Networking standards and protocols Books

Book SynopsisIn an era of ubiquitous clouds, virtualization, mobility, and the Internet of Things, information and resources must be accessible anytime, from anywhere. Connectivity to devices and workloads must be seamless even when people move: location must be fully independent of device identity. The LISP protocol makes all this possible. LISP is address-family agnostic, so it can encapsulate any protocol within another, and route across virtually any network. LISP applications include very-large-scale virtualization for WANs and multi-tenant data centers; host mobility and location services across data centers; advanced mobile networks; ad-hoc networks; IPv6 enablement, seamless site multi-homing; workload mobility; cellular mobility; multicast and traffic engineering, and more. The LISP Network is the first comprehensive, in-depth guide to LISP concepts, architecture, techniques, and applications. Co-authored by LISP co-creator Dino Farinacci and two pioneering developers of Cisco's LISP implementation, this guide will help you plan and implement LISP in any data center, WAN edge, or service provider core network. Largely implementation-agnostic, this book offers actionable answers to questions such as: What problems does LISP address, and how does it address them? How does LISP work? What are LISP's applications, and how do you architect LISP solutions for each application? How does LISP fit with SDN, IoT, and IPv6? What is LISP's future? The LISP Network concludes with detailed deployment case studies of several LISP applications, each drawn from the authors' pioneering experience.Table of Contents 1. LISP and the Future of Networking 2. LISP Architecture 3. LISP Unicast Handling Fundamentals 4. LISP Multicasting Fundamentals 5. Traffic Engineering and LISP 6. LISP Host Mobility 7. LISP Network Virtualization/Multi-tenancy 8. LISP and the Multi-homed Internet Edge 9. Programmability, Policy and LISP: Integration and Application 10. LISP and the Internet of Things 11. LISP Application Deployment, Configuration and Troubleshooting

Read more less

Book SynopsisChris Jackson, CCIE No. 6256 (R&S and SEC), is a Distinguished Architect and CTO for Global Sales Training at Cisco. Chris is focused on digital transformation and showing customers how to leverage the tremendous business value Cisco technologies can provide. He is the author of Network Security Auditing (Cisco Press, 2010), CCNA Cloud CLDADM 210-455 Official Cert Guide (Cisco Press, 2016), and various online video courses for Cisco Press. He holds dual CCIEs in security and routing and switching, CISA, CISSP, ITIL v3, seven SANS certifications, and a bachelor's degree in business administration. Residing in Franklin, Tennessee, Chris enjoys tinkering with electronics, robotics, and anything else that can be programmed to do his bidding. In addition, he is a 3rd Degree Black Belt in Taekwondo, rabid Star Wars fan, and has a ridiculous collection of Lego. His wife Piper and three children Caleb, Sydney, and Savannah are the true joy of his life and

