Scribd
Upload
44 views29 pages

NIS (Network and Information Security) Unit5

NIS

Uploaded by

rupeshmore5671
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF or read online on Scribd
44 views29 pages

NIS (Network and Information Security) Unit5

NIS

Uploaded by

rupeshmore5671
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF or read online on Scribd
You are on page 1/ 29
UneNOn oe ) qedwork Sadurtdy's Apbei tows G shondards Kerberos + Kerbe ra: ic pele Sodesned Te cy Insecure rotocala feéd ay Ibe " 2 courthy, : any aloce) ewhich exe Cieated by “sotufon Jo dese. profocel enses = he raphy Se That q chien Cn prove ao asenver Cancl vice vers . Server Networle Connechon , =-4fks_aclent and sever hee used Kerberos Fo_ prove cthetr 7 also encry pe atl of their ~~ Qromunicat lassuce Privacy and deta _Snregaty as the [de_ahous “Aheir business, i ? a they can ne de log’in process ie 5 Aline renee aunty See ems — Ttket Franting See oO ponsit ve fckefs fo cent ihe. 4 7 ‘ “ ft LOBE, ofker__Quthenticabon.. o : Kec Chey plahtbation center) “ss 4 rivica Server ( ) fee Ta perewtd - Suvices de clleots Ihe neteewib punter, Te shaving or tpl flen pocegrarn ®, \eleriting ® — eneryphs the dada collar Syne bi key, ypymebic key faa Tups of aatbenbeathion rcthere both ye ehenb and server Gqree up gle enery plies decryplion Fey gle “eneryplton fdecryy 4) Hon. fo on dhe uae ofa _ for cata frees 2 tel hen using encryphion key y He efeils cre Achially sent doa key M%spibution Centar Che! yather than Sending dhe cetettls clirectly each Y —the Acdhentication Service Cas) rece ay es the seq from The chen and then AS yenrtes phar. CNient- is ind eds aa z —_— = =Thfs *s_by jus} Joon 9 a Bjabase Si nto Q Stmple daibase of the cee “a =ipble o* a, 2 Abie venfitalion a timestamp 5 created vy the Gurvent Hme. fina wer Session 2xpiration date . — —the defawit expirotion date iS B hours for NS Explain Laerking with Kerberos etth lareted sMlagrar t. : Jen Feet po sestth on hire stamp. then, he encrypfion key fs Crealed , 5 The timestamp fells Ahab, after B hours , the 2ncrypHon Key fs useless (“ph?s 95 helpful focheck 7 h _ thar a_hacker doesn't Sntercept the daba sand tex) fo crack the Key _ — All keys -are possible to ctacked 4 buf Phevill take a lot longer than gs hous 40do $0) eke Graniingtrckeh CIty war ; + TJ imestampr 6 hous 3 are) A ¥ = wad t Aull antiiahion Service CAS] t lent 1 | . Bei Now, Phe Key fs sent back fe the _cliehk th the [wastmpie Heket ahich 2s Ysswect “by =the Pow of papel tanning ~Trekek Gr@t) . xh ts Authenhicafion Service CAS) and usec) for "ng i Ferre reference . authenticah’ ng fhe Chent For : , aso therl the ~HEket Crear) flere, Tes creates In dimestomp’ and ae ase he CNeok. 3 - hen the Clent—_deceypls ithe Heket 5 fabmate. _) the ~Tesdhet Tt has dene, aiid\sends E — a eee al key’ ta the “seivleels server . _CBs) oF -2pel Roahion . Z : Server C= cleryplt Mie pes lhe weltily of Ihe F E ; g | art dhe serv! u pad jeVVICe GerVe Contacts the. key. key bw fon Center Gane ao which 86 :sehernead. fo hoa chen. To teceive’ @ session- abieh nipoted —aieenk dhen cleerypls He ticks BY the Ghent Men Seer = Fiche a Phe Tare Sta valfol_-Hhen Fhe prpmanrapan * Dekweon Citeot and se Lapplicahen , = Clten} ancl deans legin | Fnferme: ts authenticated anti] the —6e.ss100 “Gxpl (a Overvi