000 nam a22 4500
999 _c32486
_d32486
008 230831b xxu||||| |||| 00| 0 eng d
020 _a9781484224113
082 _a004.62
_bLIS
100 _aLiska, Allan
245 _aNTP security : a quick-start guide
260 _bApress,
_c2016
_aNew York :
300 _a85 p. ;
_bill.,
_c24 cm
365 _b32.99
_cEUR
_d94.90
504 _aIncludes index.
520 _aLearn the risks associated with Network Time Protocol (NTP) security and how to minimize those risks in daily deployment. Disruption of NTP services can interrupt communication between servers on the network and take an entire network offline. Beyond disrupting communication, flaws in the NTP daemon itself can make servers vulnerable to external attack--attacks that often go unnoticed. NTP is being used more frequently in Distributed Denial of Service (DDoS) attacks. It is a User Datagram Protocol (UDP) with encryption schemes that are not often used or are poorly implemented, making it susceptible to spoofing. Despite all of the security challenges, the fact is that NTP is critical to most modern networks. It is one of those "set it and forget it" protocols that network administrators and even security professionals don't understand in depth. However, an attacker who does understand the security flaws can wreak havoc on an insecure network. NTP Security: A Quick-Start Guide provides a deeper understanding of the protocol itself and how to deploy a strategy using the protocol throughout a network in a secure manner. Your security team will be able to provide better guidance to the system and network teams who will then be able to better manage the day-to-day implementation. This succinct resource offers practical guidance to an underserved topic (actually, not served at all). Coverage includes: An understanding of NTP and the importance of time synchronization in modern networks Issues in NTP security, including an analysis of NTP traffic A review of the vulnerabilities and flaws in the protocol Practical solutions for securing NTP and building a robust infrastructure Effective alternatives to NTP.
650 _aComputer Security
650 _aComputer networks
650 _aSecurity measures
650 _aAtomic clock
650 _aAutokey
650 _aBuffer overflow
650 _aConfiguration
650 _a DDoS attacks
650 _aIP address
650 _aNTP daemon
650 _aNTP server
650 _aStratum
650 _aTimestamp
650 _aUDP
650 _aVersion of NTP
942 _2ddc
_cBK