Information and network security 9 model for network security
•Download as PPTX, PDF•
0 likes•355 views
A Network Security Model exhibits how the security service has been designed over the network to prevent the opponent from causing a threat to the confidentiality or authenticity of the information that is being transmitted through the network.
Report
Share
Report
Share
Recommended
4-Taxonomy of virtualization.docx
Virtualization techniques emulate execution environments, storage, and networks. Execution environments are classified as either process-level, implemented on top of an existing OS, or system-level, implemented directly on hardware without needing an existing OS. Virtualization provides isolation and resource management for software through virtual machines, which are classified as either system VMs that mimic whole hardware systems allowing full OSes, or process VMs that support single processes and provide platform independence. The machine reference model defines interfaces between abstraction layers that virtualization replaces to intercept calls.
File models and file accessing models
This document discusses different file models and methods for accessing files. It describes unstructured and structured file models, as well as mutable and immutable files. It also covers remote file access using remote service and data caching models. Finally, it discusses different units of data transfer for file access, including file-level, block-level, byte-level, and record-level transfer models.
Distributed OS - An Introduction
This document outlines the key concepts in distributed systems and paradigms. It begins with definitions of distributed systems and discusses various forms of transparency in distributed systems like access, location, and replication transparency. It then covers scaling techniques like hiding communication latencies and distribution. The document outlines concepts in distributed operating systems, network operating systems, middleware, and how they provide different degrees of transparency and scalability. It provides examples of client-server models and multitier architectures in distributed systems.
Message authentication
1. MESSAGE SECURITY REQUIREMENTS
2. MESSAGE AUTHENTICATION
3. MESSAGE ENCRYPTION
4. HASH FUNCTIONS
5. MESSAGE AUTHENTICATION CODE (MAC)
6. HMAC
Distributed Systems Real Life Applications
This document discusses distributed systems applications in real life, including three key areas: distributed rendering in computer graphics, peer-to-peer networks, and massively multiplayer online gaming. It describes how distributed rendering parallelizes graphics processing across multiple computers. Peer-to-peer networks are defined as decentralized networks where nodes act as both suppliers and consumers of resources. Examples of peer-to-peer applications include file sharing and content delivery networks. The document also outlines the challenges of designing multiplayer online games using a distributed architecture rather than a traditional client-server model.
Analytical learning
The document discusses analytical learning methods like explanation-based learning. It explains that analytical learning uses prior knowledge and deductive reasoning to augment training examples, allowing it to generalize better than methods relying solely on data. Explanation-based learning analyzes examples according to prior knowledge to infer relevant features. The document provides examples of using explanation-based learning to learn chess concepts and safe stacking of objects. It also describes the PROLOG-EBG algorithm for explanation-based learning.
Authentication Application in Network Security NS4
The document summarizes authentication methods including Kerberos and X.509. It outlines security concerns around confidentiality and timeliness. It provides an overview of how Kerberos works, including the authentication dialogue process. It also describes X.509 certificates and certification authorities. Recommended reading and websites on authentication topics are listed.
Fog Computing
The term “fog computing” or “edge computing” means that rather than hosting and working from a centralized cloud, fog systems operate on network ends. It is a term for placing some processes and resources at the edge of the cloud, instead of establishing channels for cloud storage and utilization.
Recommended
4-Taxonomy of virtualization.docx
Virtualization techniques emulate execution environments, storage, and networks. Execution environments are classified as either process-level, implemented on top of an existing OS, or system-level, implemented directly on hardware without needing an existing OS. Virtualization provides isolation and resource management for software through virtual machines, which are classified as either system VMs that mimic whole hardware systems allowing full OSes, or process VMs that support single processes and provide platform independence. The machine reference model defines interfaces between abstraction layers that virtualization replaces to intercept calls.
File models and file accessing models
This document discusses different file models and methods for accessing files. It describes unstructured and structured file models, as well as mutable and immutable files. It also covers remote file access using remote service and data caching models. Finally, it discusses different units of data transfer for file access, including file-level, block-level, byte-level, and record-level transfer models.