Read more less

Book SynopsisToday, billions of devices are Internet-connected, IoT standards and protocols are stabilizing, and technical professionals must increasingly solve real problems with IoT technologies. Now, five leading Cisco IoT experts present the first comprehensive, practical reference for making IoT work. IoT Fundamentals brings together knowledge previously available only in white papers, standards documents, and other hard-to-find sources—or nowhere at all. The authors begin with a high-level overview of IoT and introduce key concepts needed to successfully design IoT solutions. Next, they walk through each key technology, protocol, and technical building block that combine into complete IoT solutions. Building on these essentials, they present several detailed use cases, including manufacturing, energy, utilities, smart+connected cities, transportation, mining, and public safety. Whatever your role or existing infrastructure, you’ll gain deep insight what IoT applications can do, and what it takes to deliver them. Fully covers the principles and components of next-generation wireless networks built with Cisco IOT solutions such as IEEE 802.11 (Wi-Fi), IEEE 802.15.4-2015 (Mesh), and LoRaWAN Brings together real-world tips, insights, and best practices for designing and implementing next-generation wireless networks Presents start-to-finish configuration examples for common deployment scenarios Reflects the extensive first-hand experience of Cisco experts Table of Contents Foreword xxvi Introduction xxviiiPart I Introduction to IoT 1Chapter 1 What Is IoT? 3 Genesis of IoT 4 IoT and Digitization 6 IoT Impact 7 Connected Roadways 8 Connected Factory 12 Smart Connected Buildings 15 Smart Creatures 19 Convergence of IT and OT 21 IoT Challenges 23 Summary 24 References 24Chapter 2 IoT Network Architecture and Design 27 Drivers Behind New Network Architectures 28 Scale 30 Security 31 Constrained Devices and Networks 32 Data 32 Legacy Device Support 32 Comparing IoT Architectures 33 The oneM2M IoT Standardized Architecture 33 The IoT World Forum (IoTWF) Standardized Architecture 35 Additional IoT Reference Models 39 A Simplified IoT Architecture 40 The Core IoT Functional Stack 43 Layer 1: Things: Sensors and Actuators Layer 44 Layer 2: Communications Network Layer 46 Layer 3: Applications and Analytics Layer 59 IoT Data Management and Compute Stack 63 Fog Computing 65 Edge Computing 68 The Hierarchy of Edge, Fog, and Cloud 68 Summary 70 References 71Part II Engineering IoT Networks 73Chapter 3 Smart Objects: The “Things” in IoT 75 Sensors, Actuators, and Smart Objects 76 Sensors 76 Actuators 81 Micro-Electro-Mechanical Systems (MEMS) 83 Smart Objects 84 Sensor Networks 87 Wireless Sensor Networks (WSNs) 88 Communication Protocols for Wireless Sensor Networks 92 Summary 93Chapter 4 Connecting Smart Objects 95 Communications Criteria 96 Range 96 Frequency Bands 98 Power Consumption 101 Topology 102 Constrained Devices 103 Constrained-Node Networks 104 IoT Access Technologies 107 IEEE 802.15.4 108 IEEE 802.15.4g and 802.15.4e 118 IEEE 1901.2a 124 IEEE 802.11ah 130 LoRaWAN 134 NB-IoT and Other LTE Variations 142 Summary 146Chapter 5 IP as the IoT Network Layer 149 The Business Case for IP 150 The Key Advantages of Internet Protocol 150 Adoption or Adaptation of the Internet Protocol 152 The Need for Optimization 154 Constrained Nodes 155 Constrained Networks 156 IP Versions 157 Optimizing IP for IoT 159 From 6LoWPAN to 6Lo 159 Header Compression 161 Fragmentation 162 Mesh Addressing 163 6TiSCH 165 RPL 167 Authentication and Encryption on Constrained Nodes 173 Profiles and Compliances 174 Internet Protocol for Smart Objects (IPSO) Alliance 174 Wi-SUN Alliance 174 Thread 174 IPv6 Ready Logo 175 Summary 175Chapter 6 Application Protocols for IoT 177 The Transport Layer 178 IoT Application Transport Methods 180 Application Layer Protocol Not Present 180 SCADA 182 Generic Web-Based Protocols 189 IoT Application Layer Protocols 191 Summary 204Chapter 7 Data and Analytics for IoT 205 An Introduction to Data Analytics for IoT 206 Structured Versus Unstructured Data 207 Data in Motion Versus Data at Rest 209 IoT Data Analytics Overview 209 IoT Data Analytics Challenges 211 Machine Learning 212 Machine Learning Overview 212 Machine Learning and Getting Intelligence from Big Data 218 Predictive Analytics 220 Big Data Analytics Tools and Technology 220 Massively Parallel Processing Databases 222 NoSQL Databases 223 Hadoop 224 The Hadoop Ecosystem 227 Edge Streaming Analytics 230 Comparing Big Data and Edge Analytics 231 Edge Analytics Core Functions 232 Distributed Analytics Systems 235 Network Analytics 236 Flexible NetFlow Architecture 238 Summary 242 References 243Chapter 8 Securing IoT 245 A Brief History of OT Security 246 Common Challenges in OT Security 249 Erosion of Network Architecture 249 Pervasive Legacy Systems 250 Insecure Operational Protocols 250 Other Protocols 253 Device Insecurity 254 Dependence on External Vendors 255 Security Knowledge 256 How IT and OT Security Practices and Systems Vary 256 The Purdue Model for Control Hierarchy 257 OT Network Characteristics Impacting Security 259 Security Priorities: Integrity, Availability, and Confidentiality 261 Security Focus 261 Formal Risk Analysis Structures: OCTAVE and FAIR 262 OCTAVE 262 FAIR 265 The Phased Application of Security in an Operational Environment 266 Secured Network Infrastructure and Assets 266 Deploying Dedicated Security Appliances 269 Higher-Order Policy Convergence and Network Monitoring 272 Summary 274Part III IoT in Industry 275Chapter 9 Manufacturing 277 An Introduction to Connected Manufacturing 278 An IoT Strategy for Connected Manufacturing 279 Business Improvements Driven Through IoT 281 An Architecture for the Connected Factory 282 Industrial Automation and Control Systems Reference Model 282 The CPwE Reference Model 284 CPwE Resilient Network Design 286 CPwE Wireless 289 Industrial Automation Control Protocols 293 EtherNet/IP and CIP 293 PROFINET 294 The PROFINET Architecture 296 Media Redundancy Protocol (MRP) 297 Modbus/TCP 298 Connected Factory Security 299 A Holistic Approach to Industrial Security 299 Edge Computing in the Connected Factory 304 Connected Machines and Edge Computing 304 Summary 307 References 307Chapter 10 Oil and Gas 309 An Introduction to the Oil and Gas Industry 310 Defining Oil and Gas 310 The Oil and Gas Value Chain 313 Current Trends in the Oil and Gas Industry 314 Industry Key Challenges as Digitization Drivers 316 IoT and the Oil and Gas Industry 319 Improving Operational Efficiency 321 The Purdue Model for Control Hierarchy in Oil and Gas Networks 321 Oil and Gas Use Cases for IoT 323 IoT Architectures for Oil and Gas 326 Control Room Networks for Oil and Gas 327 Wired Networks for Oil and Gas 328 Wireless Networks for Oil and Gas 328 Wireless Use Cases in the Oil and Gas Industry 332 The Risk Control Framework for Cybersecurity in IoT 335 Securing the Oil and Gas PCN: Background 337 Securing the Oil and Gas PCN: Use Cases and Requirements 338 Data Analytics for Predictive Asset Monitoring 341 Summary 342 References 343Chapter 11 Utilities 345 An Introduction to the Power Utility Industry 347 The IT/OT Divide in Utilities 348 The GridBlocks Reference Model 350 GridBlocks: An 11-Tiered Reference Architecture 352 The Primary Substation GridBlock and Substation Automation 356 SCADA 357 IEC 61850: The Modernization of Substation Communication Standards 358 Network Resiliency Protocols in the Substation 362 System Control GridBlock: The Substation WAN 364 Defining Teleprotection 364 Designing a WAN for Teleprotection 367 The Field Area Network (FAN) GridBlock 369 Advanced Metering Infrastructure 371 Other Use Cases 373 Securing the Smart Grid 377 NERC CIP 378 Smart Grid Security Considerations 380 The Future of the Smart Grid 381 Summary 382 References 383Chapter 12 Smart and Connected Cities 385 An IoT Strategy for Smarter Cities 386 Vertical IoT Needs for Smarter Cities 386 Global vs. Siloed Strategies 389 Smart City IoT Architecture 390 Street Layer 391 City Layer 394 Data Center Layer 395 Services Layer 397 On-Premises vs. Cloud 398 Smart City Security Architecture 398 Smart City Use-Case Examples 401 Connected Street Lighting 401 Connected Environment 409 Summary 411 References 412Chapter 13 Transportation 413 Transportation and Transports 413 Transportation Challenges 415 Roadways 415 Mass Transit 416 Rail 417 Challenges for Transportation Operators and Users 418 IoT Use Cases for Transportation 420 Connected Cars 421 Connected Fleets 422 Infrastructure and Mass Transit 422 An IoT Architecture for Transportation 427 IoT Technologies for Roadways 427 Connected Roadways Network Architecture 434 Extending the Roadways IoT Architecture to Bus Mass Transit 440 Extending Bus IoT Architecture to Railways 442 Summary 447 References 448Chapter 14 Mining 449 Mining Today and Its Challenges 451 Scale 451 Safety 455 Environment 455 Security 456 Volatile Markets 456 Challenges for IoT in Modern Mining 456 The OT Roles in Mining 456 Connectivity 457 An IoT Strategy for Mining 459 Improved Safety and Location Services 459 Location Services 461 Improved Efficiencies 464 Improved Collaboration 465 IoT Security for Mining 466 An Architecture for IoT in Mining 467 IEEE 802.11 as the IoT Access Layer 468 802.11 Outdoor Wireless Mesh 468 4G/LTE 474 Wireless in Underground Mining 475 Industrial Wireless 476 Isolated vs. Connected Mine Networks 476 Core Network Connectivity 478 Network Design Consideration for Mining Applications 479 Data Processing 480 Summary 481Chapter 15 Public Safety 483 Overview of Public Safety 484 Public Safety Objects and Exchanges 484 Public and Private Partnership for Public Safety IoT 486 Public Safety Adoption of Technology and the IoT 488 An IoT Blueprint for Public Safety 489 Mission Continuum 489 Mission Fabric 490 Inter-agency Collaboration 491 Emergency Response IoT Architecture 493 Mobile Command Center 494 Mobile Vehicles: Land, Air, and Sea 501 IoT Public Safety Information Processing 506 School Bus Safety 508 Bus Location and Student Onboarding/Offboarding 508 Driver Behavior Reporting 510 Diagnostic Reporting 511 Video Surveillance 511 Student Wi-Fi 513 Push-to-Talk Communication 513 School Bus Safety Network Architecture 513 Summary 514 Reference 5159781587144561, TOC, 5/16/2017

Read more less

Book SynopsisThis title focuses on the use of BGP (Border Gateway Protocol) to create reliable Internet connections. BGP makes it possible for ISPs to connect to each other and for customers to connect to more than one ISP.Table of Contents1. The Internet, Routing, and BGP Topology of the I; nternet TCP/IP Design Philosophy Routing P; rotocols Multihoming; 2. IP Addressing and the BGP Protocol IP Addresses; Interdomain Routing History The BGP Protoc; ol Multiprotocol BGP Interior Routing Prot; ocols; 3. Physical Design Considerations Availability ; Selecting ISPs Bandwidth Router Hardware Failure Risks Building a Wide Area Netw; ork Network Topology Design; 4. IP Address Space and AS Numbers The Different Types of Address Space Requesting Address Space ; Renumbering IP Addresses The AS Number; Routing Registries Routing Policy Specification Language; 5. Getting Started with BGP Enabling BGP Mo; nitoring BGP Clearing BGP Sessions Filteri; ng Routes Internal BGP The Internal Network Minimizing the Impact of Link Failures e; BGP Multihop; 6. Traffic Engineering Knowing Which Route Is Best ; Route Maps Setting the Local Preference; Manipulating Inbound AS Paths Inbound Commun; ities BGP Load Balancing Traffic Engineeri; ng for Incoming Traffic Setting the MED An; nouncing More Specific Routes Queuing, Traffic Shaping, and Policing; 7. Security and Integrity of the Network Passwords ; and Security Software Protecting BGP ; Denial-of-Service Attacks; 8. Day-to-Day Operation of the Network The Network ; Operations Center NOC Hardware Facilities ; SNMP Management Router Names General IP Network Management; 9. When Things Start to Go Down: Troubleshooting Keeping a Clear Head Managing the Troubleshooting Process Dealing with Service Providers Physical and Datalink Layer Problems Routing and Reachability Problems Black Holes DNS Problems; 10. BGP in Larger Networks Peer Groups Using Loopback Addresses for iBGP iBGP Scaling; Dampening Route Flaps OSPF as the IGP Traffic Engineering in the Internal Network Network Partitions; 11. Providing Transit Services Route Filters ; Communities Anti-DoS Measures Customers; with Backup Connections Providing IPv6 and Multicast; 12. Interconnecting with Other Networks Peering ; Internet Exchanges, NAPs, and MAEs Connecting; to an Internet Exchange Connecting to More Exchange Points Rejecting Unwanted Traffic IX Subnet Problems Talking to Other Network Operators; Exchange Point Future; A. Cisco Configuration Basics; B. Binary Logic, Netmasks, and Prefixes; C. Notes on the IPv4 Address Space.