kde coe dats 1 ras plars tome orm ow eve Pp packels P by Je VSQe" coin change The ee IP ~Securthy = - =the =Pi -Pack “Pac: mechs agi oF! aa the nekeork, monte n'ng nekeoork. P| sHattle py fo secure cond uger to TO od yy, ‘Harvie Using aulhenticahion GF -ery phy, - Mechanar, Wis a Pee Tea profece] eohtch gc cleveloped { ous Suppor} secure exchange OF packels ot th STP layer. tt! provides the secure Gommuntcabions a actoss a LnNs 1 private “A Public. Meine A, —— ohhe Anlerne| TTransmieson _Mealta TTg Tpsee fotep InP. Prolocol: oe x Med ea: Sear spore Dervis # _ aE athe or are. ve me > rmelhiods hth ice eveu. ot SR : Pis_ent Is only the dake portion date a portion of of 2UF Chabling “Gn ler bo sind dest crddresse! thus = payload a Re -Cneryp _rssH [Eps ry pratettion fe the €n fires: © > Tunnelling t— ae _ —Tunnel_mode_gprovides~ —rp_packel - ae tote _ c—this previdles encryption of source as well AS “oF the~ and destina data ifselh, fon =P addresses < \ evansporh Transport fe ana eer layer [os by Paylead - ge ene YY | ] Greanspe seemed) trend & mmadt Chen | eae Qa ihe Ba Reoay comme cols— 4H ae ESP... "ot aN =p ec! anstal, of ace “powtiene as = ty tp Header Lay Actual Data - a othe IPsec | ate sealer a = Seely TLPsce | Offers lace main Fst thentication » ney as eae =p. exlension heade one ee Br author , ae and nether —headér ss Sofie Ciealiolity = Psec Gasisle or Besing Heo mein Prokes een, Ve fe oe: ers. Secusty pevimeter ‘Brdex ser) Sequence Number AETHER AKEH Dacha Cvariabied 4 the AN heacler $s ae Gnserkee] E bekveen tp hoo. eae “and belween* ‘any subsequent Qackes - Cnkents, Seo Both AH ¢ @n dork $n Tes modes transport ‘ode. and “funriel = made: wn A2_-AH “hang rt _Mocle -— De Here, the Authentication deader Cau) 1 Hood * Fn belaxen the Orginal) tp heocler and the Original Te - Peaster of the xp _Packeh ite S>_AH fumed nedes — : staat . | _= Tn funnel _mece_, Cmplete origina! tp packer is" authenticated anct phe: AW % placed _bekween the Original pp Header and: -slece Culer tp Heode. : — she Ynoee Pp header has the ffhal source” and destination 2p address, p)hereas’ -the Culertp ~ —heacler,_ may contain clteerent- zP_adllress i oP aga Sakae ae : Header, re a ie 1 ESefere: areeieg a — 9 Hoes ceo se pei CHP 4a ann SE sp neues ‘security Services fer level Protece portion of athe eckek gt. le ae profocot pets ‘data Giieeataity —~ hey athe Esp. ,piokocol ais dleFines. drew header 42 i Gnserted ‘nto the xP Packed: iz ToS ESp. processing: also « Pnctides. thetransier, 5 Cf +he protected. data: tote .an unreadable < i _fem. oe ee : te 7 mami Uk 4 one) €&p- Gn be uals Bs or Gn Hon: -clependling 0n wes level ‘and Got oF Seourity ofesired i = Both (dork % the fronsperk ancl fam r Eo — 08. Este Probes a ve! Gp Ga forork 4 ih, fee. ae 5 dee med ar, ’ chunne| Rpodes se i t Poa of % Exp Feonspeeh rode " sa are fo ' a mucte a used do encrypt rE “dala Cur by tp. fit — at wal be ide “opera aitharhae Cen ba Esp _ Bt placed: §nfo the xp Packek Framecfiage, cue the drensport layer header Crepand opi 2 tesplodrnil iler is scadded apkr The rp Packey easel ‘TCP a ae Header [Heccler] _Esp Hione] toode (ode 2— > - = rae __cPE encrypis an Fan oat ay ~ Here, Pha i E=p_heacler fs prefixed te the Packe# and then th, Packet along with the Esp tratler %s encrypkd, —xzP_header Gntains the: *clestination odedress as wulas Ynlermediate tout'n formahon , = ee this pocket Cannot’ be “fransm*bled aS Tf: 2s: - Otherw%se —, the soheltvety of the pace} fio | _eooutel Be Pmpossibie aw wa “x eail 3 Security §— Veale at mee qectrontc: Marl (CEmatl ? 5, the coriclely cseol application on the Gnternef. Using Email ,user {| Cave send a text messages , pictures , videos | sounds vate te” oles fokermep users 3 : ® Biaiing a dare “Fhe Boma Email acy techniques Creo) a 0 SHTP stop wail 7 Transfer “sesfseat) “2 | PENIS -(prudey Enhanceo] weet jut = PoP wk pretty Groce: privacy) Y. smre_ (Simple wma arrasler prolecaET Pust ceiver re yer's: ' SPITP Server én: SMaTp Senver “Fig Ginell lng sere Prowl Fr * Advantages ?— j > eis very Pepular nekvorts Service. 2s _Smrp Supports on many platforms . : onnection Sekup is ——_ : “SS An "garp senckr all offemph te set OG STEP Connection witha target host wh —____%t has one or more mai) “message +e cde} = +o that host. 2 (At, Ccurs” daning Q@onechos c ay che Sender.opens-o. TCP Connechions with Fhe pec by Gnee the Qnnection fe established whey “thes sénder -Pdenhifles 48C caith- eee ___Cormmand » : HO _ dy the receiver accepis the Senders ~tolenfiri - oss OK 8 oe VEN aa peta EL _ GE the mail” Semfeeion thes ‘Destinah ——awliebie, The detinatin here ona _Senice Not lable" reply %n skep 2 and4 ahd = 3 ithe teceir the flelo x Disad vantages ly Secur raters for siarP Are worse, Se - 2> Ths Usefulness 29 Nevited by ib _cieplichey — = ay A nb Gmmancl Tenifies the; Sngnaler_of Th Mes sage - = 767 One or more Rept G@mmands rae Phe Sy pectpivnis op “Phe message , tilts i cr A__ DATA Gmmand transfer ee message text. i 3) Connectidn Term ihafion: - rete i —_cthe .smirP Sender Close the _Ganechon i In. aE flowing manner sciatis 7 a ary ~The sender sends a Qur7.- Gener @nd waiks -Fer_a reply. saTaant 3 by Sender Initiates Tcp close pero ror the _~Trp G@nnechon . or the receiver thifotes- 9p =p Fainse offer _ sending Is reply fo_the Cutt Gmmand « ae “PEM C privacy Ehhaneed raat) - 2 privacy sn ban cae Pett Chen) fs_an tn lern ek Standards: ftiot ‘provides « the- Seaure exchane 1 PEM employs {Orange oF (eorssieasaenie techn} for Cenfidenbeliky _1-Séndér_,ciuthen— ~ques to Gilow*: / Hica Hon and) message _ Gnteqn Hy. Sf = Thelimesaye integaiky akpects Ciiow the : rer dthatia wiles age —heise't been Vbransport _ from “phe sender - Quthentication- Site y— Prom the = ips aes “Iplen rei * : moet dita Beth. by eM = ry ies BE Dio DEE Spent ie ae aaa aang os iS PEM voperifions 0 hae wri ek u 12 Canonical Goversion o Migs t = aan ash Me piothed.” Stonébure: Sete vhas — —-P_Encryption ee ae eo = — oS Base os Freeing a ate = Skee = Coral Conversion - oe OF aa RE usgveie NAST “= Sthternet works on an ” Computer | O “TORI EP.’ Stack, = “Pégardiess: ef Hs “onhilechms SQ possibilit KEpiesented aly oN email S, Jcanertoal repre a biRChire. phe The omatl eeeees 49 eatin — The Created message est ps Sarnrac: fe eee 2. -Aigesd Ther eee el — Res Sendet's Diivate key fo Br Tike ats gf) Signature nS East aE eRe} Sigpakve. = fp os Tender prival@ oa ; { keys ie TT aR Creafion ofthe “senders sdigife] signa ‘ tuye Over the emai) message, Shee3!— —t=ncryption — Here onginel emai ¥ the = TO SOON scifi O4Y3 ARIA Sig nofure ave encrypted cain d symmetic key. SEmai| pessage— Jo Xyz Eeyyahoo coro From: abe @ rediff.com] suyects mechog | ot @ = i B3 5 CD Pl Eo pt Epler ResslE ~ efor this _DeS.or DE 7 : 1 algo. 1n_Cipher black cols [ep iile] Hynature _Ceec>_ms ets used + This Process thansforems arbifh te in} tales atdcler Guifpufs 2% sg nf Pa <3 — Fn this_StP,. Fe Bay top bs Processes) i a "Bleck oF & “tcke, Ler 2 Bis | 514 it, t ee Syst J i er eile a( 012 SIBEe ez sai SSS Sees Bia y ve = ©} ol sted sof Sects [Pree J evided ul ; wae prey bh Nt Faure [eb Bock - mapped be 6b Jock Fe a <9 Par Cre rethy G aged FF Piney) E rely Go od privacy % Popular - proyrare ised _to_enerypt and electyp} trail over the. Cnterned a awe =Ht-Can also be Used] "Yo se encrypted Agile) Tes gnature - because a thts Th the. leceiver Yerite he gL — Séndder's Fden hi Know thal Phe message. —~ was ‘net ichah ee Ors of. Changed during smission . % Advantages ! a . ‘ a Combination OF these. ‘feoo “encryption methods : Combines the Convenience of 7 the. publi Lneyphen | with the Speed of Cnventlonal .enenyphicl ay Using Conventional _.encryphon “s_abor Kmes = Fasker than «@ublic Key 2n Cryphion, suhich Soives tne Problem _of Slow | enery Pion aazithh —Ssyenene bi algorithms JN i oo fe 1000 Disadvantages :— : eae b ‘Using pap Can be a Complex process + gnc 4 45 oflen difficat for some people oon Ea Cyber_cr crime t— #& Introduc aden to" cyber crinne. — - = esent ag2 eof. arm Curseniis> ness Stee \} Desertbe I brief Cy ber ¢ . - 2) usk and desatbe. fs cae yb toF being PransR in Black Hal Hacker Ib [elite Hel Hacker press are ta gand gaps, impulse arho Specillee to pendehen ksfing ard os Methodologies fo. ensure flat a Cmpanys Fifen ‘Slems ore secure . : ite —These Security to fesstonals rey ora Oi nstanH £hvelving arSenay CWweagens) of Echelon, fo cHtHe hackers 7 i 2 ; joan fe | Capaker and neko re [4 2 =P hte ha hack $eq telho QHacks a secumky sykm on behal of 92 Gwners or asa hobby, 2 Seeking vyulnerob that a “malichous hacker 9 Black Hat Hocker 2_ OS Fre “manufaeburer ay Grey Hapi— MREtigee Tad beh tee oo a , ate and Bleck hase , “Soleibion mnfslea ip Sind elites fnclude Phe _praduch'én oF PolsiAec a dunferFetked Pfems. : =~ Digtter) Povey gey: G5 Pesely olkwng Aighbel Conkens Such/as picture’ Imas, alecuments -0__music__@exhaps- -for econonomic 9 in eee vy tt con y Fnvervre eenace fongeny 8 Wenn ther. ot Giber slalking or Harassmen Fin — — Cyber “Sfatking Fnyolves following a person ontine anenyrabusly—. : - phe sfalicer FI) sii Polfoe the within on_her achvity. ici bi =Shevenme of i gid_poroespapt on of sole -¢ oF ornogra phic Seen eee ae 2 ae a distibuh'or > fymoges_ of V"' videos thoy eApl ~ children, nn afailse some eases twriling 1 can | ae Sera cee tiga inexplicit \ i “Sndude fhe the_ be _ceonid ere eng g > id bP Se enue) bekavicur — ale chile pee fap sere act ) docs pot hav' ~ptcheed Pr fhe XTdennty There 6 Fraud 3 ft eat 1 4 — Tene per 9 ide i840 Adhich” ¢ ae fas count) +1» _ acount; 3 Secu SeOsihVe — Informah! on, — ree h. te ae thet P_cniminas CAN stea). J ws Eaiigth INN sm. 9s any, any pint pam Planned pols ed _citlack < agai os pee radi Comal (PAPon mpi, - iP» Conpeler_pragiams pach cohich res eae 38 nace Ager Mins} forges Sub netbone 2S: + = eel a eed Q ——_clestoned) she re! 2, Cause Phys cou) te ag. = CPE Tenis 4) acer The an logy Fk (ods hry Miftar fnsfaltabion bh be