Distributed OS - An Introduction
This document outlines the key concepts in distributed systems and paradigms. It begins with definitions of distributed systems and discusses various forms of transparency in distributed systems like access, location, and replication transparency. It then covers scaling techniques like hiding communication latencies and distribution. The document outlines concepts in distributed operating systems, network operating systems, middleware, and how they provide different degrees of transparency and scalability. It provides examples of client-server models and multitier architectures in distributed systems.
Message authentication
1. MESSAGE SECURITY REQUIREMENTS
2. MESSAGE AUTHENTICATION
3. MESSAGE ENCRYPTION
4. HASH FUNCTIONS
5. MESSAGE AUTHENTICATION CODE (MAC)
6. HMAC
Distributed Systems Real Life Applications
This document discusses distributed systems applications in real life, including three key areas: distributed rendering in computer graphics, peer-to-peer networks, and massively multiplayer online gaming. It describes how distributed rendering parallelizes graphics processing across multiple computers. Peer-to-peer networks are defined as decentralized networks where nodes act as both suppliers and consumers of resources. Examples of peer-to-peer applications include file sharing and content delivery networks. The document also outlines the challenges of designing multiplayer online games using a distributed architecture rather than a traditional client-server model.
Analytical learning
The document discusses analytical learning methods like explanation-based learning. It explains that analytical learning uses prior knowledge and deductive reasoning to augment training examples, allowing it to generalize better than methods relying solely on data. Explanation-based learning analyzes examples according to prior knowledge to infer relevant features. The document provides examples of using explanation-based learning to learn chess concepts and safe stacking of objects. It also describes the PROLOG-EBG algorithm for explanation-based learning.
Authentication Application in Network Security NS4
The document summarizes authentication methods including Kerberos and X.509. It outlines security concerns around confidentiality and timeliness. It provides an overview of how Kerberos works, including the authentication dialogue process. It also describes X.509 certificates and certification authorities. Recommended reading and websites on authentication topics are listed.
Fog Computing
The term “fog computing” or “edge computing” means that rather than hosting and working from a centralized cloud, fog systems operate on network ends. It is a term for placing some processes and resources at the edge of the cloud, instead of establishing channels for cloud storage and utilization.
Ecg analysis in the cloud
ECG analysis in the cloud allows for remote monitoring of patients' heartbeats without visiting the hospital. Sensors attached to patients measure their ECG and transmit the data via Bluetooth to mobile devices and the cloud for analysis. This analysis is done as a cloud service across infrastructure, platform, and software layers. The cloud provides elastic resources and near real-time analysis, allowing doctors to monitor more patients without large local computing infrastructures.
Edge detection
The document discusses edge detection methods including gradient based approaches like Sobel and zero crossing based techniques like Laplacian of Gaussian. It proposes a new algorithm that applies fuzzy logic to the results of gradient and zero crossing edge detection on an image to more accurately identify edges. The algorithm calculates gradient and zero crossings, applies fuzzy rules to classify pixels, and thresholds to determine final edge pixels.
Hit and-miss transform
The hit-and-miss transform is a binary morphological operation that can detect particular patterns in an image. It uses a structuring element containing foreground and background pixels to search an image. If the structuring element pattern matches the image pixels underneath, the output pixel is set to foreground, otherwise it is set to background. The hit-and-miss transform can find features like corners, endpoints, and junctions and is used to implement other morphological operations like thinning and thickening. It is performed by matching the structuring element at all points in the image.
Steganography Project
This document provides an overview of steganography. It discusses how steganography hides messages within carriers so that the message is concealed. The document then discusses the history of steganography dating back to ancient Greece. It also discusses modern uses of steganography during the Cold War and by terrorist groups. The document outlines the objectives of the study which are to provide security during message transmission. It then discusses steganography techniques like the LSB algorithm and provides snapshots of its implementation. Finally, it discusses the results of using LSB steganography and concludes with possibilities for further enhancement.