Read more less

Book SynopsisBehind every web transaction lies the Hypertext Transfer Protocol (HTTP) --- the language of web browsers and servers, of portals and search engines, of e-commerce and web services. Understanding HTTP is essential for practically all web-based programming, design, analysis, and administration. While the basics of HTTP are elegantly simple, the protocol's advanced features are notoriously confusing, because they knit together complex technologies and terminology from many disciplines. This book clearly explains HTTP and these interrelated core technologies, in twenty-one logically organized chapters, backed up by hundreds of detailed illustrations and examples, and convenient reference appendices. HTTP: The Definitive Guide explains everything people need to use HTTP efficiently -- including the "black arts" and "tricks of the trade" -- in a concise and readable manner. In addition to explaining the basic HTTP features, syntax and guidelines, this book clarifies related, but often misunderstood topics, such as: TCP connection management, web proxy and cache architectures, web robots and robots.txt files, Basic and Digest authentication, secure HTTP transactions, entity body processing, internationalized content, and traffic redirection. Many technical professionals will benefit from this book. Internet architects and developers who need to design and develop software, IT professionals who need to understand Internet architectural components and interactions, multimedia designers who need to publish and host multimedia, performance engineers who need to optimize web performance, technical marketing professionals who need a clear picture of core web architectures and protocols, as well as untold numbers of students and hobbyists will all benefit from the knowledge packed in this volume. There are many books that explain how to use the Web, but this is the one that explains how the Web works. Written by experts with years of design and implementation experience, this book is the definitive technical bible that describes the "why" and the "how" of HTTP and web core technologies. HTTP: The Definitive Guide is an essential reference that no technically-inclined member of the Internet community should be without.Trade Review"I think this book is an extremely useful, very comprehensive and clearly-written reference to all aspects of the internals of the Web going well beyond just the bare mechanics of HTTP. Even where its huge detail does stop on a topic, there are extensive and useful references for further reading on each topic covered given at the end of nearly every chapter." - John Collins, News@UK, March 2003Table of ContentsPreface Part I. HTTP: The Web's Foundation 1. Overview of HTTP HTTP: The Internet's Multimedia Courier Web Clients and Servers Resources Transactions Messages Connections Protocol Versions Architectural Components of the Web The End of the Beginning For More Information 2. URLs and Resources Navigating the Internet's Resources URL Syntax URL Shortcuts Shady Characters A Sea of Schemes The Future For More Information 3. HTTP Messages The Flow of Messages The Parts of a Message Methods Status Codes Headers For More Information 4. Connection Management TCP Connections TCP Performance Considerations HTTP Connection Handling Parallel Connections Persistent Connections Pipelined Connections The Mysteries of Connection Close For More Information Part II. HTTP Architecture 5. Web Servers Web Servers Come in All Shapes and Sizes A Minimal Perl Web Server What Real Web Servers Do Step 1: Accepting Client Connections Step 2: Receiving Request Messages Step 3: Processing Requests Step 4: Mapping and Accessing Resources Step 5: Building Responses Step 6: Sending Responses Step 7: Logging For More Information 6. Proxies Web Intermediaries Why Use Proxies? Where Do Proxies Go? Client Proxy Settings Tricky Things About Proxy Requests Tracing Messages Proxy Authentication Proxy Interoperation For More Information 7. Caching Redundant Data Transfers Bandwidth Bottlenecks Flash Crowds Distance Delays Hits and Misses Cache Topologies Cache Processing Steps Keeping Copies Fresh Controlling Cachability Setting Cache Controls Detailed Algorithms Caches and Advertising For More Information 8. Integration Points: Gateways, Tunnels, and Relays Gateways Protocol Gateways Resource Gateways Application Interfaces and Web Services Tunnels Relays For More Information 9. Web Robots Crawlers and Crawling Robotic HTTP Misbehaving Robots Excluding Robots Robot Etiquette Search Engines For More Information 10. HTTP-NG HTTP's Growing Pains HTTP-NG Activity Modularize and Enhance Distributed Objects Layer 1: Messaging Layer 2: Remote Invocation Layer 3: Web Application WebMUX Binary Wire Protocol Current Status For More Information Part III. Identification, Authorization, and Security 11. Client Identification and Cookies The Personal Touch HTTP Headers Client IP Address User Login Fat URLs Cookies For More Information 12. Basic Authentication Authentication Basic Authentication The Security Flaws of Basic Authentication For More Information 13. Digest Authentication The Improvements of Digest Authentication Digest Calculations Quality of Protection Enhancements Practical Considerations Security Considerations For More Information 14. Secure HTTP Making HTTP Safe Digital Cryptography Symmetric-Key Cryptography Public-Key Cryptography Digital Signatures Digital Certificates HTTPS: The Details A Real HTTPS Client Tunneling Secure Traffic Through Proxies For More Information Part IV. Entities, Encodings, and Internationalization 15. Entities and Encodings Messages Are Crates, Entities Are Cargo Content-Length: The Entity's Size Entity Digests Media Type and Charset Content Encoding Transfer Encoding and Chunked Encoding Time-Varying Instances Validators and Freshness Range Requests Delta Encoding For More Information 16. Internationalization HTTP Support for International Content Character Sets and HTTP ultilingual Character Encoding Primer Langaue Tags and HTTP Internationalized URIs Other Considerations For More Information 17. Content Negotiation and Transcoding Content-Negotiation Techniques Client-Driven Negotiation Server-Driven Negotiation Transparent Negotiation Transcoding Next Steps For More Information Part V. Content Publishing and Distribution 18. Web Hosting Hosting Services Virtual Hosting Making Web Sites Reliable Making Web Sites Fast For More Information 19. Publishing Systems FrontPage Server Extensions for Publishing Support WebDAV and Collaborative Authoring For More Information 20. Redirection and Load Balancing Why Redirect? Where to Redirect Overview of Redirection Protocols General Redirection Methods Proxy Redirection Methods Cache Redirection Methods Internet Cache Protocol Cache Array Routing Protocol Hyper Text Caching Protocol For More Information 21. Logging and Usage Tracking What to Log? Log Formats Hit Metering A Word on Privacy For More Information Part VI. Appendixes A. URI Schemes B. HTTP Status Codes C. HTTP Header Reference D. MIME Types E. Base-64 Encoding F. Digest Authentication G. Language Tags H. MIME Charset Registry Index

