Network System for Secure Communication

Network System for Secure Communication Methodology: The main methodology involved behind this research project is to provide the importance of such technology from professionals and well referred articles. Some of the general interviews will be added to the project with details showing their interest towards the current technology and also the change they see in communicating with the new technology. It on the hands of the components of IP Security that contribute to this level of secure communication: The IP Security (IPSec) Driver is used to monitor, filter, and secures the traffic throughout the system. The (ISAKMP/Oakley) abbreviated as Internet Security Association Key Management Protocol performs key exchange and management functions that oversee security issues between hosts, and provide keys which can be used with security algorithms. The IP Security Policy and the Security Associations are derived from those policies that define the security environment where two hosts can communicate. The function of Security Association API is to provide the interface between the IPSec driver, the Policy Agent and the ISAKMP. The function of the management tools is to create policies, monitor IP Security statistics, and log IP Security events. The main methodologies which are under consideration for this project are Classical encryption technologies, IP sec Tunnel, IP sec VPN, Internet Key Exchange methods, Block Cipher Data Encryption, Advanced Encryption, Symmetric ciphers, Public private key functions, Digital signature etc, which have suggested me to design a better system. Implementation: The main reason behind selecting IPSec is that it so powerful that it provides security to IP layer, and also forms the basis for all the other TCP/IP protocols. This is generally composed of two protocols: Authentication Header (AH); Encapsulating Security Payload (ESP); IPSec Implementation Methods: IPSec is comprised of several implementations architectures which are defined in RFC 2401. The IPSec implementation also depends on various factors including the version of IP used (v4 versus v6), the basic requirements of the application and other factors. End Host Implementation: Implementing IPSec in all host devices provides the most flexibility and security. It enables â€Å"end-to-end† security between any two devices on the network. Router Implementation: Router implementation however is a much simpler task since we only make changes to a few routers instead of hundreds or thousands of clients. It only provides protection between pairs of routers that implement IPSec, but this may be sufficient for certain applications such as virtual private networks (VPNs). The idea will be implemented after proper testing of various available methodologies. The current strategy for implementation is as follows:. We use certain open source softwares which provide encryption and decryption methods and authentication. In the actual system, the user is asked to enter details of files to be sent and also some other details about the password and the public keys if included. The required software are used in a way which helps to run a smooth process and secure operation. CONTENTS Acknowledgement I owe many thanks to people who helped supported me in doing my dissertation. Firstly, I would like to express my immense gratitude to my respected professor Mr. Dr. XXX, YYYY University, London for his support and motivation that has helped me to come up with this project. He supported me when its needed and suggested me in understanding various methodologies in my project. He also took care of my project with attention to achieve my goal. I thank to my Institution and faculty members for giving me an opportunity to do my dissertation and also for library, computer lab facilities for doing my dissertation to achieve practical results which can resolve my project related issues. I also extend my Heart full thanks to my family friends. I owe my special thanks to my Dad and his colleagues who gave me suggestions on doing my Dissertation. Abstract In the present system the network helps a particular organization to share the data by using external devices. The external devices are used to carry the data. The existing system cannot provide security, which allows an unauthorized user to access the secret files. It also cannot share a single costly printer. Many interrupts may occur within the system. Though it is advantageous we have numerous disadvantageous, somebody writes a program and can make the costly printer to misprint the data. Similarly some unauthorized user may get access over the network and may perform any illegal functions like deleting some of the sensitive information Security is the term that comes into picture when some important or sensitive information must be protected from an unauthorized access. Hence there must be some way to protect the data from them and even if he hacks the information because he should not be able to understand whats the actual information in the file, which is the main intention of the project. The project is designed to protect the sensitive information while it is in transaction in the network. There are many chances that an unauthorized person can have an access over the network in some way and can access this sensitive information. My main topic focuses on IPSec (Internet Protocol Security) is an extension to the IP protocol specified by IETF which provides security to the IP and the upper-layer protocols and cryptography in a network sharing system. It was first developed for the new IPv6 standard and then â€Å"back ported† to IPv4. The IPSec architecture is described in the IPSec uses two different protocols AH (Authentication Header) and ESP (Encapsulating security payload) to ensure the authentication, integrity and confidentiality of the communication. It uses strong cryptography to provide both authentication and encryption services. Authentication ensures that packets are from the right sender and have not been altered in transit. Encryption prevents unauthorised reading of packet contents. [2] Cryptography is the technique used to secure the data while they are in transactions. Encryption and Decryption are two techniques used under cryptography technology. Data cryptography is the art of securing the resource that is shared among the applications. The main idea behind the design is to provide a secured communication between the networks showing network level performance practically by differentiating different operating system which can ensure the security, authenticity by considering, analyzing and testing any best available methodologies. 1. Introduction: Businesses today are focused on the importance of securing customer and business data. Increasing regulatory requirements are driving need for security of data. There have been many methods which have evolved over the years to address the need for security. Many of the methods are focused at the higher layers of the OSI protocol stack, thus compensating the IPs lack in resolving security issues. These solutions can be implemented in certain situations, but they cannot be generalized because they are particularly too many applications. For example, Secure Sockets Layer (SSL) can be used for certain applications like World Wide Web access or FTP, but there are many other applications which cannot be resolved with this type of security. A solution is required to allow security at the IP level was very necessary so that all higher-layer protocols in TCP/IP could take advantage of it. When the decision was made to develop a new version of IP (IPv6), this was the golden opportunity to resolve not just the addressing problems in the older IPv4, but also resolve lack of security issues as well. Later a new security technology was developed with IPv6 in mind, but since IPv6 has taken long time to develop, and thus a solution was designed to be usable for both IPv4 and IPv6. The technology which brings a secure communications to the Internet Protocol is known as IP Security, commonly abbreviated as IPSec. IPSec services allow users to build secure tunnels through certain networks. All the data that passes through the entrusted net is encrypted by the IPSEC gateway machine and decrypted by the gateway at the other end. The result obtained is a Virtual Private Network or VPN. This network is effectively private even though it includes machines at several different sites which are connected by the insecure Internet. Cryptography technique is used to secure the data while they are in transactions. Encryption and Decryption are two techniques which are used under cryptography technology. Data cryptography is the art of securing the resource that is shared among the applications. The Encryption and Decryption are termed as two powerful security technologies that are widely implemented to protect the data from loss and deliberate compromise. In this project the networking allows the company to share files or data without using certain external devices. Some unauthorized users may get access over the network and perform some illegal functions in certain cases like deleting files while the transaction is still on at that time encryption and then decryption techniques are implemented to secure the data. Many other attacks in cryptography are considered which lead me to research on different types of IPSec implementation methodologies in order to design the best model such that it may be suitable for the present trend of networking systems also form a platform to enable communication to the outside world. Thus in orders to implement IPSec, certain modifications are required to the systems communications routines and certain new systems processes conduct secret key negotiations. What is IPSec? An extension to the IP protocol is considered as IPSec which provides high level security to the IP and to the upper-layer protocols. This was initially developed for the new IPv6 standard and then was back ported to IPv4. IPSec provides the following security services: data origin authentication, connectionless integrity, replay protection, data confidentiality, limited traffic flow confidentiality, and key negotiation and management. It has been made mandatory by the IETF for the use of IPSec wherever feasible; the standards documents are close to completion, and there are numerous implementations. Overview of IPSec Architecture: The IPSec suite defined as a framework of open standards. The following protocols are used by IPSec to perform various functions. [2][3] IPSec provides three main facilities which are explained below: Internet key exchange(IKE and IKEv2) : This is used to set up a security association (SA) which can be done by handling negotiation of protocols and algorithms and generating the encryption and authentication keys which can be used by IPSec.[4][5] Authentication Header (AH): This is used to provide connectionless integrity and data origin authentication for IP datagrams and also provides protection against replay attacks.