Another perspective on Network Security Network Security Essentials: Applications and Standards, 4/E...

Another perspectiveon Network Security

Network Security Essentials: Applications and Standards, 4/EWilliam Stallings

ISBN-10: 0136108059ISBN-13: 9780136108054

Publisher: Prentice HallCopyright: 2011Format: Paper; 432 ppPublished: 03/12/2010

http://williamstallings.com/NetSec/NetSec4e.html

The Security Requirements Triad

Computer SecurityThe protection afforded to an automated information system in order to attain the applicable objectives of preserving the integrity, availability and confidentiality of information system resources (includes hardware, software, firmware, information/data, and telecommunications)

http://csrc.nist.gov/publications/fips/fips199/FIPS-PUB-199-final.pdf

Security Requirements• Confidentiality– Preserving authorized restrictions on information

access and disclosure, including means for protecting personal privacy and proprietary information.

• Integrity– Guarding against information modifications or

destruction, including ensuring information non-repudiation and authenticity.

• Availability– Ensuring timely and reliable access to and use of

information

Security Attacks, Mechanisms & Services

• Security Attack– Any action that compromises the security of

information

• Security Mechanism– A process / device that is designed to detect, prevent

or recover from a security attack.

• Security Service– A service intended to counter security attacks,

typically by implementing one or more mechanisms.

Threats & Attacks

… but threat and attack used nearly interchangeably

Security Threats / Attacks

… …

Security Threats / Attacks

Passive Attacks

Active Attacks (1)

Active Attacks (2)

Security Services (X.800)• Authentication

– The assurance that the communicating entity is the one it claims to be• Access Control

– The prevention of unauthorized use of a resource • who can have access to a resource,• under what conditions access can occur, • what those accessing the resource are allowed to do

• Data Confidentiality– The protection of data from unauthorized disclosure

• Data Integrity– The assurance that data received are exactly as sent by an authorized

entity (i.e., contains no modification, insertion, deletion or replay).• Non-Repudiation

– Provides protection against denial by one of the entities involved in a communication of having participated in all/part of the communication.

Security Mechanisms (X.800)

http://www.itu.int/rec/T-REC-X.800-199103-I/e

Model for Network Security

The Human Element“Humans are incapable of securely storing high-quality cryptographic keys, and they have unacceptable speed and accuracy when performing cryptographic operations. (They are also large, expensive to maintain, difficult to manage, and they pollute the environment. It is astonishing that these devices continue to be manufactured and deployed. But they are sufficiently pervasive that we must design our protocols around their limitations.)”

-- C. Kaufman, R. Perlman, and M. Speciner. Network Security: Private Communication in a Public World, 2/EKaufman, Perlman & SpecinerPrentice Hall, 2003

Understanding Opponents

Anatomy of an AttackPhase 1: ReconnaissancePhase 2: ScanningPhase 3: Gaining Access Phase 4: Maintaining AccessPhase 5: Covering Tracks and Hiding

Counter Hack Reloaded: A Step-by-Step Guide to Computer Attacks and Effective Defenses, 2/ESkoudis & ListonPrentice Hall, 2006

Network Security Jobs

Another perspective on Network Security Network Security Essentials: Applications and Standards, 4/E...

Documents

Transcript of Another perspective on Network Security Network Security Essentials: Applications and Standards, 4/E...

Network Security - INL: IP Networking Labinl.info.ucl.ac.be/system/files/Internet-security.pdf · Transport-layer security Network-layer security 3. ... Network Security : Private

Network Security PENS-ITS Intro to Network Security Network Security Politeknik Elektronika Negeri Surabaya 2007.

network security / information security

Fortinet Certified Network Security Administrator (FCNSA ... · Fortinet Certified Network Security Administrator (FCNSA) ... Network Security Administrator (FCNSA) - Version ...

Network Security Part I: Introduction Network Security Management.

Cryptography and Network Security UNIT IV - NETWORK SECURITY.

Chapter 5 Network Security - WordPress.com · Chapter 5 Network Security. 2 What is network security? Network Security means providing CIA. ... details about a cryptosystem except

QualNet 4.5.1 Network Security Model Librarybosco/grupo/TCC-Daniel/CD-2/... · QualNet 4.5.1 Network Security Model Library 1 Network Security - Overview Network Security - Overview

CRYPTOGRAPHY AND NETWORK · PDF fileCRYPTOGRAPHY AND NETWORK SECURITY UNIT-I Introduction: Security Attacks, Security Services, Security Mechanisms, and a Model for Network Security,

Network Security: WLAN Security

CSE543 Computer and Network Security Module: Network Security

Chapter 13 Network Security. Contents Definition of information security Role of network security Vulnerabilities, threats and controls Network security.

IUT– Network Security Course 1 Network Security Firewalls.

Ch 5 Network Security (from Introduction to … · Web viewCh 5 Network Security (from Introduction to Computer Security, M.T. Goodrich, R. Tamassia, Pearson, 2011, ISBN 10: 0-321-70201-8)

Chapter 11 Security Protocols Network Security Threats Security and Cryptography Network Security Protocols Cryptographic Algorithms.

Security+ Guide to Network Security Fundamentals, Fourth Edition Chapter 6 Network Security.

ECE579S: Computer and Network Security 4: Network Security Issues

CHAPTER 5 WIRELESS NETWORK SECURITY Network Security.

Www. engineersportal.in. OUTLINES Network & Network Security Need of Network Security Methods of Network Security Firewall Firewall’s Works Firewall’s.

Network Security - College of Engineeringweb.engr.oregonstate.edu/.../network_security.pdf · 8: Network Security 8-1 Network Security Goals: understand principles of network security: