ICP7575 Network Security

1
ICP7575Network Security

• Shiuhpyng Shieh 

2
Outline

• Introduction
• Attacks, services and mechanisms
• A model for network security
• Course outline
• Cryptography
• Network Security Applications
• System Security

3
Security Attacks
4
Security Attacks

• Interruption This is an attack on availability
• Interception This is an attack on
  confidentiality
• Modification This is an attack on integrity
• Fabrication This is an attack on authenticity

5
Security Services

• Confidentiality (privacy)
• Authentication (who created or sent the data)
• Integrity (has not been altered)
• Non-repudiation (the order is final)
• Access control (prevent misuse of resources)
• Availability (permanence, non-erasure)
• Denial of Service Attacks
• Virus that deletes files

6
Methods of Defense

• Encryption
• Software Controls (access limitations in a data
  base, in operating system protect each user from
  other users)
• Hardware Controls (smartcard)
• Policies (frequent changes of passwords)

7
(No Transcript)
8
Cryptography

• Conventional Encryption and Message
  Confidentiality
• Conventional Encryption Algorithms
• Key Distribution Schemes
• Public-Key Cryptography and Message
  Authentication
• Approaches to Message Authentication
• Secure Hash Functions and HMAC
• Public-Key Cryptography Algorithms
• Digital Signatures
• Key Management

9
Network Security Applications

• Authentication Applications
• Kerberos
• X.509 Directory Authentication Service
• Electronic Mail Security
• Pretty Good Privacy
• S/MIME
• IP Security
• IP Security Architecture
• Authentication Header and Encapsulating Security
  Payload
• Key Management

10
Network Security Applications

• Web Security
• Secure Socket Layer
• Secure Electronic Transaction
• Network Management Security
• Basic Concepts of SNMP
• SNMPv1
• SNMPv3

11
System Security

• Intruders and Virus
• Intruders
• Virus and Related Threats
• Firewalls
• Firewall Design
• Trusted Systems