[6][7] Encapsulating Security Payload (ESP): This is used to provide confidentiality, data origin authentication, connectionless integrity, anti-replay service, and limited traffic flow confidentiality. [9] Both authentication and encryption are generally desired in this mechanism. Assure that unauthorized users do not penetrate the virtual private network Assure that eavesdroppers on the Internet cannot read messages sent over the virtual private network. Since both the above features are generally desirable, most implementations are likely to use ESP rather than AH. Security Association: The security Association mechanism is used for authentication (AH) and confidentiality (ESP) A one way relationship between a sender and a receiver that affords security services to the traffic carried on it. Security services are afforded to an SA for the use of AH or ESP but not both. SA identified by three parameters: Security Parameter Index (SPI) IP destination address Security protocol identifier Overview of IPSec Services and Functions: IPSec is not only assumed as a single protocol, but is rather considered as a set of services and protocols which provide a complete security solution to the IP network. These services and protocols are combined to provide various types of protection. Since IPSec usually works at the IP layer, it provides protection for any higher layer TCP/IP application or protocol without using any additional security methods, which is considered as a major strength for its implementation. General types of protection services offered by IPSec include: Encryption of user data to achieve privacy. Authentication and message integrity has to be achieved to ensure that it is not changed on route. Protection against certain types of security attacks, such as replay attacks. The ability of the devices to negotiate the security algorithms and keys required in order to meet their security needs. wo security modes called tunnel and transport are implemented to meet the various network needs. Features Benefits: IPSec is observed to be transparent by the end users. The users on the security mechanisms need not be trained. IPSec assures security measures for individuals. There is no requirement to change the software on a user or a server system. Strong security measures are applied to the entire traffic crossing the perimeter. 2. Objective: IPSec is mostly designed in order to encrypt the data between the two systems without any spoofing attacks. It is a key force of defence against internal and external attacks. However, other than these, there are many other security strategies which have prevented the security attacks. The main idea in my research is to provide a better approach to the implementation of IP Security by analyzing the present methodologies. In the implementation of this design, I am also considering different operating systems to provide a better approach towards security which can prove to be good in ideal ways. The design of such an approach is helpful in restricting any unauthorised access to the network and also helps in providing a secure and authenticated access. The main idea behind the design is to provide a secured communication between the networks independent of the operating system which can ensure the security, authenticity by considering, analyzing and testing any two best available methodologies. In my overview of RFCs available in the Internet such as Cryptography the receiver end of a particular communication channel is not aware of the sender unless the sender transmits some information with private and public keys with cipher text which can prove his authenticity. Now the receiver sends the same package with his signature and then the receiver is also authenticated mutually. Attacks may occur in different ways. There are also many ways where in such communications can be detected and using techniques like eavesdropping or sniffing or man in the middle attack. These are the three major problems for secure communications. In my research, I will attempt to design a procedure which can be easily followed in order to overcome such problems. There are many techniques available now which are better than normal communication. The major problem in such techniques is the implementation of man in the middle attack. There have been many advances to try and rectify the problems but there has always been a flaw in the design. My research is to design a system using the current technologies used to encrypt and authenticate. These techniques play a major role in the implementation of IP Security. The major interest would be in areas like encryption, decryption and authentication. Additions will be done to this research as it is implemented. The goal is to use research existing systems and to suggest a system which makes it even hard to break. It is not 100% immune to attacks but the attack may take longer to break the system than the present rate. This system will also be very safe and will be easy to use in daily life rather than something with a dozen processing steps to be followed. 2.2 SCOPE With the rapid development of Multimedia data management technologies over the internet there is need to concern about the internet there is need to concern about the security and privacy of information. In multimedia document, dissipation and sharing of data is becoming a common practice for internet based application and enterprises. As the internet forms the open source the present for all users security Forms the critical issue. Hence the transfer of information over the internet forms the critical issue. At the present situations the cryptographic techniques are used for providing ‘SECURITY. 2.3 PROJECT PERSPECTIVE The project â€Å"Network system for Secure Communication† is totally enhanced with the features that enable us to feel the real-time environment. Todays world is mostly employing the latest networking techniques instead of using stand-alone PCs. IPSec tunnelling or Encryption, information scrambling technology is an important security tool. By properly applying, it can provide a secure communication channel even when the underlying system and network infrastructure is not secure. This is particularly important when data passes through the shared systems or network segments where multiple people may have access to the information. In these situations, sensitive data and especially passwords should be encrypted in order to protect it from unintended disclosure or modification. 2.4 PROPOSED SYSTEM In this system ‘security is the term that comes into picture when some important or sensitive information must be protected from an unauthorized access. Hence there must be some way to protect the data from them and even if he hacks the information, The proposed system provides the ‘security and it does not allow unauthorized users to access the secret files. As per the ISO standards the security parameters are: Confidentiality Authentication Integrity Key distribution Access control CONFIDENTIALITY: Confidentiality is the protection of transmitted data from passive attacks. It can protect the data from unauthorized disclosure. AUTHENTICATION: A process used to verify the integrity of the transmitted data, especially a message. It is the process of proving ones identity to someone else. INTEGRITY: The sender and the receiver want to ensure that the content of their communication is not altered during transmission. KEY DISTRIBUTION: Key distribution can be defined as a term that refers to means of delivering a key to the communicating parties, without allowing others to see the key. ACCESS CONTROL: It is a ability to limit and control the access to host systems and applications via communication links. 3.Literature Review This project emphasis design and evaluates a computer-based system using appropriate process and tools. Most of the industry wide routers in the network implement their functionality in hardware and therefore we believe that hardware based routers are more efficient than a software-based router implementation besides that most of the work is in the research community which will be performed, using software-based routers utilizing off-the-shelf PCs. Various works have to be attempted which evaluates different protocol stack, however none of them use hardware-based routers, has such a wide range of metrics, and none investigated mechanisms. My research methodology emphasis surveys, forums from the internet and articles from IEEE (Institute of Electrical and Electronics EngineersorIEEE) a quantitative approach in advance technology. I also consider various other thesis and books which are best suitable for my project. Here following are the network related definitions, and few protocols from application layer, network and internet layer also discussed which actually gives clear idea of understanding the concepts. 3.1 IPSec Standards: IPSec is actually a collection of techniques and protocols; it is not defined in a single Internet standard. Instead, a collection of RFCs defines the architecture, services and specific protocols used in IPSec. Some of the most important of these are shown below: [RFC 2401] Security Architecture for the Internet Protocol (IPSec overview) The main IPSec document describes the architecture and general operation of the technology, and showing how the different components fit together. [RFC 2402] IP Authentication Header It defines the IPSec Authentication Header (AH) protocol used for ensuring data integrity and origin verification. [RFC 2403] The Use of HMAC-MD5-96 within ESP and AH Describes a particular encryption algorithm for use by AH and ESP called Message Digest 5 (MD5), HMAC variant. [RFC 2404] The Use of HMAC-SHA-1-96 within ESP and AH Describes a particular encryption algorithm for use by AH and ESP called Secure Hash Algorithm 1 (SHA-1), HMAC variant. [RFC 2406] IP Encapsulating and Security payload (ESP) It describes the IPSec Encapsulation Security Payload (ESP) protocol that provides data encryption for confidentiality. [RFC 2408] Internet Security Association and Key Management Protocol (ISAKMP) It defines methods for exchanging keys and negotiating security associations. [RFC 2409] The Internet Key Exchange (IKE) Describes the Internet Key Exchange (IKE) protocol used to negotiate security associations and exchange keys between devices for secure communications. It is based on ISAKMP and OAKLEY. [RFC 2412] The OAKLEY Key Determination Protocol It describes a generic protocol for key exchange. [RFC 2131] Dynamic Host Configuration Protocol (DHCP) DHCP allows a host to obtain an IP address automatically, as well as to learn additional information about subnet mask, the address of its first-hop router, and the address of its local DNS server. [RFC 2131; RFC 3022] Network Address Translation (NAT)- In an attempt to provide transparent routing to hosts, NAT devices are used to connect an isolated address realm with private unregistered addresses to an external realm with globally unique registered addresses. Domain Name System (DNS): It is a hierarchical naming system for computers, services, or any resource connected to the Internet or a private network. It associates various other information with domain names assigned to each of the participants. Most importantly, it translates domain names meaningful to humans into the numerical (binary) identifiers associated with networking equipment for the purpose of locating and addressing these devices worldwide. For example, www.example.com translates to 208.77.188.166. Windows Internet Name Service (WINS): It is Microsofts implementation of NetBIOS Name Service (NBNS), a name server and service for NetBIOS computer names. Effectively WINS is to NetBIOS names, like DNS is to domain names in fact its a central mapping of host names to network addresses. Like DNS it is broken into two parts, a Server Service (that manages the encoded Jet Database, server to server replication, service requests, and conflicts) and a TCP/IP Client component which manages the clients registration and renewal of names, and takes care of queries. VPN (Virtual Private Network) : It is a virtual computer network that exists over the top of an existing network. The purpose of a VPN is to allow communications between systems connected to the VPN using an existing shared network infrastructure as the transport, without the VPN network being aware of the existence of the underlying network backbone or without the VPN interfering with other network traffic on the backbone. A VPN between two networks is often referred to as a VPN Tunnel. Most VPN technologies can be separated into two broad categories, Secure VPNs and Trusted VPNs. Internet Protocol version 6 (IPv6): It is the next-generation Internet Protocol version designated as the successor to IPv4. It is an Internet Layer protocol for packet-switched internetworks. The