CIDS 435 Lecture 6

Secure communication channel, even with eavesdroppers present.

Use of keys for encryption, attributed to Leon Alberti during the Renaissance.

encrypt digit by digit, fast but less secure

encrypt fixed-length blocks, slower but more secure.

Uses a pair of keys (public and private) for secure communication, based on hard-to-solve number theory problems.

Ensuring that information is not disclosed to unauthorized individuals.

Verifying that both the sender and receiver are who they claim to be.

Maintaining and assuring the accuracy and completeness of data.

Ensuring that authorized users have access to information and associated assets when required.

Confidentiality, Authenticity, Integrity, and Availability became essential.

Modern security requires that each device in a network be secured individually,

do not automatically trust anything inside or outside the network.

Hardware or software piece that plays a specific role in connecting devices and ensuring data flow within a network.

switches, bridges, and routers, and their roles in managing network traffic.

Firewalls: Prevent unauthorized access

Intrusion Detection: Monitor for attacks

Network Throttling: Control traffic flow

Separate device or part of a modem/router, filters packets, detects IP spoofing.

Detect spam, spoofed addresses, and botnet connections.

Manages network load and prevents overuse.

Refers to the initial stages of network development characterized by a focus on fast communication with minimal security measures in place.

The internet evolved into a vital component of modern society, necessitating measures for ensuring confidentiality, authenticity, integrity, and availability of data and services.

Protocols, topology, and defenses protect networks.

Devices, protocols, and virtualization optimize connectivity.

Efficiently process and forward network traffic.

Manage virtual traffic and enforce security.

Direct packets between network segments.

Organizes data exchange into layers.

Routes data packets using addresses.

Assigns network and subnet addresses.

Ensures reliable data transfer.

Data units in network communication.

Maps domain names to IP addresses.

Enhances DNS security.

Create virtual networks and secure connections.

Common local network technologies.

Standards for wireless networks.

Maps IP addresses to MAC addresses.

Automates IP address assignment.

Malicious activities targeting networks.

Malicious software threats.

Independent sub-systems collaborating on tasks.

Outcome depends on concurrent process instruction order.

System state changes between verification and action.

Example of a security protocol vulnerability allowing unlimited transactions in 60 seconds.

Can cause issues like outdated data, inconsistent updates, and deadlock.

Restricts resource access to prevent inconsistent updates.

Processes wait for each other indefinitely.

Affects outcome, e.g., paying with insufficient funds.

Ensure atomicity, consistency, isolation, and durability.

Essential for system functionality and recovery from failures.

Replicates components for resilience.

Overwhelm system with meaningless requests, impacting availability.

Large-scale attacks using botnets.

the process of assigning labels to objects in a distributed system.

Guidelines for naming in distributed systems.

System with different security levels, often in government contexts.

Enforces access based on security classifications.

Controls access based on security clearances and prevents unauthorized access.

Ensures data integrity and prevents corruption.

Various models ensuring security across different levels.

Separates sensitive information using codewords.

Access control model based on security levels.

Unauthorized communication paths in multilevel systems.

Balances security needs with implementation costs.

Categorized into Top Secret, Secret, and Confidential levels.

US DoD standards for computer security.

Different methods recommended for multiuser computers.

Windows and Linux implement mandatory access control mechanisms.

Kernel module developed by NSA for MAC.

Precise security policy evaluation using mathematical methods.

Breaches in government and military systems.

T → E: {M,T}k

positive integer which equals the product of two distinct prime numbers p and q