over an unsecured network. * **Function:** Provides strong authentication and encrypted communication for remote access to servers and other network devices. * **Common Uses:** Secure system administration, remote command-line login, and secure file transfers. ### Secure File Transfer Protocols * **Definition:** Protocols that safeguard files during their transmission across networks. * **Function:** They encrypt both the data and control channels to prevent interception or alteration of files. | Protocol | Based On | Description | | :--- | :--- | :--- | | **SFTP** | *SSH File Transfer Protocol* | An extension of SSH that runs over the SSH protocol to provide secure file access, transfer, and management. | | **FTPS** | *FTP over SSL* | An extension of the traditional File Transfer Protocol (FTP) that adds support for the TLS/SSL cryptographic protocols. | ### Hypertext Transfer Protocol Secure (HTTPS) * **Definition:** A secure extension of HTTP used for encrypted communication over the internet. * **Function:** It uses TLS/SSL to encrypt the data exchanged between a user's web browser and a website. * **Common Uses:** Protecting sensitive information during online activities such as logging in, online banking, and e-commerce transactions.