main driving force for the redesign of Internet Protocol was the foreseeable IPv4 address exhaustion. IPv6 was defined in December 1998 by the Internet Engineering Task Force (IETF) with the publication of an Internet standard specification, RFC 2460. IPv6 has a vastly larger address space than IPv4. This results from the use of a 128-bit address, whereas IPv4 uses only 32 bits. This expansion provides flexibility in allocating addresses and routing traffic and eliminates the primary need for network address translation (NAT), which gained widespread deployment as an effort to alleviate IPv4 address exhaustion. Due to its security and flexibility entire Internet will be deployed byIPv6 in 2012 as expected. Tunnelling: In computer networks tunnelling protocol (delivery protocol) encapsulates the different payload protocol i.e., It carries a payload over an incompatible delivery-network. It can also provide a secure path through an untrusted network without any data loss. Transport Layer Security (TLS): Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), are cryptographic protocols that provide security for communications over networks such as the Internet. TLS and SSL encrypt the segments of network connections at the Transport Layer end-to-end. Encryption: In cryptography, encryption is the process of transforming information (referred to as plaintext) using an algorithm (called cipher) to make it unreadable to anyone except those possessing special knowledge, usually referred to as a key. The result of the process is encrypted information (in cryptography, referred to as cipher text). In many contexts, the word encryption also implicitly refers to the reverse process, decryption. Internet Key Exchange: Internet Key Exchange (IKE or IKEv2) is the protocol used to set up a security association (SA) in the IPSec protocol suite. IKE uses a Diffie-Hellman key exchange to set up a shared session secret, from which cryptographic keys are derived. Public key techniques or, alternatively, a pre-shared key, are used to mutually authenticate the communicating parties. 4.IPSec System Architecture Authentication Header and Encapsulating Security Payload are commonly called â€Å"protocols†, though this is another case where the validity of this term is debatable. They are not really distinct protocols but are implemented as headers that are inserted into IP datagrams, as we will see. They thus do the â€Å"grunt work† of IPSec, and can be used together to provide both authentication and privacy. IPSec protocols: The IPSec protocol family consists of two protocols: Authentication Header (AH) and Encapsulated Security Payload (ESP). Both these protocols are independent IP. AH is the IP protocol 51 and ESP is the IP protocol 50 Authentication Header: This is a member of the IPSec protocol suite. Authentication Header provides connectionless data integrity and data origin authentication of IP packets. Further, it can also provide protection against the replay attacks by using the sliding window technique and by discarding the old packets. Authentication Header also gives protection for the IP payload and all the header fields of an IP datagram. AH generally operates on the stop of IP, by using the IP protocol number 51. An AH packet diagram is shown below which describes how an AH packet can be constructed and interpreted: Field meanings: Next header: This field is an 8-bit field that mainly identifies the type of the next payload obtained after the Authentication Header. The value of this field can be chosen from the set of defined IP Protocol Numbers. RESERVED These fields are usually reserved for the future use. Payload length This defines the size of Authentication Header packet. Sequence number This field represents a monotonically increasing number which is used to prevent certain replay attacks. Security parameters index (SPI) This field is used to identify the security parameters, in combination with the IP address, and then identify the security association techniques implemented with this packet. Authentication data This field contains the integrity check value (ICV) which is necessary to authenticate the packet. This field may also contain padding. Encapsulating Security Payload: ESP which can be expanded as Encapsulating Security Payload is a member belonging of the IPSec protocol suite. IPSec achieves integrity, origin authenticity, and confidentiality protection of packets. This protocol also supports encryption-only and authentication-only configurations. However usage of only encryption technique without authentication is not recommended because it is termed insecure. ESP does not protect the IP packet header like the Authentication Header (AH) does. The packet diagram below shows how an ESP packet is constructed and interpreted: Field meanings: Security paramete Network System for Secure Communication Network System for Secure Communication Methodology: The main methodology involved behind this research project is to provide the importance of such technology from professionals and well referred articles. Some of the general interviews will be added to the project with details showing their interest towards the current technology and also the change they see in communicating with the new technology. It on the hands of the components of IP Security that contribute to this level of secure communication: The IP Security (IPSec) Driver is used to monitor, filter, and secures the traffic throughout the system. The (ISAKMP/Oakley) abbreviated as Internet Security Association Key Management Protocol performs key exchange and management functions that oversee security issues between hosts, and provide keys which can be used with security algorithms. The IP Security Policy and the Security Associations are derived from those policies that define the security environment where two hosts can communicate. The function of Security Association API is to provide the interface between the IPSec driver, the Policy Agent and the ISAKMP. The function of the management tools is to create policies, monitor IP Security statistics, and log IP Security events. The main methodologies which are under consideration for this project are Classical encryption technologies, IP sec Tunnel, IP sec VPN, Internet Key Exchange methods, Block Cipher Data Encryption, Advanced Encryption, Symmetric ciphers, Public private key functions, Digital signature etc, which have suggested me to design a better system. Implementation: The main reason behind selecting IPSec is that it so powerful that it provides security to IP layer, and also forms the basis for all the other TCP/IP protocols. This is generally composed of two protocols: Authentication Header (AH); Encapsulating Security Payload (ESP); IPSec Implementation Methods: IPSec is comprised of several implementations architectures which are defined in RFC 2401. The IPSec implementation also depends on various factors including the version of IP used (v4 versus v6), the basic requirements of the application and other factors. End Host Implementation: Implementing IPSec in all host devices provides the most flexibility and security. It enables â€Å"end-to-end† security between any two devices on the network. Router Implementation: Router implementation however is a much simpler task since we only make changes to a few routers instead of hundreds or thousands of clients. It only provides protection between pairs of routers that implement IPSec, but this may be sufficient for certain applications such as virtual private networks (VPNs). The idea will be implemented after proper testing of various available methodologies. The current strategy for implementation is as follows:. We use certain open source softwares which provide encryption and decryption methods and authentication. In the actual system, the user is asked to enter details of files to be sent and also some other details about the password and the public keys if included. The required software are used in a way which helps to run a smooth process and secure operation. CONTENTS Acknowledgement I owe many thanks to people who helped supported me in doing my dissertation. Firstly, I would like to express my immense gratitude to my respected professor Mr. Dr. XXX, YYYY University, London for his support and motivation that has helped me to come up with this project. He supported me when its needed and suggested me in understanding various methodologies in my project. He also took care of my project with attention to achieve my goal. I thank to my Institution and faculty members for giving me an opportunity to do my dissertation and also for library, computer lab facilities for doing my dissertation to achieve practical results which can resolve my project related issues. I also extend my Heart full thanks to my family friends. I owe my special thanks to my Dad and his colleagues who gave me suggestions on doing my Dissertation. Abstract In the present system the network helps a particular organization to share the data by using external devices. The external devices are used to carry the data. The existing system cannot provide security, which allows an unauthorized user to access the secret files. It also cannot share a single costly printer. Many interrupts may occur within the system. Though it is advantageous we have numerous disadvantageous, somebody writes a program and can make the costly printer to misprint the data. Similarly some unauthorized user may get access over the network and may perform any illegal functions like deleting some of the sensitive information Security is the term that comes into picture when some important or sensitive information must be protected from an unauthorized access. Hence there must be some way to protect the data from them and even if he hacks the information because he should not be able to understand whats the actual information in the file, which is the main intention of the project. The project is designed to protect the sensitive information while it is in transaction in the network. There are many chances that an unauthorized person can have an access over the network in some way and can access this sensitive information. My main topic focuses on IPSec (Internet Protocol Security) is an extension to the IP protocol specified by IETF which provides security to the IP and the upper-layer protocols and cryptography in a network sharing system. It was first developed for the new IPv6 standard and then â€Å"back ported† to IPv4. The IPSec architecture is described in the IPSec uses two different protocols AH (Authentication Header) and ESP (Encapsulating security payload) to ensure the authentication, integrity and confidentiality of the communication. It uses strong cryptography to provide both authentication and encryption services. Authentication ensures that packets are from the right sender and have not been altered in transit. Encryption prevents unauthorised reading of packet contents. [2] Cryptography is the technique used to secure the data while they are in transactions. Encryption and Decryption are two techniques used under cryptography technology. Data cryptography is the art of securing the resource that is shared among the applications. The main idea behind the design is to provide a secured communication between the networks showing network level performance practically by differentiating different operating system which can ensure the security, authenticity by considering, analyzing and testing any best available methodologies. 