Read more less

Book SynopsisThe LISP overlay protocol helps organizations provide seamless connectivity to devices and workloads wherever they move, enabling open and highly scalable networks with unprecedented flexibility and agility. LISP Network Deployment and Troubleshooting is the single source for understanding, configuring and troubleshooting LISP on Cisco IOS, IOS XR and NX-OS platforms. It brings together comprehensive coverage of how LISP works, how it integrates with leading Cisco platforms, how to configure it for maximum efficiency, and how to troubleshoot LISP-related issues such as scalability and convergence. Focusing on design and deployment in real production environments, leading Cisco LISP engineers Tarique Shakil and Vinit Jain offer authoritative coverage of deploying LISP, verifying its operation, and optimizing its performance in widely diverse environments. Drawing on their unsurpassed experience supporting LISP deployments, they share detailed configuration examples, templates, and best practices designed to help you succeed with LISP no matter how you intend to use it. Coverage includes: Problems LISP solves, current use cases, and powerful emerging applications Standards and architecture, including control and data planes, packets, messaging, and communication processes LISP IPv4 unicast routing, IPv6 enablement/transition, and multicast LISP mobility in traditional data center and VXLAN fabrics LISP network virtualization and multi-tenancy LISP in the enterprise multi-homed Internet/WAN edge Securing, managing, and automating LISP Table of Contents 1. LISP Introduction 2. LISP Architecture 3. LISP IPv4 Unicast Routing 4. LISP IPv6 Unicast Routing 5. LISP Multicast Routing Fundamentals 6. LISP IP Mobility in Traditional Data Center Network 7. LISP IP Mobility in Modern Data Center Fabrics 8. LISP Network Virtualization/Multi-tenancy 9. LISP in the Enterprise Multi-homed Internet/WAN Edge 10. LISP Security

Read more less

Book SynopsisTable of Contents ... Foreword by Jürgen Müller ... 17 ... Introduction ... 19 ... Acknowledgments ... 23 ... PART I: Getting Started ... 25 1 ... Introduction to SAP Gateway ... 27 1.1 ... Modern Business Applications ... 28 1.2 ... SAP Gateway for Modern Business Applications ... 39 1.3 ... SAP Gateway in SAP S/4HANA ... 43 1.4 ... Installation and Deployment ... 45 1.5 ... SAP Gateway and Related Products ... 52 1.6 ... Summary ... 57 2 ... Introduction to OData ... 59 2.1 ... OData and REST ... 59 2.2 ... Structure of an OData Service ... 67 2.3 ... OData Operations ... 76 2.4 ... OData Query Options ... 78 2.5 ... OData in SAP Solutions ... 94 2.6 ... SAP Gateway OData Features ... 101 2.7 ... What's Different with OData 4.0? ... 104 2.8 ... Summary ... 108 3 ... Architecture and Integration ... 109 3.1 ... Gateway Principles ... 109 3.2 ... SAP Gateway Architecture ... 111 3.3 ... Integration with Other Technologies ... 121 3.4 ... ABAP Programming Model for SAP Fiori ... 125 3.5 ... ABAP RESTful Application Programming Model ... 133 3.6 ... Summary ... 141 4 ... Deployment Options, Installation, and Configuration ... 143 4.1 ... Introduction to SAP Gateway Deployment ... 143 4.2 ... Preparing for Installation and Configuration ... 155 4.3 ... Quick Start Guide ... 157 4.4 ... Installation and Configuration in Detail ... 164 4.5 ... Summary ... 175 ... PART II: Service Creation ... 177 5 ... Introduction to OData Service Creation ... 179 5.1 ... Methods for Creating an OData Service ... 180 5.2 ... Service Creation Process Overview ... 182 5.3 ... SAP Gateway Toolset ... 186 5.4 ... Steps in the Service Creation Process ... 196 5.5 ... OData Channel Development Paradigm ... 216 5.6 ... Summary ... 221 6 ... Service Development ... 223 6.1 ... Data Model Definition ... 224 6.2 ... Service Registration ... 250 6.3 ... Service Stub Generation ... 255 6.4 ... Service Maintenance ... 257 6.5 ... Incremental Service Implementation and Model Enhancement ... 261 6.6 ... Summary ... 335 7 ... Service Generation ... 337 7.1 ... Generation via RFC/BOR Interface ... 340 7.2 ... Generation via Search Help ... 372 7.3 ... Generation via Redefinition ... 374 7.4 ... Generation via Analytical Queries ... 382 7.5 ... Summary ... 392 8 ... ABAP Programming Model for SAP Fiori ... 395 8.1 ... Development of CDS Views ... 397 8.2 ... Modeled Data Sources ... 403 8.3 ... Referenced Data Sources ... 408 8.4 ... Adding Annotations to an OData Service ... 413 8.5 ... ABAP Programming Model for SAP Fiori with Classic APIs ... 416 8.6 ... ABAP Programming Model for SAP Fiori with BOPF ... 426 8.7 ... Summary ... 438 9 ... ABAP RESTful Application Programming Model ... 441 9.1 ... Data Modeling ... 443 9.2 ... Business Service Exposure ... 455 9.3 ... Service Consumption ... 467 9.4 ... Transactional Behavior ... 471 9.5 ... Generating an Application Using ABAP Development Tools ... 491 9.6 ... Entity Manipulation Language ... 495 9.7 ... Business Object Characteristics ... 499 9.8 ... Summary ... 504 ... PART III: Application Development ... 505 10 ... SAPUI5 Application Development ... 507 10.1 ... Building Blocks of Web Application Development ... 508 10.2 ... Introduction to SAP Fiori and SAPUI5 ... 509 10.3 ... Creating an SAPUI5 Application ... 515 10.4 ... Summary ... 517 11 ... SAP Business Application Studio ... 519 11.1 ... Setting Up SAP Business Application Studio ... 520 11.2 ... Connecting to SAP Gateway ... 524 11.3 ... OData Sample Services ... 532 11.4 ... Developing SAP Fiori Applications ... 534 11.5 ... Summary ... 549 12 ... Extensibility ... 551 12.1 ... Redefining and Extending SAP Gateway OData Services ... 551 12.2 ... Extending OData Services in SAP S/4HANA ... 581 12.3 ... Extending SAP Fiori Applications Using SAPUI5 Flexibility ... 601 12.4 ... Summary ... 607 13 ... Mobile Application Development ... 609 13.1 ... Overview ... 610 13.2 ... Mobile Development Kits ... 611 13.3 ... Native Application Development ... 628 13.4 ... Summary ... 646 14 ... Social Media Application Development ... 647 14.1 ... PHP ... 648 14.2 ... Facebook ... 652 14.3 ... X ... 659 14.4 ... Sina Weibo (êVòQî˜îé) ... 663 14.5 ... Summary ... 674 15 ... Enterprise Application Development ... 675 15.1 ... Microsoft Excel ... 676 15.2 ... Microsoft SharePoint/Microsoft 365 ... 685 15.3 ... Microsoft Visual C# Windows Desktop ... 692 15.4 ... Microsoft ASP.NET ... 697 15.5 ... Summary ... 697 ... PARt IV: Administration ... 699 16 ... Lifecycle Management: Testing, Service Deployment, and Operations ... 701 16.1 ... Testing ... 702 16.2 ... Service Deployment ... 710 16.3 ... Operations ... 720 16.4 ... DevOps and SAP Gateway Development ... 728 16.5 ... Summary ... 730 17 ... Security ... 731 17.1 ... Network and Communication Security ... 731 17.2 ... User Management and Authorizations ... 739 17.3 ... Single Sign-On and Authentication Options ... 741 17.4 ... Recommended Authentication Options ... 750 17.5 ... Summary ... 766 ... Appendices ... 769 A ... Advanced Topics ... 769 B ... The Authors ... 793 ... Index ... 797

Read more less

Book SynopsisHow can you make multivendor services work smoothly on today's complex networks? This practical book shows you how to deploy a large portfolio of multivendor Multiprotocol Label Switching (MPLS) services on networks, down to the configuration level.

