Jawaharlal Nehru Technological University Hyderabad B.Tech IV INFORMATION SECURITY INCIDENT RESPONSE AND MANAGEMENT Previous Question Paper (May - 2019 - R15)

Traffic filtering devices can be tested using several methods:

• Packet Crafting: Manually create and send malformed or specific packets to see how the device handles them.
• Traffic Generation Tools: Use tools like Ostinato or tcpreplay to send large volumes of legitimate and malicious traffic patterns to assess performance and detection capabilities.
• Vulnerability Scanners: Employ scanners to identify weaknesses in the device's configuration or firmware that could be exploited.
• Penetration Testing: Simulate real-world attacks to evaluate the effectiveness of the filtering rules and the device's overall security posture.
• Log Analysis: Regularly review device logs for unusual activity, dropped packets, or blocked connections that indicate potential issues or successful attacks.

A Bastion Host is a specially configured computer on a network that is heavily secured and monitored. It serves as a single point of access from an external network (like the internet) into a private network. Its primary purpose is to protect the internal network by acting as a buffer, exposing only essential services to the outside world and logging all access attempts. It is often used as a jump server or gateway for administrators to access internal systems.