1. Introduction: Businesses today are focused on the importance of securing customer and business data. Increasing regulatory requirements are driving need for security of data. There have been many methods which have evolved over the years to address the need for security. Many of the methods are focused at the higher layers of the OSI protocol stack, thus compensating the IPs lack in resolving security issues. These solutions can be implemented in certain situations, but they cannot be generalized because they are particularly too many applications. For example, Secure Sockets Layer (SSL) can be used for certain applications like World Wide Web access or FTP, but there are many other applications which cannot be resolved with this type of security. A solution is required to allow security at the IP level was very necessary so that all higher-layer protocols in TCP/IP could take advantage of it. When the decision was made to develop a new version of IP (IPv6), this was the golden opportunity to resolve not just the addressing problems in the older IPv4, but also resolve lack of security issues as well. Later a new security technology was developed with IPv6 in mind, but since IPv6 has taken long time to develop, and thus a solution was designed to be usable for both IPv4 and IPv6. The technology which brings a secure communications to the Internet Protocol is known as IP Security, commonly abbreviated as IPSec. IPSec services allow users to build secure tunnels through certain networks. All the data that passes through the entrusted net is encrypted by the IPSEC gateway machine and decrypted by the gateway at the other end. The result obtained is a Virtual Private Network or VPN. This network is effectively private even though it includes machines at several different sites which are connected by the insecure Internet. Cryptography technique is used to secure the data while they are in transactions. Encryption and Decryption are two techniques which are used under cryptography technology. Data cryptography is the art of securing the resource that is shared among the applications. The Encryption and Decryption are termed as two powerful security technologies that are widely implemented to protect the data from loss and deliberate compromise. In this project the networking allows the company to share files or data without using certain external devices. Some unauthorized users may get access over the network and perform some illegal functions in certain cases like deleting files while the transaction is still on at that time encryption and then decryption techniques are implemented to secure the data. Many other attacks in cryptography are considered which lead me to research on different types of IPSec implementation methodologies in order to design the best model such that it may be suitable for the present trend of networking systems also form a platform to enable communication to the outside world. Thus in orders to implement IPSec, certain modifications are required to the systems communications routines and certain new systems processes conduct secret key negotiations. What is IPSec? An extension to the IP protocol is considered as IPSec which provides high level security to the IP and to the upper-layer protocols. This was initially developed for the new IPv6 standard and then was back ported to IPv4. IPSec provides the following security services: data origin authentication, connectionless integrity, replay protection, data confidentiality, limited traffic flow confidentiality, and key negotiation and management. It has been made mandatory by the IETF for the use of IPSec wherever feasible; the standards documents are close to completion, and there are numerous implementations. Overview of IPSec Architecture: The IPSec suite defined as a framework of open standards. The following protocols are used by IPSec to perform various functions. [2][3] IPSec provides three main facilities which are explained below: Internet key exchange(IKE and IKEv2) : This is used to set up a security association (SA) which can be done by handling negotiation of protocols and algorithms and generating the encryption and authentication keys which can be used by IPSec.[4][5] Authentication Header (AH): This is used to provide connectionless integrity and data origin authentication for IP datagrams and also provides protection against replay attacks.[6][7] Encapsulating Security Payload (ESP): This is used to provide confidentiality, data origin authentication, connectionless integrity, anti-replay service, and limited traffic flow confidentiality. [9] Both authentication and encryption are generally desired in this mechanism. Assure that unauthorized users do not penetrate the virtual private network Assure that eavesdroppers on the Internet cannot read messages sent over the virtual private network. Since both the above features are generally desirable, most implementations are likely to use ESP rather than AH. Security Association: The security Association mechanism is used for authentication (AH) and confidentiality (ESP) A one way relationship between a sender and a receiver that affords security services to the traffic carried on it. Security services are afforded to an SA for the use of AH or ESP but not both. SA identified by three parameters: Security Parameter Index (SPI) IP destination address Security protocol identifier Overview of IPSec Services and Functions: IPSec is not only assumed as a single protocol, but is rather considered as a set of services and protocols which provide a complete security solution to the IP network. These services and protocols are combined to provide various types of protection. Since IPSec usually works at the IP layer, it provides protection for any higher layer TCP/IP application or protocol without using any additional security methods, which is considered as a major strength for its implementation. General types of protection services offered by IPSec include: Encryption of user data to achieve privacy. Authentication and message integrity has to be achieved to ensure that it is not changed on route. Protection against certain types of security attacks, such as replay attacks. The ability of the devices to negotiate the security algorithms and keys required in order to meet their security needs. wo security modes called tunnel and transport are implemented to meet the various network needs. Features Benefits: IPSec is observed to be transparent by the end users. The users on the security mechanisms need not be trained. IPSec assures security measures for individuals. There is no requirement to change the software on a user or a server system. Strong security measures are applied to the entire traffic crossing the perimeter. 2. Objective: IPSec is mostly designed in order to encrypt the data between the two systems without any spoofing attacks. It is a key force of defence against internal and external attacks. However, other than these, there are many other security strategies which have prevented the security attacks. The main idea in my research is to provide a better approach to the implementation of IP Security by analyzing the present methodologies. In the implementation of this design, I am also considering different operating systems to provide a better approach towards security which can prove to be good in ideal ways. The design of such an approach is helpful in restricting any unauthorised access to the network and also helps in providing a secure and authenticated access. The main idea behind the design is to provide a secured communication between the networks independent of the operating system which can ensure the security, authenticity by considering, analyzing and testing any two best available methodologies. In my overview of RFCs available in the Internet such as Cryptography the receiver end of a particular communication channel is not aware of the sender unless the sender transmits some information with private and public keys with cipher text which can prove his authenticity. Now the receiver sends the same package with his signature and then the receiver is also authenticated mutually. Attacks may occur in different ways. There are also many ways where in such communications can be detected and using techniques like eavesdropping or sniffing or man in the middle attack. These are the three major problems for secure communications. In my research, I will attempt to design a procedure which can be easily followed in order to overcome such problems. There are many techniques available now which are better than normal communication. The major problem in such techniques is the implementation of man in the middle attack. There have been many advances to try and rectify the problems but there has always been a flaw in the design. My research is to design a system using the current technologies used to encrypt and authenticate. These techniques play a major role in the implementation of IP Security. The major interest would be in areas like encryption, decryption and authentication. Additions will be done to this research as it is implemented. The goal is to use research existing systems and to suggest a system which makes it even hard to break. It is not 100% immune to attacks but the attack may take longer to break the system than the present rate. This system will also be very safe and will be easy to use in daily life rather than something with a dozen processing steps to be followed. 2.2 SCOPE With the rapid development of Multimedia data management technologies over the internet there is need to concern about the internet there is need to concern about the security and privacy of information. In multimedia document, dissipation and sharing of data is becoming a common practice for internet based application and enterprises. As the internet forms the open source the present for all users security Forms the critical issue. Hence the transfer of information over the internet forms the critical issue. At the present situations the cryptographic techniques are used for providing ‘SECURITY. 2.3 PROJECT PERSPECTIVE The project â€Å"Network system for Secure Communication† is totally enhanced with the features that enable us to feel the real-time environment. Todays world is mostly employing the latest networking techniques instead of using stand-alone PCs. IPSec tunnelling or Encryption, information scrambling technology is an important security tool. By properly applying, it can provide a secure communication channel even when the underlying system and network infrastructure is not secure. This is particularly important when data passes through the shared systems or network segments where multiple people may have access to the information. In these situations, sensitive data and especially passwords should be encrypted in order to protect it from unintended disclosure or modification. 2.4 PROPOSED SYSTEM In this system ‘security is the term that comes into picture when some important or sensitive information must be protected from an unauthorized access. Hence there must be some way to protect the data from them and even if he hacks the information, The proposed system provides the ‘security and it does not allow unauthorized users to access the secret files. As per the ISO standards the security parameters are: Confidentiality Authentication Integrity Key distribution Access control CONFIDENTIALITY: Confidentiality is the protection of transmitted data from passive attacks. It can protect the data from unauthorized disclosure. AUTHENTICATION: A process used to verify the integrity of the transmitted data, especially a message. It is the process of proving ones identity to someone else. INTEGRITY: The sender and the receiver want to ensure that the content of their communication is not altered during transmission. KEY DISTRIBUTION: Key distribution can be defined as a term that refers to means of delivering a key to the communicating parties, without allowing others to see the key. ACCESS CONTROL: It is a ability to limit and control the access to host systems and applications via communication links. 3.Literature Review This project emphasis design and evaluates a computer-based system using appropriate process and tools. Most of the industry wide routers in the network implement their functionality in hardware and therefore we believe that hardware based routers are more efficient than a software-based router implementation besides that most of the work is in the research community which will be performed, using software-based routers utilizing off-the-shelf PCs. Various works have to be attempted which evaluates different protocol stack, however none of them use hardware-based routers, has such a wide range of metrics, and none investigated mechanisms. My research methodology emphasis surveys, forums from the internet and articles from IEEE (Institute of Electrical and Electronics EngineersorIEEE) a quantitative approach in advance technology. I also consider various other thesis and books which are best suitable for my project. Here following are the network related definitions, and few protocols from application layer, network and internet layer also discussed which actually gives clear idea of understanding the concepts. 3.1 IPSec Standards: IPSec is actually a collection of techniques and protocols; it is not defined in a single Internet standard. Instead, a collection of RFCs defines the architecture, services and specific protocols used in IPSec. Some of the most important of these are shown below: [RFC 2401] Security Architecture for the Internet Protocol (IPSec overview) The main IPSec document describes the architecture and general operation of the technology, and showing how the different components fit together. [RFC 2402] IP Authentication Header It defines the IPSec Authentication Header (AH) protocol used for ensuring data integrity and origin verification. [RFC 2403] The Use of HMAC-MD5-96 within ESP and AH Describes a particular encryption algorithm for use by AH and ESP called Message Digest 5 (MD5), HMAC variant. [RFC 2404] The Use of HMAC-SHA-1-96 within ESP and AH Describes a particular encryption algorithm for use by AH and ESP called Secure Hash Algorithm 1 (SHA-1), HMAC variant. [RFC 2406] IP Encapsulating and Security payload (ESP) It describes the IPSec Encapsulation Security Payload (ESP) protocol that provides data encryption for confidentiality. [RFC 2408] Internet Security Association and Key Management Protocol (ISAKMP) It defines methods for exchanging keys and negotiating security associations. [RFC 2409] The Internet Key Exchange (IKE) Describes the Internet Key Exchange (IKE) protocol used to negotiate security associations and exchange keys between devices for secure communications. It is based on ISAKMP and OAKLEY. [RFC 2412] The OAKLEY Key Determination Protocol It describes a generic protocol for key exchange. [RFC 2131] Dynamic Host Configuration Protocol (DHCP) DHCP allows a host to obtain an IP address automatically, as well as to learn additional information about subnet mask, the address of its first-hop router, and the address of its local DNS server. [RFC 2131; RFC 3022] Network Address Translation (NAT)- In an attempt to provide transparent routing to hosts, NAT devices are used to connect an isolated address realm with private unregistered addresses to an external realm with globally unique registered addresses. Domain Name System (DNS): It is a hierarchical naming system for computers, services, or any resource connected to the Internet or a private network. It associates various other information with domain names assigned to each of the participants. Most importantly, it translates domain names meaningful to humans into the numerical (binary) identifiers associated with networking equipment for the purpose of locating and addressing these devices worldwide. For example, www.example.com translates to 208.77.188.166. Windows Internet Name Service (WINS): It is Microsofts implementation of NetBIOS Name Service (NBNS), a name server and service for NetBIOS computer names. Effectively WINS is to NetBIOS names, like DNS is to domain names in fact its a central mapping of host names to network addresses. Like DNS it is broken into two parts, a Server Service (that manages the encoded Jet Database, server to server replication, service requests, and conflicts) and a TCP/IP Client component which manages the clients registration and renewal of names, and takes care of queries. VPN (Virtual Private Network) : It is a virtual computer network that exists over the top of an existing network. The purpose of a VPN is to allow communications between systems connected to the VPN using an existing shared network infrastructure as the transport, without the VPN network being aware of the existence of the underlying network backbone or without the VPN interfering with other network traffic on the backbone. A VPN between two networks is often referred to as a VPN Tunnel. Most VPN technologies can be separated into two broad categories, Secure VPNs and Trusted VPNs. Internet Protocol version 6 (IPv6): It is the next-generation Internet Protocol version designated as the successor to IPv4. It is an Internet Layer protocol for packet-switched internetworks. The main driving force for the redesign of Internet Protocol was the foreseeable IPv4 address exhaustion. IPv6 was defined in December 1998 by the Internet Engineering Task Force (IETF) with the publication of an Internet standard specification, RFC 2460. IPv6 has a vastly larger address space than IPv4. This results from the use of a 128-bit address, whereas IPv4 uses only 32 bits. This expansion provides flexibility in allocating addresses and routing traffic and eliminates the primary need for network address translation (NAT), which gained widespread deployment as an effort to alleviate IPv4 address exhaustion. Due to its security and flexibility entire Internet will be deployed byIPv6 in 2012 as expected. Tunnelling: In computer networks tunnelling protocol (delivery protocol) encapsulates the different payload protocol i.e., It carries a payload over an incompatible delivery-network. It can also provide a secure path through an untrusted network without any data loss. Transport Layer Security (TLS): Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), are cryptographic protocols that provide security for communications over networks such as the Internet. TLS and SSL encrypt the segments of network connections at the Transport Layer end-to-end. Encryption: In cryptography, encryption is the process of transforming information (referred to as plaintext) using an algorithm (called cipher) to make it unreadable to anyone except those possessing special knowledge, usually referred to as a key. The result of the process is encrypted information (in cryptography, referred to as cipher text). In many contexts, the word encryption also implicitly refers to the reverse process, decryption. Internet Key Exchange: Internet Key Exchange (IKE or IKEv2) is the protocol used to set up a security association (SA) in the IPSec protocol suite. IKE uses a Diffie-Hellman key exchange to set up a shared session secret, from which cryptographic keys are derived. Public key techniques or, alternatively, a pre-shared key, are used to mutually authenticate the communicating parties. 4.IPSec System Architecture Authentication Header and Encapsulating Security Payload are commonly called â€Å"protocols†, though this is another case where the validity of this term is debatable. They are not really distinct protocols but are implemented as headers that are inserted into IP datagrams, as we will see. They thus do the â€Å"grunt work† of IPSec, and can be used together to provide both authentication and privacy. IPSec protocols: The IPSec protocol family consists of two protocols: Authentication Header (AH) and Encapsulated Security Payload (ESP). Both these protocols are independent IP. AH is the IP protocol 51 and ESP is the IP protocol 50 Authentication Header: This is a member of the IPSec protocol suite. Authentication Header provides connectionless data integrity and data origin authentication of IP packets. Further, it can also provide protection against the replay attacks by using the sliding window technique and by discarding the old packets. Authentication Header also gives protection for the IP payload and all the header fields of an IP datagram. AH generally operates on the stop of IP, by using the IP protocol number 51. An AH packet diagram is shown below which describes how an AH packet can be constructed and interpreted: Field meanings: Next header: This field is an 8-bit field that mainly identifies the type of the next payload obtained after the Authentication Header. The value of this field can be chosen from the set of defined IP Protocol Numbers. RESERVED These fields are usually reserved for the future use. Payload length This defines the size of Authentication Header packet. Sequence number This field represents a monotonically increasing number which is used to prevent certain replay attacks. Security parameters index (SPI) This field is used to identify the security parameters, in combination with the IP address, and then identify the security association techniques implemented with this packet. Authentication data This field contains the integrity check value (ICV) which is necessary to authenticate the packet. This field may also contain padding. Encapsulating Security Payload: ESP which can be expanded as Encapsulating Security Payload is a member belonging of the IPSec protocol suite. IPSec achieves integrity, origin authenticity, and confidentiality protection of packets. This protocol also supports encryption-only and authentication-only configurations. However usage of only encryption technique without authentication is not recommended because it is termed insecure. ESP does not protect the IP packet header like the Authentication Header (AH) does. The packet diagram below shows how an ESP packet is constructed and interpreted: Field meanings: Security paramete

Behind the Arch: The Truth about Drinking :: Alcoholism Drinking Essays

Behind the Arch: The Truth about Drinking at BVU After reading the book, Behind the Arch: The Truth about Drinking at BVU by Chris Allen, Alisa Dixson, Jennifer Durham, Shelley Katzer, Max Kenkel, Teri Kramer, Toby Malavong, and Courtney Weller, I realized that drinking on our BVU campus is a problem. I think that this is a problem on almost all college campuses though. This same group of students could go to almost any campus in the nation and find the same facts I believe. I did however, have some problems with the facts in the story. Some of the facts, to me, seemed almost impossible to be factual. Also, I think that the voiced teacher opinions were not needed in the book as much as they were. The fact that all these professors were once a kid might have been left out in some of these stories. So, at times, when I was reading this book I lost interest. I think that more research and surveying should have taken place before this book was used for classroom purposes. Instead of taking opinions from only non-drinking students and professors that all seemed to say that they have never drank before, the opinions should have been more varied and this book may have been worth taking a look at. Reading is enjoyed by almost everyone when the subject is interesting or factual. When a person is forced to read something, and they start to find patterns of information that seem to not be true, they tend to lose interest. Reading this book lost me almost form the start. Why did all the professors seem to speak of the exact same facts? They said the same facts in opinion, but differing stories would leak a little more true information than others. All of the students’ stories in the book seemed to have the same problem as well. To start the book, the first story started out with a young man and his roommate who chose to stay in their dorm on a Friday night and do their calculus homework. This isn’t a bad story, but if this book is aimed for us to understand how much drinking was going on around our campus, then why didn’t they start the story with someone who is drinking. How can a reader get the full truth about drinking, if they are interviewing kids that do not even participate in partying or drinking, not even socially?

