Network Security and Cryptography
- 1. By G. MANJUNATH, BCA III Year
- 2. Introduction Risk Factors for Cryptography Systems Authentication and Key Establishment Types of Security Attacks Security Services Network Security Model Secret Key Cryptography Types of Firewalls Future Work Conclusion
- 3. Cryptography is the study of secret (crypto-) writing (-graphy) It verifies the correctness of a message to the recipient (authentication) A network Is an interconnection or a media between two or more systems to share information among them. The various threats caused to network are : Remote Login Application Backdoors SMTP Session Hijackings Operating System Bugs Spams Viruses etc.
- 4. There is no simple formula for determining how safe a specific cryptosystem is from attacks and potential security compromises. The Following Factors Affect The Risk Of Successful Attacks On Cryptosystems: Symmetric Key Length Public Key Lifetimes Amount Of Plaintext Known To Attackers Strength Of The Security Implementation Randomness Of Generated Keys Strength Of The Security Protocols
- 5. Risk Impact Damage Potential No. of Affected Components Possibility Degree Of Migration Ease Of Exploitation Discoverability Exploitability Reproducability
- 6. Authentication and key establishment are foundational for establishment of secure communication channels. There exists a variety of authentication protocols for different applications and with different security guarantees. The Authentication techniques such as private keys, passwords, or biometric data, and more sophisticated security properties such as leakage resilience or robustness.
- 7. The are few intertwined in network security as : Secrecy Authentication Non - Repudation Integrity Control etc Theards are classified in two categories : Passive Attacks - eavesdropping on, or monitoring of, transmissions to: obtain message contents, or monitor traffic flows Active Attacks – modification of data stream to: masquerade of one entity as some other replay previous messages modify messages in transit denial of service
- 8. It is a service that is provided by a protocol layer of communicating and security systems or data transmission. It enhances the security of data processing and transferring. Data Integrity Data Confidentiality Authenticity Non - Repudiation Access Control
- 9. A message is to be transferred from one part of Internet service. A security-related y to another across some sort of transformation on the information to be sent. Message should be encrypted by key so that it is unreadable by the opponent An encryption key used in conjunction with scramble the message before transmission and unscramble it on reception
- 10. AES was designed to be efficient in both hardware and software. AES comprises three block ciphers, are AES-128, AES-192 and AES-256. Each cipher encrypts and decrypts data in blocks of 128 bits using cryptographic keys of 128-, 192- and 256-bits. AES is largely considered impervious to all attacks, with the exception of brute force. Security experts believe that AES will eventually be hailed the de facto standard for encrypting data in the private sector.
- 12. It can operate as a positivefilter, allowingto pass only packets thatmeet specific criteria,or as a negativefilter, rejectingany packet that meetscertain criteria. Type of firewall: PacketFilter Stateful PacketInspection Application-LevelGateway
- 13. 13
- 14. Prevents cyber attack Levels of access Protect data Confidentiality Authentication Data Integrity Non-repudiation Costly set up Time consuming Requires skilled staff Careless admin Difficult to access even for a legitimate user High availability Selective access control
- 15. The explosive growth in the Internet Network and data security have become an inevitable concern whose internal private network is connected to the Internet. The security for the data has become highly important. User’s data privacy is a central question over cloud. With more mathematical tools, cryptographic schemes are getting more versatile and often involve multiple keys for a single application
- 16. Network Security is the most vital component in information security it is responsible for securing all information passed through networked computers adopted by the administrator to protect the network accessible resources from unauthorized access Cryptographic techniques to increase the security of network provide a high degree of protection in digital communications against intruder attacks
- 17. 1 - William Stallings Principles And Practices Book 2 - Lawrie Brown 3 - Dr. Himanshu Gupta ,Senior Faculty Member, Amity University 4 - Xiang-yang Li