Plants qd. Femne men oe i 3 ont x Cyber Dekamation sn. . nay : ere orm defamshe (| RLASBTE_Luestien : ; Describe. Oyber eS coilh, Mer ——. SS rena ie ‘slaidacd eri # 1G, Abe ae 7 Tnhreduchon 9 Need > — ber Jaws 9s fermm used rs dase The, Segal Yssues related fo use of @rmunicaben 4 chnolgy —— cyber laws 43 the sawie. which Coohols she @nduct-_of Cyber. achvtky a the secunthy ~ Under the Cyber spaces ri %*_Cyber Taw Includes the laws elahing Rs n — Gyjber cnmes, Elechonic. and Dai) Signatures - _. £nteleckial prepay» Dale: Ptotechon _ ed privety a Afegpries ! A Cyber crime. can be “Aivted ae Fyre, ‘major Colegories : : Ty Gnme against Pndtvidual 2 Government 3 properly _ _ \~ 0 9 fduati— : rime agsio nc Gnclude cyber “harrasme rm these ime se eltshibubion oF of child pomegtophy— 8 stair __ Credit card). “fraud human _fraiticking » Specting — a tidenhry — theek © Online |fbel. =] 8 Gene oe @mmitted aptinsk ts met it menk Op Ps _C Qnsderecl a oHack en the 3 list and describe, difFerenf ypes, of be St? Dexnibe, rs 2reoi.t. — Cyberenime against Hhe government: Te acking , accessing Qnfidenbal Loar Cyber Warfare 2oyber termrisin 2G Pi Sofkware F » Ploperty :— aa { F ‘ \ _ = Some online Crimes occur against proper, Such.as a Q@mpukr or sever . . = this crime Pnéludes = pp Phos. ALFACKS, Hac. —_Nirus =Transm®ssion peyber , Copynight 5 Foding,. A_=rPR “folabin. € ‘Ginplance “sanderd © tdanoge the Adentitfed Risk _ 24% “Select Controls - for ~Ymplemenjebon _5y Prepare Son CSfalermen} oF A piicolity) Do © a ~ ty? Qlan:- 9 jabs hy T9rs Cantey Ken giayitm ) po: aroplerneot 2 operate FSIS" A QHECK!: tonitor J Revteces F3I1s Bek: tMaiintain A fmprove.cbsias Seco |seo) 4 iMke tse, Abi008- et Honal -Certificabon se a eae 20000 Shandards Phere: a sk erg93 2, ar a i Manage _Y.impiece, ttt cole: esk a oo eT also: _pravides cruclitors icwith a. loo, ——————_Slandard fo use for measanin cpt Cmypliong — B —the 720 offers _Gchiicahon fer Shelivtolua : a -bict > 759 20000 Ps ad__organizahonal Q bi Re Goith — Fnlemaboney “Reeignibon: 0 2: ® TSO 20000° has feo speclhicahon.. . "y Iso 200004 Tay z 2> £50 20000-2 + — by LS0 26009- | ‘ = ry © . = att Ps the SpeciFicahon of Service - SPEC AOD _ { 9 Tn ee ze clxbonship process a POCeSS _, “O Release. “procesr oe vert Sneludes all the Sechon | Fram art eae ments fora management: System. a i =Fs0 2oce _Geups the -ETIL process foto Poitx, shee Five “core_ bundles > = SE ce Delve processes. Ss e-~Relatfonship :préce sses. ee Fe Resotation processes : Sana as eS ® COBIT Framework \arich HSusness 7 NORE 5, : an iI ‘ fo eT Reauirements | Frenp wh oe Mae oS . t WISe TI. vss a : 3 5 Staformapor AX Gar) Vr Resources| LZ 8 deli ang “processes | Thet are used b¥ Sm ‘((B1t Framework biechve efor Fofermaben elated —-the @ntr/ business requirements, —____ Organizes - es Info _er_genereuty- accepted] _ Ptowess_moctel | 5 YdentiFies the major FT CS do be Jeveroged J J clefines fhe management Cr fal objectives -f2. be @asdered", an | a = a : — LG Confrof = The Thformafion systems. Auch: Confrof* 4 ALSACA) has iokaduced 1 Coesr Pray ae , 4in_yeabe (996 Fer pesenbe Copsr _framecoorl ewrth the help of Sketch. _ ate (ay [dhat fs pornography & — Igy telhat $s psec # prawdnd explain the AH Pormect of tpsec? ea i oke gray Ave psce Coiiguabon. 1 oF Tpsec eee

You might also like