lecture recording on 06 February 2025 at 18.13.52 PM

Introduction to Cybersecurity Research

  • A professor, currently pursuing their doctoral degree, is in the final stage of research and is seeking participants for a survey focused on the cybersecurity job market.

  • The survey aims to gather information about participants' backgrounds in cybersecurity, their job applications, and rejection rates to understand the current market landscape.

  • Interested students can access the survey through a provided link (surveymonkey.com) and may have the opportunity for an interview via Zoom with the professor, who is appreciative of the contribution as research data.

Understanding Web Caches

Problem Statement

  • In an enterprise network, when multiple employees simultaneously access popular websites (e.g., cnn.com), it can lead to bandwidth issues.

  • Repeated requests for the same content can bog down network performance.

Solution: Web Caching

  • A web cache is implemented to store frequently accessed web pages locally, reducing the need for repeated requests to the same server.

  • Employees can quickly access cached content without overloading the network.

  • Cached pages are updated periodically based on how often the source website changes its content.

Cache Configuration

  • Caches are configured to store content for different durations depending on website update frequency. For example, news sites may refresh every 20-30 minutes, while less dynamic sites may only refresh hourly.

  • When a cache reaches the end of its lifespan, a new request is made to the original server to refresh the content.

Network Bandwidth Management

  • Early Internet connections were limited in bandwidth, necessitating efficient traversal and services without overwhelming network resources.

  • Web caching minimizes retransmission, optimizing available bandwidth.

HTTP Protocol Evolution

HTTP/1.1 Limitations

  • HTTP/1.1 required sequential connections for web content, leading to inefficiencies. This could create significant delays if a large object (like an image) was encountered.

  • Solutions to issues like head-of-line blocking were limited in effectiveness.

Transition to HTTP/2

  • HTTP/2 introduced multiplexing, allowing multiple requests and responses to be sent in parallel over a single connection, improving load times for web pages with multiple elements (text, images, etc.).

  • Status codes like 304 (not modified) and 200 (success) were defined for responses, maintaining functionalities from HTTP/1.1 while boosting performance.

The Shift to HTTP/3

  • With the rise of streaming services and mobile device usage, HTTP/3 was developed using UDP instead of TCP to reduce latency and eliminate connection overhead during data transfer.

  • QUIC protocol was introduced, embedding security features by default and minimizing handshake times, directly addressing security concerns while transmitting data.

Advantages of QUIC Protocol

  • QUIC supports fast, secure connections suitable for modern web applications and mobile communications, accommodating for high-speed demands of streaming services.

  • It allows for faster content delivery by working efficiently within a distributed infrastructure.

Email Protocols

Components of Email Systems

  • Email systems consist of user agents (e.g., Outlook) that connect to mail servers for sending and receiving messages.

  • The protocol SMTP governs communication between mail servers but has undergone less change compared to HTTP due to its reliable simplicity.

SMTP Functionality

  • SMTP operates over port 25, pushing email data from user agents to servers.

  • Messages include sender and recipient headers, crucial for proper delivery and processing.

Domain Name System (DNS)

Importance of DNS

  • DNS translates user-friendly domain names (like Google.com) into IP addresses that are understandable by machines.

  • Each query to a domain entails a structured request through distributed DNS servers, including a root server for top-level domains and authoritative servers for individual domains.

Potential Vulnerabilities

  • Without sufficient security measures, DNS servers can be manipulated, making users susceptible to redirection to fraudulent websites (DNS spoofing).

DNS Security Enhancements

  • DNSSEC was introduced to protect against such attacks by requiring authentication of requests and making it difficult for malicious actors to alter DNS settings.

  • Proper routing and hierarchy ensure resilient performance and redundancy within the DNS structure.

Conclusion and Upcoming Labs

  • Questions were welcomed prior to concluding the lecture series, and students were informed about upcoming lab sessions.

  • Students are encouraged to participate in lectures and labs as an essential part of their learning experience.