| firewall |
A method for implementing security policies
designed to keep a network secure from intruders. It can be a single router that filters
out unwanted packets or may comprise a combination of routers and servers each performing
some type of firewall processing. Firewalls are widely used to give users secure access to
the Internet as well as to separate a company's public Web server from its internal
network. Firewalls are also used to keep internal network segments secure; for example,
the accounting network might be vulnerable to snooping from within the enterprise. In
practice, many firewalls have default settings that provide little or no security unless
specific policies are implemented by trained personnel.
Firewalls installed to protect entire networks are typically implemented in hardware;
however, software firewalls are also available to protect individual workstations from
attack.
While much effort has been made excluding unwanted input to the internal network, less
attention has been paid to monitoring what goes out. Spyware are applications that keep
track of your habits and send those statistics to a Web site (see spyware).
Following are the techniques used in combination to provide firewall protection. See firewall appliance and honeypot.
Packet Filter
Blocks traffic based on a specific Web address (IP address) or type of application
(e-mail, ftp, Web, etc.), which is specified by port number. Also known as a
"screening router."
Proxy Server
Serves as a relay between two networks, breaking the connection between the two. Also
typically caches Web pages (see proxy server).
Network Address Translation (NAT)
Allows one IP address, which is shown to the outside world, to refer to many IP addresses
internally; one on each client station. Performs the translation back and forth.
Stateful Inspection
Tracks the transaction to ensure that inbound packets were requested by the user.
Generally can examine multiple layers of the protocol stack, including the data, if
required, so blocking can be made at any layer or depth.

Firewall Placement An organization's public Web sites reside outside the firewall,
but intranet servers and all internal computing resources are inside the firewall.

Firewall Management Elron Firewall, which runs under NT as well as its own
proprietary OS, uses Elron's Stateful MultiLayer Inspection (SMLI) technology, which
combines stateful inspection, multilayer analysis of IP and IPX packets and network
address translation to secure a network. The window on the left can scroll down to more
than 70 user services, including Telnet, Lotus Notes and CU-SeeMe. (Screen example
courtesy of Elron Software, www.elron.com) |
|
| firewall
appliance |
| A device that provides
firewall protection for a network. It includes all the necessary
hardware and software in a self-contained package that plugs in
between the two networks being isolated. Most firewall appliances
are entirely solid state and include a stripped down operating
system kernel, making the entire system less vulnerable to head
crashes and other failures. See firewall. |
|
| FireWire |
A high-speed serial bus developed by Apple and
Texas Instruments that allows for the connection of up to 63 devices. Also known as the
IEEE 1394 standard, the i.Link connector and the High Performance Serial Bus (HPSB), the
original spec calls for 100, 200 and 400 Mbits/sec transfer rates. IEEE 1394b provides
800, 1600 and 3200 Mbits/sec speeds.
FireWire supports hot swapping, multiple speeds on the same bus and isochronous data
transfer, which guarantees bandwidth for multimedia operations. It is expected to be
widely used for attaching digital cameras and other video devices to the computer. See
Tailgate.

FireWire Connectors The 6-pin socket is commonly found on desktop computers. A
4-pin version is used on laptops. |
|
| firmware |
| A category of memory chips that hold their
content without electrical power and include ROM,
PROM, EPROM and EEPROM technologies.
Firmware becomes "hard software" when holding program code. |
|
| FLOPS |
| (FLoating point Operations
Per Second) The measurement of floating point
calculations. For example, 100 megaflops (mflops) is 100 million
floating point operations per second. |
|
# A
B C D E
F G H I
J K L M
N O P Q
R S T U
V W X Y
Z
|