Mungo Man

History Assignment – Mungo Man The discoveries at Lake Mungo are potentially the most important discoveries made in Australia, if not the world. The skeletal remains uncovered a world that we know very little about. They gave us an insight to the burial practices of the earliest people for both males and females of the time. The skeletal remains were subject to numerous forms of dating, but primarily radiocarbon dating or C-14 dating. Mungo I also known as Mungo woman or LM1 was the first skeleton to be discovered at the site. In 1968 geologist Jim Bowler was conducting research on the Willandra Lakes region, more specifically Lake Mungo. His original intention for the site was to study the Pleistocene layers of the area, looking at the ancient geography of the land. However in one of the lunettes (extended, crescent shaped sand ridges) he happened to notice a bone fragment protruding from an exposed calcrete block. Upon closer inspection he realised that it was not animal but human. Bowler marked the site with a peg for further excavation by archaeologists. Similarly in 1974 Jim also discovered Mungo III/LM3, this time dubbed Mungo Man. His skeleton was discovered after a prolonged period of rain in 1973. The rain has eroded the outer layers of the dirt to reveal a carbonated human skull. These remains were discovered just some 500m from the site of Mungo I. Again marked and excavated later on by archaeologist. Mungo I was the remains of a woman. She was described as a gracile woman, with fine bones and features. She was not found as a whole intact skeleton, rather 175 bone fragments. It was concluded that she was cremated; the charring of the bone fragments supported this theory. From this primary evidence we can hypothesise that the people of the time believed in the ritual passing of an individual, that the deceased should have a physical recognition of the change between the worldly life and the afterlife. We can also guess that from this they had some sort of belief system. Mungo III is an example of how the people of his time treated the males in the society. Instead of the cremation seen in Mungo Woman, this male, again gracile in appearance was instead buried in the ground. Again there is evidence of a ritual burial in the way he was laid. His hands were clasped together and red ochre sprinkled over the body. This arrangement of the body again demonstrates a belief in passing to another world by making the body presentable to this other world. There were numerous ways that the remains have been dated. By using the dated layers that the bones were found in and C-14 dating we are able to get a fairly accurate estimate of when these people were buried. Other ways included electron spin resonance dating, uranium-thorium dating, optically stimulated luminescence dating and thermoluminescence dating. Paleoanthropologists, or people who specialise in studying ancient humans by looking at human fossil primary evidence carried all of these dating methods out. When first discovered in 1968 and 1974 Jim Bowler was able to use his own scientific field of geomorphology. By using the already dated layers that the bones were found in he was able to produce and estimate time of burial. He estimated the bones of LM1 to be around 40,000 years ago and LM3 to around 32,000 years ago. He was able compare the strata of the area and the two skeletons to come up with these estimations. Archaeologists soon came in in the years following each discovery to uncover the remains. After Archaeologists had removed the bones they were handed over to paleoanthropologists and aboriginal peoples for proper testing. The first and most commonly known dating method that they used on the skeletons was radiocarbon or C-14 dating. The second way that archaeologists were able to date the Lake Mungo remains was by electron spin resonance dating. Also known as ESR dating, this method of dating the archaeologist/scientist looks to the radiation damage of bones (mostly teeth) by looking at the amount of radiation an object has been subject to whilst under ground. ESR dating works best on animal teeth so even though the results are still plausible it provided a much larger date area. The results reached showed the conclusion that the bones were around 31, 000 years old for Mungo Man give or take 7, 000 years. This of course would bring the reliability of this method down. Another dating technique they used on the skeletal remains was uranium-thorium dating. Instead of looking at how much of a particular substance is missing uranium-thorium dating records the accumulation of equilibrium between the isotope thorium-230 and its radioactive parent uranium-234. It is useful for determining the age of objects containing calcium carbonate, like bone. This was combined with optically stimulated luminescence dating, where you uncover when the material was last exposed to light to bring an estimate of 62,000 years ago for Mungo III Â ± 6,000 years. This caused controversy and confusion though as the surrounding earth was dated only to 43,000 years. This questions the reliability of these results as not all the facts interlink with each other. While individually these dating methods are quite reliable combined they produce relatively farfetched results. Thermoluminescence dating works in a similar way to optically stimulated luminescence dating in that it measures when it was last exposed to light but also when it was last exposed to heat. By using this technique the bones were dated to no more than 24,600 Â ±2,400 years but no less than 43,300 Â ±3,800 years ago.

Sociology Forrest Gump Essay - 809 Words

Forest Gump Despite his low IQ, Forrest Gump leads a truly charmed life, taking part in many of the most memorable events in his lifetime. Without trying, Forrest teaches Elvis Presley to dance, becomes a football star, meets John F. Kennedy, serves with honor in Vietnam, meets Lyndon Johnson, speaks at an anti-war rally at the Washington Monument, hangs out with the Yippies, defeats the Chinese national team in table tennis, meets Richard Nixon, discovers the break-in at the Watergate, opens a profitable shrimping business, becomes an original investor in Apple Computers, and decides to run back and forth across the country for several years. Meanwhile, as his life goes by, Forrest never forgets about Jenny, the girl he loved since a†¦show more content†¦Bubba came from a shrimping community in Alabama so he related his life back to shrimping. The movie Forrest Gump is a prime example of the southern way of living, from the way they speak to what they eat. Forrest Gump was born with a low IQ and a spine condition that impaired his ability to walk. This made him stand out in the small town of Elliott 3 Greenbow, Alabama. The people of slow paced Greenbow were not used to any kind of change or someone who is considered different than the norm. Growing up, Forrest did not fit in to the social norms of his town. Social norms are described as laws that govern society’s behaviors. Although these norms are not considered to be formal laws within society, they still work to create a great deal of social control. It is important to note that what is considered â€Å"normal† is relative to the location and culture in which the norms are taking place. Because Forrest did not fit into the norms of his community he was labeled as an outcast. He was often made fun of by other children for having leg braces and being mentally slower than the others. Due to his mental disabilities, Forrest becomes the victim of academic and social discrimination, which his mother fights desperately to resolve. At first, Forrest was denied entrance to his local school. His mama refused to send Forres t to a school to â€Å"retread tires† and went to great extents to force him into the normal school. After being able toShow MoreRelatedThe Social Imagination of Forrest Gump1653 Words   |  7 PagesThe Sociological Imagination of Forrest Gump OR The Sociological Imagination Concept As Illustrated by the Movie, Forrest Gump What is sociological imagination? Our textbook describes sociological imagination as the ability to see our private experiences, personal difficulties, and achievements as, in part, a reflection of the structural arrangements of society and the times in which we live. The movie entitled Forrest Gump is a great example of sociological imagination. In this paper, I willRead MoreForrest Gump Movie: An Analysis1719 Words   |  7 Pagesï » ¿Forrest Gump Movie: An Analysis Forrest Gump (film 1994), is an American romantic comedy-drama film directed by Robert Zemeckis, narrated and starred by Tom Hanks. The story revolved around a slow-witted but exceptionally gifted person, Forrest Gump, who happened to have participated to the many significant events that occurred in the later period of the 20th century, from 1945 to 1982. The plot started in a bus stop where Forrest Gump shared his life story with strangers who sat beside himRead MoreHippies : The American Hippies1787 Words   |  8 Pagesdescribing on how they were feeling. They loved going to the concerts where they could be them-selves and be open on how they wanted to dance and sing. The hippies started their own beliefs and culture practices. Michael Brake wrote the book The Sociology of the Youth Culture and Youth Subculture, and in the book, he was telling the side of a hippy. Young teens were labeled in different ways, and criticized by elderly or older ones (Brake, pg.1-25). Hippies felt i t was a social problem with the world

Analysis Of Homer s The Iliad - 997 Words

It could arguably be said that humankind’s most powerful emotion is love. Many have profited on this idea through the creation of much of the movie industry and other forms of media. Characters are set up in a way such that the audience must believe at least one party loves another. How they act on behalf of this love is perhaps a testimony to the strength of their love and heroic status. Taking this structure at face value, in Homer’s The Iliad, Hector shows the most modern form of heroism in Book Six. He chooses to fight rather than see his loved wife fall to the Achaeans, while others throughout the story view their women as prizes and choose to fight- or not- based on very different values; namely, the cultural norm of fighting to the death to gain eternal glory. This sets Hector apart from the men of his time, for although he is a famous warrior of the Trojan army, his reasons for fighting span across multiple values, giving him an oxymoronic character of a gentle lover yet fierce warrior, a hero for all cultures. Readers just finished a long chapter focusing on Diomedes and his brave fight, injuring two gods and killing many Trojans in Book Five. This creates a great contrast for a more emotion-ridden Book Six, where Hector returns to Troy with the mission of getting the women of the city to appease the gods, afterwards making sure to find his wife and young son. Already there is a distinction between him and other heroes, simply in his ability to have anShow MoreRelatedAnalysis Of Homer s The Iliad Essay1231 Words   |  5 Pagesthe Iliad is a tale of war and aggression (Puchner 183). Written in the 8th century, it remains relevant to society today. The basis of the Iliad, warfare, brings with it portrayals of death, grief, and the real problem with humankind: we are not peaceful beings. In a war-ridden world, these topics remain pertinent to society. These terrors of war showcased in the Iliad generate an anti-war message. With this said, Homer creates a timeless lesson against war with his work. While the Iliad has beenRead MoreAnalysis Of The Homer s The Iliad Essay1010 Words   |  5 PagesPoor leadership is devastating in The Iliad.. Homer recognizes this, making a particular effort to demonstrate what traits constitute effective leadership. It is crucial, therefore, to determine exactly how Homer presents this idea in order to gain a coherent