Security services
- 2. Contents 1. About Security services 2. Authentication 3. Access Control 4. Data Confidentiality 5. Data Integrity 6. Nonrepudiation 12/7/2018 Security Services 2
- 3. Security Services • The OSI Security Architecture is a framework that provides a systematic way of defining the requirements for security and characterizing the approaches to satisfying those requirements. The document defines security attacks, mechanisms, and services, and the relationships among these categories. • X.800 defines a security service as a service provided by a protocol layer of communicating open systems, which ensures adequate security of the systems or of data transfers. 12/7/2018 Security Services 3
- 4. Cont… • • A processing or communication service that is provided by a system to give a specific kind of protection to system resources. • Security services implement security policies and are implemented by security mechanisms. 12/7/2018 Security Services 4
- 5. AUTHENTICATION • The authentication service is concerned with assuring that a communication is authentic. In the case of a single message, such as a warning or alarm signal, the function of the authentication service is to assure the recipient that the message is from the source that it claims to be from. 12/7/2018 Security Services 5
- 6. ACCESS CONTROL • In the context of network security, access control is the ability to limit and control the access to host systems and applications via communications links. To achieve this, each entity trying to gain access must first be identified, or authenticated, so that access rights can be tailored to the individual. 12/7/2018 Security Services 6
- 7. DATA CONFIDENTIALITY • Confidentiality is the protection of transmitted data from passive attacks. With respect to the content of a data transmission, several levels of protection can be identified. The broadest service protects all user data transmitted between two users over a period of time. 12/7/2018 Security Services 7
- 8. Cont… • The other aspect of confidentiality is the protection of traffic flow from analysis. This requires that an attacker not be able to observe the source and destination, frequency, length, or other characteristics of the traffic on a communications facility. 12/7/2018 Security Services 8
- 9. DATA INTEGRITY • As with confidentiality, integrity can apply to a stream of messages, a single message, or selected fields within a message. Again, the most useful and straightforward approach is total stream protection. 12/7/2018 Security Services 9
- 10. NONREPUDIATION • Nonrepudiation prevents either sender or receiver from denying a transmitted message. Thus, when a message is sent, the receiver can prove that the alleged sender in fact sent the message. Similarly, when a message is received, the sender can prove that the alleged receiver in fact received the message. 12/7/2018 Security Services 10
- 11. REFERENCE • Cryptography and Network Security Principles and Practices, Fourth Edition - By William Stallings 12/7/2018 Security Services 11
- 12. THANK YOU…
Editor's Notes
- #4: Security Attack: Any action that compromises the security of information. Security Mechanism: A mechanism that is designed to detect, prevent, or recover from a security attack. Security Service: A service that enhances the security of data processing systems and information transfers. A security service makes use of one or more security mechanisms
- #5: ITU Telecommunication Standardization Sector (ITU-T) is one of the three sectors (divisions or units) of the International Telecommunication Union (ITU); it coordinates standards for telecommunications.
- #6: sender, receiver want to confirm identity of each other . It confirms to the receiver that the data received has been sent only by an identified and verified sender.
- #7: access control which is to prevent any unauthorized use of resources or limits the access to authorized users. (i.e., this service controls who can have access to a resource, under what conditions access can occur, and what those accessing the resource are allowed to do).
- #8: It is a security service that keeps the information from an unauthorized person. • Passive Attack : Attempts to learn or make use of info from the system, but no affect on system resources ISP provide the security
- #10: The assurance that data received are exactly as sent by an authorized entity and it grantees that a massage is received as sent. (i.e., contain no modification, insertion, deletion, or replay).
- #11: Provides protection against denial by one of the entities involved in a communication of having participated in all or part of the communication.