Reading Assignment 7 - marsecguy/reading-notes-cyberops GitHub Wiki

Reading Assignment 7

SSH Protocol

  1. What is the Secure Shell (SSH) Protocol?
  • The SSH protocol is a system for allowing one computer to remotely and securely login to another computer.
  1. What are the typical uses of the SSH protocol?
  • providing secure access for users and automated processes
  • interactive and automated file transfers
  • issuing remote commands
  • managing network infrastructure and other mission-critical system components.1. How does the SSH protocol work?
  1. How is the data kept safe when transmitted between the SSH client and server?
  • When the two computers (server for the one being logged into, client for the one connecting to it) establish their connection, they agree on an encryption algorithm and create the encryption key. All communication is then encrypted per the algorithm.
  1. What is SFTP?
  • SFTP (SSH Secure Transfer Protocol) is the system used to securely transfer files between client and server. It contains a layered security ecosystem that contains several security features to passively and actively secure against malicious intrusion or intercept.

Sources: Tatu Ylonen: SSH - Secure Login Connections over the Internet. Proceedings of the 6th USENIX Security Symposium, pp. 37-42, USENIX, 1996. (https://www.ssh.com/academy/ssh/protocol) (https://www.ssh.com/academy/ssh/sftp-ssh-file-transfer-protocol)

RDP

  1. What is Windows Remote Desktop Connection?
  • It is a tool that enables computers with the Windows OS to remotely login to another Windows computer. It does not allow non-Windows machines to be connected to.
  1. What is RDP?
  • Remote Desktop Protocol (RDP) is the system that enables Windows Remote Desktop Connection to make the connection. It contains the processes which allow the connection, communication and security of the evolution.
  1. What is the RDP port number?
  • 3389

Source: (https://www.comparitech.com/net-admin/what-is-rdp/)