FTP Servers and Security - Three methods that Secure FTP Servers use

By: John Johnson

FTP (File Transfer Protocol) has been the basis for file transfer since the dawn of the internet. The truly remarkable feature about FTP was that it was operating system independent. Files could be smoothly transferred between Unix, Windows and any other operating system. The other cool feature about FTP was that a simple validation mechanism consisting of a username and a password could be used to limit access to files. However, the actual data itself was transferred unencrypted and it was easy to intercept and listen in on an FTP connection.

The internet itself had very little security built into it. Consisting of many smaller independent networks that stretched across the globe, the path that a data packet took to get from point A to point B was unpredictable. With the popularity of the internet, it became essential to be able to transmit many types of critical data with some amount of security. Netscape Communications solved the security problem on the internet by developing the Secure Sockets Layer Protocol (SSL) which used public key cryptography to encrypt data transmitted over the internet. This is still the widely accepted security mechanism and is implemented by all web browsers.

FTPS Secure File Transfer
Modifications to the FTP protocol were made to incorporate the use of SSL for encrypting file transfers over the internet. The modified mechanism is referred to as FTPS. In order to maintain backwards compatibility with the original file transfer protocol, an FTPS connection could either be explicit, where the connection between the client connection and the server starts out as regular FTP and then negotiates a secure connection, or implicit where the connection starts out being encrypted.

HTTPS Secure File Transfer
Since a web browser is already capable of public key cryptography, simple downloads and uploads can be performed directly through a web browser using the HTTPS protocol. This means that special FTP Client software is not required.

SFTP Secure File Transfer
The Secure Shell protocol also known as SSH was developed by Tatu Ylonen to enable secure access to remote shells using public key cryptography and replace Telnet and other non secure shells. This protocol has since evolved to also support a file transfer mechanism known as SFTP. The main advantage of this mechanism is that it did not require the opening of an additional data channel connection for transferring files.

All of these three methods of secure file transfer are based on public key cryptography and all of them are equally capable of securing the transfer of critical files across the internet. The only drawback of these methods is that there is a data overhead associated with encrypting files. There is also a performance overhead associated with encrypting the files at the source and decrypting them at the destination. Because of this, system administrators sometimes use regular FTP for file transfers within a secured internal network. However, for transferring files over the internet, this is a small price to pay in exchange for the guarantee that sensitive files reach their destination without being intercepted or tampered with.

Article Source: http://www.newarticledaily.com

Okay, you now know about the three types of secure ftp servers. If you are looking for a secure FTP server to run on your windows system that can support all three secure file transfer mechanisms, be sure to visit www.sysax.com/ and download Sysax FTP Server

Please Rate this Article

Not yet Rated

Click the XML Icon Above to Receive Security Articles Via RSS!

Additional Articles From - Home | Computers | Security

Know Everything about Information Security - By : Mandira Kumar
Protecting Your Website - By : XdaggerX
Former First Lady Senator Hilliary Clinton Becomes An Aim of Malware Swindle - By : Isaiah Henry
The Secret Account On Spyware And Other Malware Removal Web Places - By : Isaiah Henry
IPS Servers Give Parents Control With Computer Activities - By : Terry Detty
Case Study: Self-Service Password Management at University of California, San Francisco - By : NetWrix Corporation
Spyware Doctor New Version - By : Handsome
Is the Internet Targeting Your Computer with Bots? - By : Terry Detty
Email -10 helpful Email Tips - By : Kamal Kaushal
Internet Hacking Raises Many Security Issues - By : Terry Detty

	Print This Article
	Post Comment
	Add To Favorites
	Email to Friends
	Ezine Ready

New Stuff
About Us
Link to Us
Contact Us
Privacy Policy
Terms of Service