Click to edit Master text styles
Second level
Third level
Fourth level
Fifth level
‹date/time›
‹footer›
‹#›
------=_NextPart_01C746B5.3F232040
Content-Location: file:///C:/2AAC2C51/rguha1_files/master03.xml
Content-Transfer-Encoding: quoted-printable
Content-Type: text/xml; charset="utf-8"
‹header›
‹date/time›=
‹footer›
‹#›
------=_NextPart_01C746B5.3F232040
Content-Location: file:///C:/2AAC2C51/rguha1_files/pres.xml
Content-Transfer-Encoding: quoted-printable
Content-Type: text/xml; charset="utf-8"
Computer Network Security
COT 4810
COT 4810
Ratan
K Guha
Spring
2007
2/1/2007
References
•
•Cryptography and Network Security, William Stallin=
gs, 4th Edition, Prentice Hall, Inc. (2007=
) [Most of the slides=
are taken from thi=
s book]
•<=
/span>Introduction to Computer Security, Matt Bishop, Addison Wesley, (2005).
•<=
/span>Network Security, Charlie Kaufman, Radia Perlman a=
nd Mike Speciner, 2nd Edit=
ion,
Prentice Hall, Inc. (2002
•The Art of Computer Virus Research, Peter Szor, Addison Wesley, (2005)
•
Outline
<=
span
class=3DBB style=3D'position:absolute;left:-4.97%'>•Introduct=
ion
<=
span
class=3DBB style=3D'position:absolute;left:-4.97%'>•Security
Enhancements
<=
span
class=3DBB style=3D'position:absolute;left:-4.97%'>•Security
Models
<=
span
style=3D'visibility:hidden'>•
Definitions
•<=
/span>Computer Security - generic name for=
the =
collection of tools designed to prote=
ct data
and to th=
wart
hackers
•<=
/span>Network Security - measures to prot=
ect data
during their
transmission
•<=
/span>Internet Security - measures to prot=
ect data
during their trans=
mission
over a collection of interconnected
networks
•
Hackers and Intruders
=
226;An
individual who breaks into a computer (attacks a networked centric
system)
&#=
8226;Motivation
&=
#8211; Challenge
&=
#8211; Greed
&=
#8211; Malicious intent
Threats and Attacks
•T=
hreat:
–A
threat is a possible danger that might exploit vulnerability
•A=
ttack:
–An attack is an intelligent act that is a delibera=
te attempt to
evade security services and violate the security policy of a system
Security Attack
•any
action that compromises the security of information owned by an organization
•information
security is about how to prevent attacks, or failing that, to detect attacks on =
information-based systems
=
•o=
ften threat=
& attack=
used to
mean same thing
•h=
ave a
wide range of attacks
•c=
an
focus of generic types of attacks
–p=
assive
–a=
ctive
Types of Attacks
•Access (snooping, eavesdropping, interception)
<=
span
class=3DBB style=3D'position:absolute;left:-3.8%'>•Modificati=
on
(changes, insertion, deletion)
•Denial of
Service (Denial of access to=
information,
applications, systems, communications)
•Repudiati=
on
(masquerading-impersonating, denying an event)Security Enhanceme=
nts
&#=
8226;confidentiality
&=
#8211;protection from disclosure
&#=
8226;authentication
&=
#8211;of sender and receiver
&#=
8226;message integrity
&=
#8211;protection from modification
&#=
8226;non-repudiation
&=
#8211;protection from denial by sender or receiver
Model for Network Security=
![](3D"slide0016_image002.gif")
Model=
for
Network Access Security
![](3D"slide0018_image004.gif")
Placemen=
t of
Encryption
![](3D"slide0020_image006.jpg")
Key Distribution Scenario=
![](3D"slide0021_image008.jpg")
Public-Key Authori=
ty
![](3D"slide0022_image010.jpg")