understanding of his beliefs. With Homer’s convictions in mind, the individual gifts of these war leaders shine rather brightly. One can then begin to analyze them, deciding for oneself who fits Homer’s ideas the best. Assuredly, each of theRead MoreAnalysis Of Homer s The Iliad 1310 Words   |  6 Pagesunity in his tale. Homer was a writer who performed this feat throughout the entirety of the Iliad and showed his unique ability to weave a tale full of similes that both enhanced and unified his story. Although Homer used a variety of subjects in his similes, and many of them had a common thread. Homerâ€℠¢s unique ability was to create a tale so descriptive that the listener was able to fully immerse him or herself into the story. His usage of similes magnified this ability. Homer focused on the commonRead MoreAnalysis Of Homer s The Iliad887 Words   |  4 PagesIn Homer’s the Iliad there are two types of culture which are shame and honor. The Greeks rank great significance on personal honor. Why is that? The reason being is that to them honor means the ability to fight and be triumphant on the battle field. There are many ways honor is obtained to the Greeks, another way to prove your honor is to reveal athletic abilities. Meanwhile, the shame culture has a different concept to the Greeks. Shame meant to have good morals towards others and it is a moreRead MoreAnalysis Of Homer s The Iliad866 Words   |  4 PagesIn Homer’s The Iliad, women can often be overshadowed by the strong male warriors that dominate the epic poem. However, many women in The Iliad are cent ral to the plot; without these women the poem would have a drastically different story. The influence of women in The Iliad varies from woman to woman, usually having some effect on the plot, but the extent of their involvement is typically dependent on their status in society. However, even when a woman is in a position of great power, she is stillRead MoreAnalysis Of Homer s Iliad 1382 Words   |  6 PagesRyan Doerhoff History of Greece Dr. Kirkland September 5, 2014 Document Analysis The primary documents that will be focused on in this analysis come from Homer’s Iliad. Homer is venerated today as the greatest of Greek epic poets, as his works had a colossal impact on the history of literature. Through his epics, Homer brings us first hand into the culture of the Greek world in the eighth century B.C. It is important to note that at this time very few had the privilege of an education, and lackedRead MoreAnalysis Of Homer s The Iliad 1177 Words   |  5 Pagesto the powerful, hardheaded fighters that generally appear in The Iliad. His purpose in The Iliad is to demonstrate, through tact and strategic ability, that strength and brawn isn’t all that compose a hero. Odysseus, the great tactician, isn’t known as the brawn, but the brain of the Achaian army. When compared with Menelaos, â€Å"Menelaos was bigger by his broad shoulders, but Odysseus was the more lordly† (III, 210). Here, Homer is intentionally lessening Odysseus’ physical prowess to uphold hisRead MoreAnalysis Of Homer s The Iliad Essay1692 Words   |  7 PagesA major theme seen in Homer’s The Iliad is one of war and the politics that play a role in it. A key part of politics is the interactions that take place between people when determining policies and courses of action. The focus of this paper will be on the interactions between the Greek leaders and the army in the opening of book 2. There will be a section where I will analyze these interactions and provide evidence showing what degree I believe the Greek leaders care about their army. The way thatRead MoreAnalysis Of Homer s The Iliad993 Words   |  4 Pages In Homer’s The Iliad, we learn that the mother and father relationships within the family is very important, but we don’t want to overlook the brothers. For instance, in the Greek and Trojan families, it was one way to bring everyone together. The brotherhood of Agamemnon and Menelaus, and Hector and Paris illustrates their devotion. Book Six of The Iliad comprehends several illustrations of how honor strengthens the bond between both brother’s Agamemnon and Menelaus and Hector and Paris. GloryRead MoreAnalysis Of Homer s The Iliad1040 Words   |  5 Pagesthe generation of leaves, so is that of humanity. The wind scatters the leaves on the ground, but the live timber burgeons with leaves again in the season of spring returning. So one generation of men will grow while another dies† (6.146-50) Homer in the Iliad tells of generation after generation fighting to bring glory and honor to not only themselves, but their families. Generations are connected by men who have fought before and men who have yet to fight. Diomedes, after being asked of his lineage

Gender Portrayal Of Gender Roles - 953 Words

Introduction According to the United States Department of Labor, 69.7% of men compared to 57.2% of women were participating in the U.S. paid labor force in the year 2013 (U.S. Department of Labor, 2013). But despite this near equality in the rates of participation in the work force, men and women continue to be depicted in very distinct gender roles throughout the mainstream media (Eisend, 2010; Lull, Hanson, Marx, 1977; Collins, 2011). This gender stereotyping effect is especially prevalent within advertising. Because advertisements in the media frequently rely on gender roles to promote products and services (Eisend, 2010), research examining the effects of gender portrayals in advertising has become increasingly important in the social and behavioral sciences. Of particular significance to marketing professionals is the influence of gender stereotyping on perceived advertising effectiveness. Understanding how consumers respond to the gender roles depicted within advertising can ultimately lead to the adoption or revision of various marketing strategies. For example, research supports that men and women view products that are congruent with their own gender as more desirable (Eisend, 2010; Wolin, 2003). Male and female audiences, at times, will also respond positively to a stereotypical gendered image and have internal reinforcement of social gender norms (Bussey Bandura, 1999; Lafky, 1996). Applying these strategies within a practical setting in order to increaseShow MoreRelatedThe Portrayal Of Gender Roles1489 Words   |  6 Pages The Portrayal of Gender Roles in Disney Film Cinderella Min Ho Song, Shenice King, Kyler Ethier, Shebike Lovell Michelle Pompeo Humber College: Lakeshore Campus Wednesday November 11th, 2015 ABSTRACT: Change is almost inevitable in society. The framework behind the roles people play in society are widespread and have evolved throughout the years. Movies’ are no different, and depending on the millennium, the means of gender portrayal has prevailed! In the Disney filmRead MoreStereotypical Portrayal Of Gender Roles1841 Words   |  8 Pages Stereotypical Gender Roles Gender roles are norms that are expected from men and women. These norms were mainly established after World War II, late 1940s to mid-1950s, when all the men returned from the war and resumed working the jobs they had left in order to join the army and the majority of the women became home care providers, while some started working jobs, such as teachers, secretaries etc†¦. Today, although this is a different era, people are still fixated on the norms that emerged throughRead MorePortrayal Of Female Empowerment And Gender Roles Essay1894 Words   |  8 Pagescomponent, and having authority over others is critical in legitimizing that power. Women consistently lack agency and power, especially in political spheres. Fantastical worlds, like HBO’s television series Game of Thrones (GoT), portray women in roles of empowerment, but their power is contingent on men and on their own sexuality. Despite gaining positions in political power, women only attain that power or can on ly use that power in the realm of men and masculinity. This essay argues that womenRead MoreGender Role Portrayal And The Disney Princesses Essay1656 Words   |  7 Pagesstory lines and characters are setting up gender roles for children, essentially educating them on what society deems appropriate for their gender. Many of their movies often portray some stereotypical representation of gender, consistently depicting the heroine as the victim who needs help saving, playing the typical damsel in distress. For many years, the Disney Corporation has created a gold-mined with their princesses franchise by relying on gender stereotypes for many of their female heroinesRead MoreGender Roles And Socialization : Family Structure Portrayal And Parent Child Interactions2297 Words   |  10 Pagesand a lot differences between them. However, one thing most certainly remained the same: the love they had for one another. While watching a healthy dose of both shows, there are some diffe rences between them in regards to gender roles and socialization, family structure portrayal and parent-child interactions across the board. In The Adventures of Ozzie and Harriet, the audience was introduced to a new nuclear family. This seemed like the new norm as some would call it ideal because there was an evidentRead MoreAdvertising Advertisements And Body Image1645 Words   |  7 Pagespositively and responsibly in advertising. History - WOMEN IN ADVERTISEMENTS AND BODY IMAGE Authors have also attempted to correlate various demographic variables such as age and education, as well as geographic variables with preferences for role portrayals in advertising. Through the ages men have been considered to be financial providers, career-focused, assertive and independent, whereas women have been shown as low-position workers, loving wives and mothers, responsible for raising children andRead MoreGender Portrayal Of The Media813 Words   |  4 PagesGender Portrayal in Media Media; â€Å"The main means of mass communication (broadcasting, publishing, and the Internet) regarded collectively† Oxford dictionary. In recent years a rising issue of media gender portrayal has been massively looked at from a sociological perspective. Everything and every picture has been depicted in this primarily visual age. There’s a giant number of visual information going through our conscious and subconscious daily at a fast pace. A lot of different point of viewsRead MoreEssay on How Do Gender Roles Get Portrayed in Disney Films?702 Words   |  3 PagesIntroduction A. Definition of Gender Roles A gender role consists of characteristics that refer to a set of social and behavioral norms that are widely considered appropriate for either males or females. Gender roles are different throughout society and cultures. One gains gender roles unconsciously, consciously, or genetically due to cultural rules (Princeton). B. How film characters are seen by the audience Many people view women as weak in hopeless and males as strong and heroic in films. MaleRead MoreWhy And How Gender Stereotypes1654 Words   |  7 PagesWhy and How Gender Stereotypes in Advertisements are Challenged Traditional gender roles were constructed based on devotion to cultural value as well as social construct based geographical placement. Males were usually associated and expected to express masculinity while females on the other hand had to express femininity (Ickes). The gender roles have been preserved for too long and it has become almost like a permanent component of a society—like a body part itself, rather than a constructed normsRead MoreVisual images Reinforce Traditional Gender and Sexuality Stereotypes948 Words   |  4 Pagesreinforce traditional gender and sexuality stereotypes through the manifestation of the masculine and feminine miens. An examination of print media advertisements highlights the social and cultural ideologies associated with traditional gender roles that are expected and imposed on by society. â€Å"Advertisements are deeply woven into the fabric of Western Culture, drawing on and reinforcing commonly held perceptions and beliefs† of gender and sexuality stereotypes. They have a strong role in shaping society

