Scribd
Upload
70 views

Cryptography and Network Security Overview & Chapter 1

This document provides an overview and outline of Chapter 0 and Chapter 1 from the textbook "Cryptography and Network Security" by William Stallings. It discusses key concepts like confidentiality, integrity, availability, security attacks, services, and mechanisms. Standards organizations that develop related standards are also mentioned. The document outlines the topics that will be covered in Chapter 1, including security concepts, the OSI security architecture, computer security challenges, aspects of security, and models for providing network and access security.

Uploaded by

chaitucvs
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
70 views

Cryptography and Network Security Overview & Chapter 1

This document provides an overview and outline of Chapter 0 and Chapter 1 from the textbook "Cryptography and Network Security" by William Stallings. It discusses key concepts like confidentiality, integrity, availability, security attacks, services, and mechanisms. Standards organizations that develop related standards are also mentioned. The document outlines the topics that will be covered in Chapter 1, including security concepts, the OSI security architecture, computer security challenges, aspects of security, and models for providing network and access security.

Uploaded by

chaitucvs
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 7

Chapter 0 Readers Guide

Cryptography and
Network Security The art of war teaches us to rely not on the
Overview & Chapter 1 likelihood of the enemy's not coming, but
on our own readiness to receive him; not
on the chance of his not attacking, but
Fifth Edition rather on the fact that we have made our
by William Stallings position unassailable.
Lecture slides by Lawrie Brown The Art of War, Sun Tzu
(with edits by RHB)

Roadmap Standards Organizations


Cryptographic algorithms National Institute of Standards &
symmetric ciphers Technology (NIST)
asymmetric encryption Internet Society (ISOC)
hash functions International Telecommunication Union
Mutual Trust Telecommunication Standardization
Network Security Sector (ITU-T)
Computer Security International Organization for
Standardization (ISO)
Chapter 1 Introduction Outline
We will look at:
The combination of space, time, and topic roadmap & standards organizations
strength that must be considered as the security concepts:
basic elements of this theory of defense confidentiality, integrity, availability
makes this a fairly complicated matter.
X.800 security architecture
Consequently, it is not easy to find a fixed
point of departure.. security attacks, services, mechanisms
On War, Carl Von Clausewitz models for network (access) security

Computer Security Typical malware characteristics


the protection afforded to an automated rootkits, botnets, etc.
information system in order to attain the viruses, worms, etc.
applicable objectives of preserving the ransomware
integrity, availability and confidentiality of
malware design/configuration tools
information system resources (includes
hardware, software, firmware, 20,000 novel signatures per day
information/data, and telecommunications) 2 million signatures seen per day
etc.
Key Security Concepts Levels of Impact
can define 3 levels of impact from a
security breach
Low
Moderate
High

Examples of Security
Computer Security Challenges
Requirements
confidentiality student grades 1. not simple
2. must consider potential attacks
integrity patient information 3. procedures used counter-intuitive
availability authentication service 4. involve algorithms and secret info
5. must decide where to deploy mechanisms
6. battle of wits between attacker / admin
7. not perceived of benefit until fails
8. requires regular monitoring
9. too often an after-thought
10. regarded as impediment to using system
OSI Security Architecture Aspects of Security
ITU-T X.800 Security Architecture for OSI consider 3 aspects of information security:
defines a systematic way of defining and security attack
providing security requirements security mechanism
security service
for us it provides a useful, if abstract,
overview of concepts we will study note terms
threat a potential for violation of security
attack an assault on system security, a
deliberate attempt to evade security services

Passive Attacks
Active Attacks

Security Service
enhance security of data processing systems
and information transfers of an organization
intended to counter security attacks
using one or more security mechanisms
often replicates functions normally associated
with physical documents
which, for example, have signatures, dates; need
protection from disclosure, tampering, or
destruction; be notarized or witnessed; be
recorded or licensed
Security Services Security Services (X.800)
Authentication - assurance that communicating
X.800: entity is the one claimed
a service provided by a protocol layer of have both peer-
peer-entity & data origin authentication
communicating open systems, which ensures Access Control - prevention of the
adequate security of the systems or of data unauthorized use of a resource
transfers Data Confidentiality - protection of data from
unauthorized disclosure
RFC 2828: Data Integrity - assurance that data received is
a processing or communication service as sent by an authorized entity
provided by a system to give a specific kind of Non-Repudiation - protection against denial by
protection to system resources one of the parties in a communication
Availability - resource accessible/usable

Security Mechanism Security Mechanisms (X.800)


feature designed to detect, prevent, or specific security mechanisms:
recover from a security attack encipherment, digital signatures, access
no single mechanism that will support all controls, data integrity, authentication
services required exchange, traffic padding, routing control,
notarization
however one particular element underlies
many of the security mechanisms in use: pervasive security mechanisms:
cryptographic techniques trusted functionality, security labels, event
hence our focus on this topic detection, security audit trails, security
recovery
Model for Network Security Model for Network Security
using this model requires us to:
1. design a suitable algorithm for the security
transformation
2. generate the secret information (keys) used
by the algorithm
3. develop methods to distribute and share the
secret information
4. specify a protocol enabling the principals to
use the transformation and secret
information for a security service

Model for Network Access Security Model for Network Access Security
using this model requires us to:
1. select appropriate gatekeeper functions to
identify users
2. implement security controls to ensure only
authorised users access designated
information or resources

You might also like