Read more less

Book SynopsisNow in its fourth edition, the ground-breaking Artech House bestseller SIP: Understanding the Session Initiation Protocol offers you the most comprehensive and current understanding of this revolutionary protocol for call signaling and IP Telephony. The fourth edition incorporates changes in SIP from the last five years with new chapters on internet threats and attacks, WebRTC and SIP, and substantial updates throughout. This cutting-edge book shows how SIP provides a highly-scalable and cost-effective way to offer new and exciting telecommunication feature sets, helping practitioners design "next generation" network and develop new applications and software stacks. Other key discussions include SIP as a key component in the Internet multimedia conferencing architecture, request and response messages, devices in a typical network, types of servers, SIP headers, comparisons with existing signaling protocols including H.323, related protocols SDP (Session Description Protocol) and RTP (Real-time Transport Protocol), and the future direction of SIP.Table of ContentsSIP and the Internet; Introduction to SIP; SIP Clients and Servers; SIP Request Messages; SIP Response Messages; SIP Header Fields; Wireless, Mobility, and IMS; Presence and Instant Messaging; Services in SIP; Network Address Translation; Related Protocols; Media Transport; Negotiating Media Sessions; Internet Threats and Attacks (Ch 4 from VoIPSec Book); SIP Security; Media Security (Ch 10 from VoIP Sec); Identity (Ch 11 from VoIP Sec Book); VoIP/PSTN Gateway Security (Ch 12 from VoIP Sec); Peer to Peer SIP; Appendix.

Read more less

Book Synopsis

Read more less

Book SynopsisThis guide to all the major protocols of a TCP/IP-based network includes an introduction to binary and hexadecimal arithmetic and coverage of L2TP, LAN analysis screens and engineering-level detail on IPv6 routing.

Read more less

Book SynopsisLearn how to hack systems like black hat hackers and secure them like security expertsKey Features Understand how computer systems work and their vulnerabilities Exploit weaknesses and hack into machines to test their security Learn how to secure systems from hackers Book DescriptionThis book starts with the basics of ethical hacking, how to practice hacking safely and legally, and how to install and interact with Kali Linux and the Linux terminal. You will explore network hacking, where you will see how to test the security of wired and wireless networks. You’ll also learn how to crack the password for any Wi-Fi network (whether it uses WEP, WPA, or WPA2) and spy on the connected devices.Moving on, you will discover how to gain access to remote computer systems using client-side and server-side attacks. You will also get the hang of post-exploitation techniques, including remotely controlling and interacting with the systems that you compromised. Towards the end of the book, you will be able to pick up web application hacking techniques. You'll see how to discover, exploit, and prevent a number of website vulnerabilities, such as XSS and SQL injections.The attacks covered are practical techniques that work against real systems and are purely for educational purposes. At the end of each section, you will learn how to detect, prevent, and secure systems from these attacks.What you will learn Understand ethical hacking and the different fields and types of hackers Set up a penetration testing lab to practice safe and legal hacking Explore Linux basics, commands, and how to interact with the terminal Access password-protected networks and spy on connected clients Use server and client-side attacks to hack and control remote computers Control a hacked system remotely and use it to hack other systems Discover, exploit, and prevent a number of web application vulnerabilities such as XSS and SQL injections Who this book is forLearning Ethical Hacking from Scratch is for anyone interested in learning how to hack and test the security of systems like professional hackers and security experts.Table of ContentsTable of Contents Introduction Setting up The Lab Linux Basics Network Penetration Testing Network Penetration Testing - Pre Connection Attacks Network Penetration Testing - Gaining Access (WEP/WPA/WPA2 Cracking) Post Connection Attacks Man-in-the-middle Attacks Network Penetration Testing - Detection & Security Gaining Access to Computer Devices Scanning vulnerabilities using Tools Client Side Attacks Client Side Attacks - Social Engineering Attack and Detect Trojans with BeEF Attacks Outside The Local Network Post Exploitation Website Penetration Testing Website Pentesting - Information Gathering File Upload, Code Execution & File Inclusion Vulns SQL Injection Vulnerabilities Cross Site Scripting Vulnerabilities Website Pentesting - Discovering Vulnerabilities Automatically Using OWASP ZAP

Read more less

Book SynopsisUnderstand the nitty-gritty of Cybersecurity with easeKey Features Align your security knowledge with industry leading concepts and tools Acquire required skills and certifications to survive the ever changing market needs Learn from industry experts to analyse, implement, and maintain a robust environment Book DescriptionIt's not a secret that there is a huge talent gap in the cybersecurity industry. Everyone is talking about it including the prestigious Forbes Magazine, Tech Republic, CSO Online, DarkReading, and SC Magazine, among many others. Additionally, Fortune CEO's like Satya Nadella, McAfee's CEO Chris Young, Cisco's CIO Colin Seward along with organizations like ISSA, research firms like Gartner too shine light on it from time to time.This book put together all the possible information with regards to cybersecurity, why you should choose it, the need for cyber security and how can you be part of it and fill the cybersecurity talent gap bit by bit. Starting with the essential understanding of security and its needs, we will move to security domain changes and how artificial intelligence and machine learning are helping to secure systems. Later, this book will walk you through all the skills and tools that everyone who wants to work as security personal need to be aware of. Then, this book will teach readers how to think like an attacker and explore some advanced security methodologies. Lastly, this book will deep dive into how to build practice labs, explore real-world use cases and get acquainted with various cybersecurity certifications.By the end of this book, readers will be well-versed with the security domain and will be capable of making the right choices in the cybersecurity field.What you will learn Get an overview of what cybersecurity is and learn about the various faces of cybersecurity as well as identify domain that suits you best Plan your transition into cybersecurity in an efficient and effective way Learn how to build upon your existing skills and experience in order to prepare for your career in cybersecurity Who this book is forThis book is targeted to any IT professional who is looking to venture in to the world cyber attacks and threats. Anyone with some understanding or IT infrastructure workflow will benefit from this book. Cybersecurity experts interested in enhancing their skill set will also find this book useful.Table of ContentsTable of Contents Importance of Cybersecurity Security Evolution – From Legacy to Advanced, to ML and AI Learning Cybersecurity Technologies Skills We Need for a Cybersecurity Career Attacker Mindset Understanding Reactive, Proactive, and Operational Security Networking, Mentoring, and Shadowing Cybersecurity Labs Knowledge Check and Certifications Security Intelligence Resources Expert Opinions on Getting Started with Cybersecurity How to Get Hired in Cybersecurity, Regardless of Your Background

Read more less

Book SynopsisExplore industrial automation and control-related concepts like the wiring and programming of VFDs and PLCs, as well as smart factory (Industry 4.0) with this easy-to-follow guide Purchase of the print or Kindle book includes a free PDF eBook Key Features Learn the ins and outs of industrial automation and control by taking a pragmatic approach Gain practical insights into automating a manufacturing process using PLCs Discover how to monitor and control an industrial process using HMIs and SCADA Book DescriptionIndustrial automation has become a popular solution for various industries looking to reduce manual labor inputs and costs by automating processes. This book helps you discover the abilities necessary for excelling in this field. The book starts with the basics of industrial automation before progressing to the application of switches, sensors, actuators, and motors, and a direct on-line (DOL) starter and its components, such as circuit breakers, contactors, and overload relay. Next, you'll explore VFDs, their parameter settings, and how they can be wired and programmed for induction motor control. As you advance, you'll learn the wiring and programming of major industrial automation tools – PLCs, HMIs, and SCADA. You’ll also get to grips with process control and measurements (temperature, pressure, level, and flow), along with analog signal processing with hands-on experience in connecting a 4–20 mA transmitter to a PLC. The concluding chapters will help you grasp various industrial network protocols such as FOUNDATION Fieldbus, Modbus, PROFIBUS, PROFINET, and HART, as well as emerging trends in manufacturing (Industry 4.0) and its empowering technologies (such as IoT, AI, and robotics). By the end of this book, you’ll have gained a practical understanding of industrial automation concepts for machine automation and control.What you will learn Get to grips with the essentials of industrial automation and control Find out how to use industry-based sensors and actuators Know about the AC, DC, servo, and stepper motors Get a solid understanding of VFDs, PLCs, HMIs, and SCADA and their applications Explore hands-on process control systems including analog signal processing with PLCs Get familiarized with industrial network and communication protocols, wired and wireless networks, and 5G Explore current trends in manufacturing such as smart factory, IoT, AI, and robotics Who this book is forThis book is for both graduates and undergraduates of electrical, electronics, mechanical, mechatronics, chemical or computer engineering, engineers making a career switch, or anyone looking to pursue their career in the field of industrial automation. The book covers topics ranging from basic to advanced levels, and is a valuable reference for beginner-level electrical, IIoT, automation, process, instrumentation and control, production, and maintenance engineers working in manufacturing and oil and gas industries, among others.Table of ContentsTable of Contents Introduction to Industrial Automation Switches and Sensors – Working Principles, Applications, and Wiring Actuators and Their Applications in Industrial Automation Overview of AC and DC Motors Introduction to Variable Frequency Drive (VFD) Drawing Schematic/Wiring Diagrams Using CAD Software Understanding PLC Hardware and Wiring Understanding PLC Software and Programming with TIA Portal Deep Dive into PLC Programming with TIA Portal Understanding Human Machine Interfaces (HMIs) Exploring Supervisory Control And Data Acquisition (SCADA) Process Control – Essentials Industrial Network and Communication Protocols Fundamentals Exploring Smart Factory (Industry 4.0) with 5G