Design Thinking Tool Kit for Managers

Question: Discuss about theDesign Thinkingfor Tool Kit for Managers. Answer: Introduction: The concept of Design thinking as opined by Jeane Liedtka and Tim Ogilvie is a new concept that deal with new perspectives of genesis of means of problem solutions. In a crux it can be said that this tool kit for managers are encouraging the mangers to be innovative in their thinking process when they are trying to bring about improvement in their operational processes so that better productivity can be obtained. In other words thinking out of the box is the central idea that drives the concept of Design thinking(Liedtka Ogilvie, 2016). Description: Self Evaluation: I am working as the manager HR and training of a security services company. As a company we are providing guarding services to our clients. These clients can be any residential complexes, schools and colleges, hotels restaurants or even construction sites. We also have a large number of corporate clients. Hence the nature of the services that we provide and the genre of the industries we deal with happen to be quite diverse and wide stretched. As a natural consequence our security guards must be able to deliver various types of services and has to be trained to deliver various types of examination for the best security of our clients. In the process these guards must also be trained to handle various situations and also deal with various types of machines and other related things. One of the most potent problems that we as a company dealt with was to first find the right quality of guards and second was to retain them for a longer time. As the HR manager of the company existing problems of all departments happens to be a close concern of mine and my teams as well. In my company the HR department is more of a strategic partner to the managements program of diversification and growth of the entire company in the coming future. However just like most of the other industries this industry of security guarding also has its own set of predetermined pitfalls. These are the problems and the challenges that we are all acquainted with and we try to solve them in the same tried and tested manner. However it is needless to say that most of the times the solutions that were received were very temporary just covering the problem for the time being but finding no real long term solution o the crisis. It is in such a situation that I came upon this new idea of trying something that has never been thought of in this context and hence is slightly abstract. This was a new way of looking at the whole problem, that clearly gave me and also later my colleagues some very different, also odd to some, ideas that gave very different but refreshing solutions to the problem in hand. The very attitude of trying a new mean or a new method of solving the problem (in our case which was to find the right kind of people and also retain them for a long time), gave a new freshness to the entire project which was seriously no longer a problem. In fact one of the very potent things that I did learn while I had been involved in the exercise was that one of the best ways to lead a team as a manager is to imbibe a new hope amongst the team members that acts as a great boost for their motivation, morale and also confidence to attain something that did seem difficult so far. One of the best ways to motivate as a manger is to make them see that there is no benefit in doing the same thing over and over again that did not give any results. Instead we should try something that has not been tried and tested and is absolutely novel. Probabilities are there that there shall be a number of changes in the plan as we go along since no plan in its blue print stage is error free, yet a new way to solve the problem can take of the frustration that do creeps into a team after it has faced multiple failures trying to solve a problem in a particular defined way. Instead of recruiting experienced guards and security employees with the other companies and then training and retaining them, we now thought of making our own guards out of complete fresher candidates. A New Practice Implemented: As mentioned in the very beginning of the discussion, I am working with a security guarding company as the Manager HR and Training. This is a profile that is responsible for not just managing the employees of the company but also the guards who are deployed at our client sites. Quintessentially I also had an idea and an in depth one at that of all the challenges that the operations manager faced due to the quality of the services of the guards at pout client sites. Some of the persisting problems of the operations department were that the turnover rates of our security guards were quite high, as a result of which recruitment was an ongoing process. In the beginning it would be right to say that the initial attitude of the company management and also the operations team was such that we should be recruiting experienced guards who are currently working with other guarding companies. This way we can get experienced profiles that know the trade and are well trained. Soon after recruitmen t they did receive a basic training from us pertaining to the various machines and tools that they need to use and handle at the client site. From time to time they also received their regular training courses. Yet the basic problem that we had to face was that we often did not get the right number of guards that we required, again training the experienced guards often goy difficult as there was an attitude problem and also the guards did change their jobs very fast. Initially we tried to tackle the situation by intensifying our recruitment processes and also make lucrative offers for the existing guards. Hence our problem solution tool was double edged where on one hand we tried to increase our gamut of employees on the other hand we tried to retain them with good career offers. However lucrative offers of a company can often be superseded by other players of the industry. This was the same that happened with us. Slowly we realized that getting the right kind of guards was becoming an increased problem for us. Although we did try various means such as recruitment agencies, newspaper advertisements and also wide scale referencing yet with time the entire problem intensified. In fact the situation further transgressed where even the clients stated having issued with the kind of services we and our guards rendered to them. It was in such a situation that I had a detailed discussion with the operation managers of the company. All the three operations managers and also our marketing head agreed to the point that the major problem with us was that we did not have a good recruitment backing system that can give us guards for proper and timely deployment. It is at this junction that the recruitment officer clearly expressed his frustration at the point that the numbers of ready guards were seriously limited. Hence the first stage of bringing about a change was accomplished with the fact that the actual nature of the problem was clearly decided if the company was adamant of recruiting only experienced security guards then our problems are to get worsened with time. With this we next moved to the second stage, is when the various members of the discussion came up with different solutions. Quintessentially it needs to be said that when such sessions of brainstorming are in progress a huge many number of ideas and options do surface that sounds seriously abstract and odd propositions. Out of all this we received the option from the training asst manager of my team, that the company must open its own wing of security training services that can provide training to even the most laymen so that they can be transformed into professional security forces that can be deployed even at the most challenging positions. This clearly brought us to the third stage or phase of bringing about a potential change in the whole operational system of the company. This new idea of developing our own training wing for security services did slowly make its impact on the rest of the members of the discussion forum, including myself. Others started putting their inputs into the original idea. As the Manager HR and Training I had a huge responsibility on my shoulders with the advent of this new project. The first step being that the idea had to be brought in front of the management by me. Prior to this a detailed planning regarding the implementation of plan had to be done. In this I took a partial help of the operations managers of the company. The basic idea that I wanted to bring about was that moving away from the regular routine course of recruiting experienced guards for our client services we could start a cell that could make security guards out of fresh candidates and laymen. This shall be a process where the control of the whole events shall be much more in our control. The fresh candidates who were to be trained could be given an opening with our client sites. These candidates since shall be at the beginning of their careers would be much easier to train and would be built as per our requirements. The chances were also high that out of a certain gratitude and loyalty that could plan their careers longer with the company. This could be a process that could bring benefit for both the employees and also the organization as a whole. This was a new concept, a completely fresh and untried one, that did require certain basic infrastructure elements such as training faculty, operations team that can attract candidates for the attending the training classes and courses, marketing of the services of the new wing, designing of certificates, affiliation with authorities relevant t the field etc. However the first step was to start the basic setup so that we could start with the process of making our own security guards. The first task of attracting the right number of candidates to attend the classes and the courses were arranged by recruitment teams who released newspaper advertisements talking about the services and the guaranteed jobs with our company. The training part was handled by experienced operations managers and assistant managers. These were the people who did have a firsthand knowledge of the trade and the tricks that were required to master the work or the profiles completely. In addition trainers from the HR department were also appointed who could help the security guards attain soft skills as they often had to deal with common but respectable people of the residential and the corporate areas. Conclusion: A process that started as a mere backup plan for supporting the operations system and network of the company did eventually grow into a full fledged business wing of the company. This new wing although did have a few setbacks in the initial days and it did face a good many number of challenges, yet we overcame all of them with the sole attitude of trying all new set of ideas as solutions to our problems. This new step soon tided over our problem of finding the right number of guards for timely deployment. These new guards since were with us from the beginning of their employees they could be build to the desired level. On a final note the satisfaction of initiating something new and bringing it to a successful completion gave a great boost to the operations team and also the company as a whole. The very working culture of the company did undergo a new change and the general workforces were more open to innovation than just following practiced dogmas. Reference: Liedtka, e., Ogilvie, T. (2016, September 17). Designing for Growth: A Design Thinking Toolkit for Managers. Retrieved October 16, 2016, from avuzoghogahy: https://avuzoghogahy.unblog.fr/2016/09/18/designing-for-growth-a-design-thinking-toolkit-for-managers-columbia-business-school-publishing-download/