William Stallings, Cryptography and Network Security 5/e

William Stallings, Cryptography and Network Security 5/e

Network Security Introduction My Introduction Obaid Ullah Owais Khan B.E (I.T) Hamdard University(2003), Karachi Network Engineer, Pakistan Standards & Quality Control Authority (PSQCA), Government of Pakistan

E-mail: [email protected] Course Overview Course: Network Security Time: 06:00 07:00 pm on Thursday, Friday & Saturday Classroom: Lab 2 , FUUAST Prerequisite: Computer Networks, Discrete Mathematics.

Resources Textbook Network Security Essentials: Applications and Standards, 4th ed., by William Stallings, Pearson Education, Inc., 2011.

Cryptography and Network Security: Principles and Practice, Fifth Edition, by William Stallings, Prentice-Hall, 2011 Internet Searching Semester Pattern Lectures Slide Book Research Papers Presentations Quiz Mid-term and Final exams

Grading Policy (Tentative) grading policy Quiz (best 1 out of 2) : 10% Attendance and class participation: 10% Research paper and Presentation: 10% Midterm : 20% Final exams: 50% Course Outline

Introduction Cryptography Symmetric encryption and message confidentiality Public-key cryptography and message authentication Network security applications Key distribution and user authentication Transport-level security

Wireless network security Electronic mail security IP security System security Intruders Malicious software Firewalls Topical Surveys We will try to read surveys in network security-related topics, e.g.:

Demonstration on how to use a network security tool Comparison of security standards or algorithms Potential security weakness in systems, and possible solutions or countermeasures

Computer Security the protection afforded to an automated information system in order to attain the applicable objectives of preserving the integrity, availability and confidentiality of information system resources (includes hardware, software, firmware, information/ data, and telecommunications) [NIST95] Key Security Concepts

Levels of Impact can define 3 levels of impact from a security breach Low effectiveness of the functions is noticeably reduced minor damage to organizational assets and financial loss

Moderate effectiveness of the functions is significantly reduced major damage to organizational assets and financial loss High is not able to perform one or more of its primary functions major damage to organizational assets and financial loss Computer Security Challenges 1.

2. 3. 4. 5. 6. 7. not simple must consider potential attacks involve algorithms and secret info must decide where to deploy mechanisms battle of wits between attacker / admin

requires regular monitoring regarded as impediment to using system OSI Security Architecture ITU-T X.800 Security Architecture for OSI defines a systematic way of defining and providing security requirements Aspects of Security

consider 3 aspects of information security: security attack security mechanism security service note terms

threat a potential for violation of security attack an assault on system security, a deliberate attempt to evade security services Passive Attacks Passive Attacks (2) Traffic Analysis

Passive attacks do not affect system resources Two types of passive attacks Eavesdropping, monitoring

Release of message contents Traffic analysis Passive attacks are very difficult to detect Message transmission apparently normal No alteration of the data Emphasis on prevention rather than detection

By means of encryption Active Attacks (1) Masquerade Active Attacks (2) Replay Active Attacks (3) Modification of Messages Active Attacks (4)

Denial of Service Active attacks try to alter system resources or affect their operation Modification of data, or creation of false data

Four categories Masquerade Replay Modification of messages Denial of service: preventing normal use A specific target or entire network

Difficult to prevent The goal is to detect and recover Security Services (X.800) Authentication - assurance that communicating entity is the one claimed

have both peer-entity & data origin authentication Access Control - prevention of the unauthorized use of a resource

Data Confidentiality protection of data from unauthorized disclosure Data Integrity - assurance that data received is as sent by an authorized entity Non-Repudiation - protection against denial by one of the parties in a communication Availability resource accessible/usable Security Mechanism feature designed to detect, prevent, or recover from a security attack

no single mechanism that will support all services required however one particular element underlies many of the security mechanisms in use: cryptographic techniques Model for Network Security Model for Network Security

using this model requires us to: 1. 2. 3. 4. design a suitable algorithm for the security transformation

generate the secret information (keys) used by the algorithm develop methods to distribute and share the secret information specify a protocol enabling the principals to use the transformation and secret information for a security service Model for Network Access Security Model for Network Access

Security using this model requires us to: 1. 2. select appropriate gatekeeper functions to identify users implement security controls to ensure only authorised users access designated

information or resources

Recently Viewed Presentations

  • HERALDRY ROCKS;) ~~~~~~~~~~~~ ~~~~~~~~~~~ ~~~~~~~~~~~~ ~~~~~~~~~~~~ ~~~~~~~~~~~ ~~~~~~~~~~~~

    HERALDRY ROCKS;) ~~~~~~~~~~~~ ~~~~~~~~~~~ ~~~~~~~~~~~~ ~~~~~~~~~~~~ ~~~~~~~~~~~ ~~~~~~~~~~~~

    Coats of arms: Coats of arms and the symbols and conventions connected with them. Why is Heraldry Important to the legend of King Arthur? Heraldry, (also known as "The Coat of Arms") began to be used as a traditional device...
  • Motion - Watson's Science Classes

    Motion - Watson's Science Classes

    Thermal Insulators. A material through which thermal energy is transferred slowly is an . insulator. Examples of insulators are wood, some plastics, fiberglass, and air. Material, such as metals, that are good thermal conductors are poor insulators. Gases, such as...
  • 3D Wireless: The Promise and Challenges of Next

    3D Wireless: The Promise and Challenges of Next

    3D Wireless: The Promise and Challenges of Next Generation Space and Airborne Wireless Systems Keynote Julius Knapp, Chief Office of Engineering and Technology
  • Found Poetry - Administration

    Found Poetry - Administration

    "Self-Serving in Death"A Found Poem by K. Matteson. Remember me. Revenge through flesh and blood. The father that thou didst love. With swift wings, sweep to my revenge! Remember me. My commandment alone shall live. Murder the serpent that did...
  • Development Of Thyroid Gland Dr Mukesh Singla Additional

    Development Of Thyroid Gland Dr Mukesh Singla Additional

    Descent of the Thyroid Gland. Thickening forms a downgrowth, thyroid diverticulum, which grows into the underlying mesoderm, and as the embryo elongates and the tongue grows, the diverticulum descends in front of the neck and pharyngeal gut The diverticulum is...


    In-Home Behavioral Supports. An introduction to Services supporting Caregivers & Resource Parents designed to increase capacity and support to families and improve outcomes for children and youth in our child welfare system.
  • Auditory Objects In A Complex Acoustic Environment

    Auditory Objects In A Complex Acoustic Environment

    Tonotopic organization of auditory stream: attivation of groups of close neurons determines the perception of tokens in one stream (a, c) (Beauvois & Meddis, 1991, 1996; Hartmann and Johnson, 1991; McCabe & Denham, 1997) If the evoked neural responses are...
  • A Machine Learning based Approach for Disulfide Bond

    A Machine Learning based Approach for Disulfide Bond

    Prediction of disulfide bonds plays crucial role in ab initio protein structure prediction and protein folding. Improved prediction of disulfide bonds can be useful in improving the accuracy of ab initio protein structure prediction. Since they impose geometrical constrains on...