6-1 Discussion: Routing Protocol Vulnerabilities
Discussion Topic
In Module Five, you were introduced to the Routing
Information Protocol (RIP). You used RIP to allow
networks to communicate through a router.
RIP is one of the interior routing protocols that can be used
to open communications between networks, or it can be
used to stop communication between devices that reside on
the same or different networks. As with any routing
protocol, RIP has benefits and drawbacks. As a security
practitioner, you will be called upon to provide your unique
viewpoint and expertise in weighing the factors related to
connectivity, traffic flow, and security when selecting or
implementing routing protocols.
For your initial post, address the following:
How does employing an adversarial mindset affect
decisions to implement RIP in the network?
Construct your answer using one of the six
fundamental design principles identified below:
O Separation of domains
Isolation
Modularity
Layering
Least privilege.
ο ο ο ο ο Undergraduate Discussion Rubric
O Minimization of implementation
Identify at least one vulnerability that RIP introduces
related to the fundamental design principle that you
chose. For reference, refer to the CIA Triad and
Fundamental Security Design Principles
PDF document.
Rubic directions
Directions
Overview
Your active participation in the discussions is essential to your overall success this term. Discussion
questions will help you make meaningful connections between the course content and the larger
concepts of the course. These discussions give you a chance to express your own thoughts, ask
questions, and gain insight from your peers and instructor. For each discussion, you must create one initial post.
For your initial post, do the following:
• Write a post of 1 to 2 paragraphs.
• In Module One, complete your initial post by Thursday at 11:59 p.m. Eastern.
• In Modules Two through Eight, complete your initial post by Thursday at 11:59 p.m. of your
local time zone.
. Consider content from other parts of the course where appropriate. Use proper citation
methods for your discipline when referencing scholarly or popular sources.
Criteria
Comprehension
Timeliness
Discussion Rubric
Proficient
Exemplary
Develops an initial post with
an organized, clear point of
view or idea using rich and
significant detail (100%)
N/A
Develops an initial post
with a point of view or idea
using adequate
organization and detail
(85%)
Needs Improvement
Develops an initial post with a
point of view or idea but with
some gaps in organization and
detail (55%)
Submits initial post on time Submits initial post one day
(100%)
late (55%)
Not Evident
Does not develop an
initial post with an
organized point of view
or idea (0%)
Submits initial post two
or more days late (0%) Criteria
Engagement
Writing (Mechanics)
Exemplary
Provides relevant and
meaningful response posts
with clarifying explanation
and detail (100%)
Writes posts that are easily
understood, clear, and
concise using proper citation
methods where applicable
with no errors in citations
(100%)
Proficient
Provides relevant response
posts with some
explanation and detail
(85%)
Needs Improvement
Provides somewhat relevant
response posts with some
explanation and detail (55%)
Writes posts that are easily | Writes posts that are
understood using proper
citation methods where
applicable with few errors
in citations (85%)
understandable using proper
citation methods where
applicable with a number of
errors in citations (55%)
Not Evident
Provides response posts
that are generic with little
explanation or detail
(0%)
Writes posts that others
are not able to understand
and does not use proper
citation methods where
applicable (0%)
CIA Triad and Fundamental Security Design Principles The terms listed below are essential in the field of cybersecurity and will be a topic of
conversation and application throughout the program. It is therefore important for you to familiarize yourself with these terms and their
definitions. Note that the CIA triad is sometimes referred to as the tenets of cybersecurity. The Fundamental Security Design Principles are
sometimes called fundamental design principles, cybersecurity first principles, the cornerstone of cybersecurity, and so on. CIA Triad Information
that is secure satisfies three main tenets, or properties, of information. If you can ensure these three tenets, you satisfy the requirements of
secure information (Kim & Solomon, 2013). ● Confidentiality Only authorized users can view information (Kim & Solomon, 2013). ● Integrity Only
authorized users can change information (Kim & Solomon, 2013). ● Availability Information is accessible by authorized users whenever they
request the information (Kim & Solomon, 2013). Fundamental Security Design Principles These principles offer a balance between aspirational
Total (and therefore unobtainable) "perfect security," and the pragmatic need to get things done. Although each of the principles can powerfully affect
security, the principles have their full effect only when used in concert and throughout an organization. These principles are a powerful mental
tool for approaching security: one that doesn't age out of usefulness or apply only to a few specific technologies and contexts; one that can be
used for architecture, postmortem analysis, operations, and communication. The principles are ultimately only one piece in the security
practitioner's toolkit, but they are a flexible piece that will serve different roles for different people (Sons, Russell, & Jackson, 2017). • Abstraction
Removal of clutter. Only the needed information is provided for an object-oriented mentality. This is a way to allow adversaries to see only a
minimal amount of information while securing other aspects of the model (Tjaden, 2015). ● Complete Mediation All accesses to objects should
be checked to ensure that they are allowed (Bishop, 2003). ● Encapsulation The ability to only use a resource as it was designed to be used. This
may mean that a piece of equipment is not being used maliciously or in a way that could be detrimental to the overall system (Tjaden, 2015). ●
Fail-Safe Defaults / Fail Secure The theory that unless a subject is given explicit access to an object, it should be denied access to that object
(Bishop, 2003). ● Information Hiding Users having an interface to interact with the system behind the scenes. The user should not be worried
about the nuts and bolts behind the scenes, only the modes of access presented to them. This topic is also integrated with object-oriented
programming (Tjaden, 2015). ● Isolation Individual processes or tasks running in their own space. This ensures that the processes will have
enough resources to run and will not interfere with other processes running (Tjaden, 2015). ● Layering Having multiple forms of security. This can
be from hardware or software, but it involves a series of checks and balances to make sure the entire system is secured from multiple
perspectives (Tjaden, 2015). ● Least Astonishment (Psychological Acceptability) Security mechanisms should not make the resource more difficult
to access than when security mechanisms were not present (Bishop, 2003). Least Privilege The assurance that an entity only has the minimal/n Network Routing
How do routing protocols influence the design of a network? What is the
most important factor in routing IP packets?
Internetworking, connecting one network to another, is essential to the ef-
fective functioning of modern, secure networks. By distributing users and
devices across multiple domains, we can gain more efficient traffic flow,
isolate networks for security and availability, and deliver a more controlled
environment. In order to ensure that multiple networks can communicate
as intended, packets must have a clear path from source to destination.
Routers provide the crucial function of directing the network traffic by
reading the destination address, identifying the most appropriate link for
the packet, and then forwarding the packet. How does the router identify
the most appropriate link? In previous modules, you used static routes to
provide these links; however, as networks become more complex, routing
protocols become increasingly important. Routing protocols employ algo-
rithms to appraise the available routes based on predetermined factors and
make this determination dynamically.
In this module, you will get an overview of routing protocols and ap-
proaches for the IP address translation. In particular, you will explore
Routing Information Protocol (RIP), network address translation (NAT),
and port address translation (PAT). You will expand your skills in Packet
Tracer, applying IP packet routing techniques and DHCP and DNS ser-
vices to a network. You will use these skills in your upcoming projects in
Modules Six and Seven. While this module focuses on applying RIP as the
dynamic routing protocol in the labs and activity, the next module will take
a deeper dive into a second protocol: Open Shortest Path First (OSPF). As
you work with RIP in this module, think about how RIP is calculating
routes, and be prepared to consider how other protocols change your ap-
proach to internetworking.