Read more less

Book SynopsisEnhance your skill set to pentest against real-world Microsoft infrastructure with hands-on exercises and by following attack/detect guidelines with OpSec considerations Key Features Find out how to attack real-life Microsoft infrastructure Discover how to detect adversary activities and remediate your environment Apply the knowledge you’ve gained by working on hands-on exercises Purchase of the print or Kindle book includes a free PDF eBook Book DescriptionThis book teaches you the tactics and techniques used to attack a Windows-based environment, along with showing you how to detect malicious activities and remediate misconfigurations and vulnerabilities. You’ll begin by deploying your lab, where every technique can be replicated. The chapters help you master every step of the attack kill chain and put new knowledge into practice. You’ll discover how to evade defense of common built-in security mechanisms, such as AMSI, AppLocker, and Sysmon; perform reconnaissance and discovery activities in the domain environment by using common protocols and tools; and harvest domain-wide credentials. You’ll also learn how to move laterally by blending into the environment’s traffic to stay under radar, escalate privileges inside the domain and across the forest, and achieve persistence at the domain level and on the domain controller. Every chapter discusses OpSec considerations for each technique, and you’ll apply this kill chain to perform the security assessment of other Microsoft products and services, such as Exchange, SQL Server, and SCCM. By the end of this book, you'll be able to perform a full-fledged security assessment of the Microsoft environment, detect malicious activity in your network, and guide IT engineers on remediation steps to improve the security posture of the company.What you will learn Understand and adopt the Microsoft infrastructure kill chain methodology Attack Windows services, such as Active Directory, Exchange, WSUS, SCCM, AD CS, and SQL Server Disappear from the defender's eyesight by tampering with defensive capabilities Upskill yourself in offensive OpSec to stay under the radar Find out how to detect adversary activities in your Windows environment Get to grips with the steps needed to remediate misconfigurations Prepare yourself for real-life scenarios by getting hands-on experience with exercises Who this book is forThis book is for pentesters and red teamers, security and IT engineers, as well as blue teamers and incident responders interested in Windows infrastructure security. The book is packed with practical examples, tooling, and attack-defense guidelines to help you assess and improve the security of your real-life environments. To get the most out of this book, you should have basic knowledge of Windows services and Active Directory.Table of ContentsTable of Contents Getting the Lab Ready and Attacking Exchange Server Defense Evasion Domain Reconnaissance and Discovery Credential Access in Domain Lateral Movement in Domain and Across Forests Domain Privilege Escalation Persistence on Domain Level Abusing Active Directory Certificate Services Compromising Microsoft SQL Server Taking over WSUS and SCCM

Read more less

Book SynopsisYogeshRamdoss (CCIE No. 16183) is a principalengineer with the Cisco Customer Experience (CX) organization focusing on datacenter technologies such as Nexus switching platforms (standalone as well asVXLAN fabric), application-centric infrastructure (ACI), and hyperconvergedinfrastructure HyperFlex. Associated with Cisco since 2003, Yogesh is adistinguished speaker at Cisco Live, where he shares his knowledge and educatescustomers and partners on data center platforms and technologies, telemetry, analytics,network programmability, and various troubleshooting and packet capturing tools.He is a machine and behavior learning coinventor. NagendraKumar Nainar (CCIE No. 20987, CCDE No. 20190014) isa principal engineer with the Cisco Customer Experience (CX) organization(formerly TAC), focusing on enterprise networking. He is the coinventor of morethan 100 patent applications on various cutting-edge technologies and thecoarchitect for various recent Table of Contents Foreword xxv Introduction xxvii Part I Virtualization and Containers Chapter 1 Introduction to Virtualization 1 History of Computer Evolution 1 History of Virtualization 2 Virtualization—Architecture Definition andTypes 6 Computing Virtualization Elements andTechniques 14 Virtualization Scale and DesignConsideration 18 Multitenancy in Virtualization 19 Summary 20 References in This Chapter 21 Chapter 2 Virtualization and Cisco 23 History of Virtualization in Cisco 23 Virtualization in Enterprise and ServiceProvider Environments 30 The Era of Software-Defined Networking 32 SDN Enablers 33 Control Plane Virtualization 33 Summary 58 References in This Chapter 59 Chapter 3 Container Orchestration and Management 61 Introduction to the Cloud-Native ReferenceModel 61 The Journey from Virtual Network Function(VNF) to Cloud Native Function (CNF) 63 Container Deployment and OrchestrationOverview 65 Container Deployment and Orchestration 81 Summary 95 References 95 Chapter 4 Container Networking Concepts 97 Container Networking—Introduction andEssentials 97 Container Networking 99 Container Network Models and Interfaces 105 Setting Up Container Networking 115 Summary 136 References 137 Part II Container Deployment and Operation in Cisco Products Chapter 5 Container Orchestration in Cisco IOS-XE Platforms 139 Cisco IOS-XE Architecture 139 IOS-XE Architecture: Application Hosting146 IOx Applications 149 Developing and Hosting Applications 157 Licensing Requirements 185 Summary 186 References 187 Chapter 6 Container Orchestration in Cisco IOS-XR Platforms 189 Cisco IOS-XR Architecture 189 Application Hosting Architecture 192 Hosting Environment Readiness 198 Types of Application Hosting in Cisco XRPlatform 201 Network Configuration and Verification 216 Docker Images and Registry 218 Network Configuration and Verification 224 Application Hosting in VRF Namespace 226 Container Management 232 Summary 234 References 234 Chapter 7 Container Orchestration in Cisco NX-OS Platforms 235 Cisco NX-OS Software Architecture 235 Hosting Environment Readiness 239 Container Infrastructure Configuration andInstantiation 242 Bash 256 Summary 288 References 289 Chapter 8 Application Developers' Tools and Resources 291 Cisco Development Tool Kits and Resources291 Open-Source and Commercial Tools 336 Building and Deploying Container Images 341 Configuration and Application ManagementTools 345 Summary 357 References 357 Chapter 9 Container Deployment Use Cases 361 General Use Cases for Enterprise, ServiceProvider, and Data Center IOS-XR Use Case: Disaggregated Seamless BFDas a Virtual Network Function for Rapid Failure Detection 384 Seamless BFD Overview 385 Creating and Hosting S-BFD as a VirtualNetwork Function 387 NX-OS Use Case: Control Plane Health CheckUsing an Anomaly Detector 391 NX-OS Use Case: NX-OS Docker Health Check398 Summary 404 Chapter 10 Current NFV Offering and Future Trends in Containers 405 App Hosting Services 405 Cisco NFV Offerings 411 Containers and Service Chaining 418 Serverless Computing and Network Functions421 Summary 423 References 423 TOC, 9780135895757, 6/9/2020

Read more less

Book SynopsisThe complete guide to deploying and operating SBC solutions, Including Cisco Unified Border Element (CUBE) Enterprise and service provider networks are increasingly adopting SIP as the guiding protocol for session management, and require leveraging Session Border Controller (SBC) technology to enable this transition. Thousands of organizations have made the Cisco Unified Border Element (CUBE) their SBC technology of choice. Understanding Session Border Controllers gives network professionals and consultants a comprehensive guide to SBC theory, design, deployment, operation, security, troubleshooting, and more. Using CUBE-based examples, the authors offer insights that will be valuable to technical professionals using any SBC solution. The authors thoroughly cover native call control protocols, SBC behavior, and SBC’s benefits for topology abstraction, demarcation and security, media, and protocol interworking. They also present practical techniques and configurations for achieving interoperability with a wide variety of collaboration products and solutions. Evaluate key benefits of SBC solutions for security, management, and interoperability Master core concepts of SIP, H.323, DTMF, signaling interoperability, call routing, fax/modem over IP, security, media handling, and media/signal forking in the SBC context Compare SBC deployment scenarios, and optimize deployment for your environment Size and scale an SBC platform for your environment, prevent oversubscription of finite resources, and control cost through careful licensing Use SBCs as a back-to-back user agent (B2BUA) to interoperate between asymmetric VoIP networks Establish SIP trunking for PSTN access via SBCs Interoperate with call servers, proxies, fax servers, ITSPs, redirect servers, call recording servers, contact centers, and other devices Secure real-time communications over IP Mitigate security threats associated with complex SIP deployments Efficiently monitor and manage an SBC environment Table of ContentsForeword xxx Introduction xxxiiiPart I IntroductionChapter 1 Laying the Groundwork 1 Overview of SIP 3 Overview of H.323 18 Introduction to SIP Trunking 20 Introduction to SDP 26 Overview of B2BUAs 42 Session Border Controllers 44 Cisco Unified Border Element 53 Summary 54 References 54Chapter 2 SBC Deployment Models 55 Purposeful Deployments 56 CUBE Deployment Options 61 Multi-VRF Support on CUBE 68 SBC High Availability 72 Summary 108 References 109Part II Architecture, Capabilities and DesignChapter 3 Call Routing 111 Dialing and Routing a SIP Call 112 Call Routing Types 128 Next-Hop Determination 132 End-to-End Call Trace 141 CUBE Call Routing Mechanisms 149 Summary 221 References 222Chapter 4 Signaling and Interworking 225 SIP—SIP Interworking 226 SIP Header Interworking 281 SIP Normalization 283 Transport and Protocol Interworking 299 Supplementary Services 312 SIP—H.323 Interworking 319 Summary 323 References 323Chapter 5 Media Processing 327 Real-Time Transport Protocol 328 Real-Time Transport Control Protocol 334 SBC Handling of RTP and RTCP 341 Symmetric and Asymmetric RTP/RTCP 354 DSP-Based RTP Handling on SBCs 356 Media Anti-Tromboning 374 Alternative Network Address Types 378 Solving NAT Traversal Challenges 380 Troubleshooting RTP 404 Summary 413 References 413Chapter 6 Secure Signaling and Media 415 Understanding Secure Technologies 415 Establishing Secure Sessions 449 SBC Signaling and Media Security 474 Alternative Security Methods 504 Summary 504 References 505Chapter 7 DTMF Interworking 509 Introduction to DTMF Relay 510 Variants of DTMF Relay 512 DTMF Relay on SBCs 530 Configuring and Troubleshooting DTMF Relay 546 Summary 568 References 568Chapter 8 Scalability Considerations 571 Platform Sizing 572 Licensing 598 Overload Prevention Techniques 610 Summary 625 References 626Part III Integrations and InteroperabilityChapter 9 SIP Trunking for PSTN Access Through SBCs 627 Best Practices for ITSP Access with SBCs 628 SIP Trunk Registration 635 Authentication 642 Registration with SBCs 648 Troubleshooting 671 Summary 677 References 677Chapter 10 Fax over IP (FoIP) on SBCs 679 Introduction to Fax 680 Analyzing a Basic Fax Call 683 Fax over IP (FoIP) 699 SBC Handling of FoIP 721 FoIP on CUBE 723 Summary 750 References 750Chapter 11 Network-Based Call Recording 751 The Business Need for Call Recording 752 IETF SIP Recording Architecture (SIPREC) 753 SIPREC Configuration 763 SIPREC Troubleshooting 775 Cisco UC Gateway Services Architecture 789 The XCC and XMF Data Model 792 API-Based Recording 797 API-Based Recording Configuration 811 API-Based Recording Troubleshooting 823 Summary 836 References 836Chapter 12 Contact Center Integration 839 Cisco UCCE Architecture 840 Inbound Calls to Agents 847 Call Transfers 885 Courtesy Callback 902 Call Progress Analysis (CPA) 914 Troubleshooting Scenarios 931 Summary 953 References 953Part IV Security and OperationsChapter 13 Security Threat Mitigation 955 An Overview of Security Threats to Collaboration Solutions 956 Types of Security Threats 959 Other SBC Security Features 998 Designing Collaboration Networks for Security 1009 Summary 1018 References 1018Chapter 14 Monitoring and Management 1021 Monitoring 1021 Management 1050 Summary 1069 References 1070Appendix A Q.850 Release Cause Values 10739781587144769, TOC, 11/7/2018

Read more less

Book Synopsis

Read more less

Book SynopsisAAA (Authentication, Authorization, Accounting) describes a framework for intelligently controlling access to network resources, enforcing policies, and providing the information necessary to bill for services. AAA and Network Security for Mobile Access is an invaluable guide to the AAA concepts and framework, including its protocols Diameter and Radius. The authors give an overview of established and emerging standards for the provision of secure network access for mobile users while providing the basic design concepts and motivations. AAA and Network Security for Mobile Access: Covers trust, i.e., authentication and security key management for fixed and mobile users, and various approaches to trust establishment. Discusses public key infrastructures and provides practical tips on certificates management. Introduces Diameter, a state-of-the-art AAA protocol designed to meet today's reliability, security and robustneTrade Review"…serves to provide planners and researchers in both academic and professional capacities a way in which to completely access pertinent data in a logical and clearly defined manner." (Electric Review, September/October 2006)Table of ContentsForeword xv Preface xvii About the Author xxi Chapter 1 The 3 “A”s: Authentication, Authorization, Accounting 1 1.1 Authentication Concepts 1 1.1.1 Client Authentication 2 1.1.2 Message Authentication 4 1.1.3 Mutual Authentication 5 1.1.4 Models for Authentication Messaging 6 1.1.5 AAA Protocols for Authentication Messaging 7 1.2 Authorization 8 1.2.1 How is it Different from Authentication? 8 1.2.2 Administration Domain and Relationships with the User 9 1.2.3 Standardization of Authorization Procedures 10 1.3 Accounting 13 1.3.1 Accounting Management Architecture 13 1.3.2 Models for Collection of Accounting Data 15 1.3.3 Accounting Security 17 1.3.4 Accounting Reliability 17 1.3.5 Prepaid Service: Authorization and Accounting in Harmony 19 1.4 Generic AAA Architecture 19 1.4.1 Requirements on AAA Protocols Running on NAS 21 1.5 Conclusions and Further Resources 23 1.6 References 23 Chapter 2 Authentication 25 2.1 Examples of Authentication Mechanisms 25 2.1.1 User Authentication Mechanisms 26 2.1.2 Example of Device Authentication Mechanisms 31 2.1.3 Examples of Message Authentication Mechanisms 33 2.2 Classes of Authentication Mechanisms 36 2.2.1 Generic Authentication Mechanisms 41 2.3 Further Resources 44 2.4 References 45 Chapter 3 Key Management Methods 47 3.1 Key Management Taxonomy 47 3.1.1 Key Management Terminology 47 3.1.2 Types of Cryptographic Algorithms 49 3.1.3 Key Management Functions 50 3.1.4 Key Establishment Methods 51 3.2 Management of Symmetric Keys 54 3.2.1 EAP Key Management Methods 54 3.2.2 Diffie–Hellman Key Agreement for Symmetric Key Generation 58 3.2.3 Internet Key Exchange for Symmetric Key Agreement 61 3.2.4 Kerberos and Single Sign On 62 3.2.5 Kerberized Internet Negotiation of Keys (KINK) 66 3.3 Management of Public Keys and PKIs 67 3.4 Further Resources 68 3.5 References 69 Chapter 4 Internet Security and Key Exchange Basics 71 4.1 Introduction: Issues with Link Layer-Only Security 71 4.2 Internet Protocol Security 73 4.2.1 Authentication Header 74 4.2.2 Encapsulating Security Payload 74 4.2.3 IPsec Modes 75 4.2.4 Security Associations and Policies 77 4.2.5 IPsec Databases 78 4.2.6 IPsec Processing 78 4.3 Internet Key Exchange for IPsec 79 4.3.1 IKE Specifications 79 4.3.2 IKE Conversations 81 4.3.3 ISAKMP: The Backstage Protocol for IKE 83 4.3.4 The Gory Details of IKE 86 4.4 Transport Layer Security 91 4.4.1 TLS Handshake for Key Exchange 93 4.4.2 TLS Record Protocol 95 4.4.3 Issues with TLS 96 4.4.4 Wireless Transport Layer Security 96 4.5 Further Resources 96 4.6 References 97 Chapter 5 Introduction on Internet Mobility Protocols 99 5.1 Mobile IP 99 5.1.1 Mobile IP Functional Overview 102 5.1.2 Mobile IP Messaging Security 107 5.2 Shortcomings of Mobile IP Base Specification 109 5.2.1 Mobile IP Bootstrapping Issues 110 5.2.2 Mobile IP Handovers and Their Shortcomings 113 5.3 Seamless Mobility Procedures 117 5.3.1 Candidate Access Router Discovery 118 5.3.2 Context Transfer 120 5.4 Further Resources 125 5.5 References 126 Chapter 6 Remote Access Dial-In User Service (RADIUS) 127 6.1 RADIUS Basics 127 6.2 RADIUS Messaging 128 6.2.1 Message Format 129 6.2.2 RADIUS Extensibility 130 6.2.3 Transport Reliability for RADIUS 130 6.2.4 RADIUS and Security 131 6.3 RADIUS Operation Examples 135 6.3.1 RADIUS Support for PAP 135 6.3.2 RADIUS Support for CHAP 136 6.3.3 RADIUS Interaction with EAP 138 6.3.4 RADIUS Accounting 139 6.4 RADIUS Support for Roaming and Mobility 141 6.4.1 RADIUS Support for Proxy Chaining 142 6.5 RADIUS Issues 143 6.6 Further Resources 144 6.6.1 Commercial RADIUS Resources 144 6.6.2 Free Open Source Material 145 6.7 References 145 Chapter 7 Diameter: Twice the RADIUS? 147 7.1 Election for the Next AAA Protocol 147 7.1.1 The Web of Diameter Specifications 148 7.1.2 Diameter Applications 151 7.1.3 Diameter Node Types and their Roles 152 7.2 Diameter Protocol 153 7.2.1 Diameter Messages 153 7.2.2 Diameter Transport and Routing Concepts 157 7.2.3 Capability Negotiations 159 7.2.4 Diameter Security Requirements 160 7.3 Details of Diameter Applications 162 7.3.1 Accounting Message Exchange Example 162 7.3.2 Diameter-Based Authentication, NASREQ 163 7.3.3 Diameter Mobile IP Application 167 7.3.4 Diameter EAP Support 167 7.4 Diameter Versus RADIUS: A Factor 2? 168 7.4.1 Advantages of Diameter over RADIUS 168 7.4.2 Issues with Use of Diameter 170 7.4.3 Diameter-RADIUS Interactions (Translation Agents) 171 7.5 Further Resources 172 7.6 References 172 Chapter 8 AAA and Security for Mobile IP 175 8.1 Architecture and Trust Model 177 8.1.1 Timing Characteristics of Security Associations 178 8.1.2 Key Delivery Mechanisms 181 8.1.3 Overview of Use of Mobile IP-AAA in Key Generation 182 8.2 Mobile IPv4 Extensions for Interaction with AAA 184 8.2.1 MN-AAA Authentication Extension 184 8.2.2 Key Generation Extensions (IETF work in progress) 186 8.2.3 Keys to Mobile IP Agents? 187 8.3 AAA Extensions for Interaction with Mobile IP 187 8.3.1 Diameter Mobile IPv4 Application 188 8.3.2 Radius and Mobile IP Interaction: A CDMA2000 Example 196 8.4 Conclusion and Further Resources 200 8.5 References 201 Chapter 9 PKI: Public Key Infrastructure: Fundamentals and Support for IPsec and Mobility 203 9.1 Public Key Infrastructures: Concepts and Elements 204 9.1.1 Certificates 204 9.1.2 Certificate Management Concepts 205 9.1.3 PKI Elements 209 9.1.4 PKI Management Basic Functions 210 9.1.5 Comparison of Existing PKI Management Protocols 212 9.1.6 PKI Operation Protocols 221 9.2 PKI for Mobility Support 222 9.2.1 Identity Management for Mobile Clients: No IP Addresses! 222 9.2.2 Certification and Distribution Issues 225 9.3 Using Certificates in IKE 227 9.3.1 Exchange of Certificates within IKE 229 9.3.2 Identity Management for ISAKMP: No IP Address, Please! 231 9.4 Further Resources 232 9.5 References 232 9.6 Appendix A PKCS Documents 233 Chapter 10 Latest Authentication Mechanisms, EAP Flavors 235 10.1 Introduction 235 10.1.1 EAP Transport Mechanisms 237 10.1.2 EAP over LAN (EAPOL) 237 10.1.3 EAP over AAA Protocols 238 10.2 Protocol Overview 239 10.3 EAP-XXX 242 10.3.1 EAP-TLS (TLS over EAP) 244 10.3.2 EAP-TTLS 248 10.3.3 EAP-SIM 257 10.4 Use of EAP in 802 Networks 259 10.4.1 802.1X Port-Based Authentication 259 10.4.2 Lightweight Extensible Authentication Protocol (LEAP) 260 10.4.3 PEAP 262 10.5 Further Resources 262 10.6 References 263 Chapter 11 AAA and Identity Management for Mobile Access: The World of Operator Co-Existence 265 11.1 Operator Co-existence and Agreements 265 11.1.1 Implications for the User 266 11.1.2 Implications for the Operators 267 11.1.3 Bilateral Billing and Trust Agreements and AAA Issues 269 11.1.4 Brokered Billing and Trust Agreements 272 11.1.5 Billing and Trust Management through an Alliance 274 11.2 A Practical Example: Liberty Alliance 275 11.2.1 Building the Trust Network: Identity Federation 276 11.2.2 Support for Authentication/Sign On/Sign Off 279 11.2.3 Advantages and Limitations of the Liberty Alliance 282 11.3 IETF Procedures 283 11.4 Further Resources 285 11.5 References 285 Index 287

Read more less