Cloud computing protocol
This document discusses cloud computing protocols. It begins by defining cloud computing as using remote servers over the internet to store and access data and applications. The cloud is broken into three categories: applications, storage, and connectivity. Protocols are then defined as sets of rules that allow electronic devices to connect and exchange information. Ten specific protocols are described: Gossip protocol for failure detection and messaging; Connectionless network protocol for fragmentation; State routing protocol for path selection; Internet group management protocol for multicasting; Secure shell protocol for secure remote login; Coverage enhanced ethernet protocol for network traffic handling; Extensible messaging and presence protocol for publish/subscribe systems; Advanced message queuing protocol for point-to-point messaging; Enhanced interior
Elliptic Curve Cryptography
This presentation contains the contents pertaining to the undergraduate course on Cryptography and Network Security (UITC203) at Sri Ramakrishna Institute of Technology. This covers the Elliptic Curve Cryptography and the basis of elliptic curve arithmetics.
MACs based on Hash Functions, MACs based on Block Ciphers
This document discusses message authentication codes (MACs) based on hash functions and block ciphers. It describes Hash-based MACs (HMAC) which uses a cryptographic hash function combined with a secret key to authenticate messages. HMAC provides integrity and authentication using public/private keys. The document also covers MACs based on block ciphers, specifically the Data Authentication Algorithm (DAA) which is based on DES-CBC, and Cipher-based MAC (CMAC) which fixes security issues with CBC-MAC and can use existing encryption functions to resist attacks. CMAC chains the cipher and XORs the message blocks to generate the authentication tag.
distributed Computing system model
This document discusses different distributed computing system (DCS) models:
1. The minicomputer model consists of a few minicomputers with remote access allowing resource sharing.
2. The workstation model consists of independent workstations scattered throughout a building where users log onto their home workstation.
3. The workstation-server model includes minicomputers, diskless and diskful workstations, and centralized services like databases and printing.
It provides an overview of the key characteristics and advantages of different DCS models.
CS6601 DISTRIBUTED SYSTEMS
UNIT V PROCESS & RESOURCE MANAGEMENT 9
Process Management: Process Migration: Features, Mechanism – Threads: Models, Issues, Implementation. Resource Management: Introduction- Features of Scheduling Algorithms –Task Assignment Approach – Load Balancing Approach – Load Sharing Approach.
SECRY - Secure file storage on cloud using hybrid cryptography
Final project presentation of Final year B.tech CSE Project APJ Abdul Kalam Technological University.
About the project
Cloud computing has now become a major trend, it is a new data hosting technology that is very popular in recent years. In this project, we are developing an web application that can securely store the files to a cloud server. We proposes a system that uses hybrid cryptography technique to securely store the data in cloud. The hybrid approach when deployed in cloud environment makes the remote server more secure and thus, helps the users to fetch more trust of their data in the cloud. For data security and privacy protection issues, the fundamental challenge of separation of sensitive data and access control is fulfilled. Cryptography technique translates original data into unreadable format. This technique uses keys for translate data into unreadable form. So only authorized person can access data from cloud server.
We provide a cloud storage that uses multiple crypotraphic technique which is known by hybrid cryptography. The product provides confidentiality by using security for both upload and download. The data will be secured since we use multi level security techniques and multiple servers for storage.
Distributed file systems chapter 9
This chapter deals with the various concepts ind distributed file systems text authored by Pradeep K, Sinha
Distributed shred memory architecture
Distributed shared memory (DSM) is a memory architecture where physically separate memories can be addressed as a single logical address space. In a DSM system, data moves between nodes' main and secondary memories when a process accesses shared data. Each node has a memory mapping manager that maps the shared virtual memory to local physical memory. DSM provides advantages like shielding programmers from message passing, lower cost than multiprocessors, and large virtual address spaces, but disadvantages include potential performance penalties from remote data access and lack of programmer control over messaging.
Network security model.pptx
Network security involves protecting networks from unauthorized access and risks. It is important for network administrators to take preventive measures to secure networks used by individuals, businesses, and governments. There are various types of network security devices that fulfill different functions like blocking surplus traffic (active devices), identifying unwanted traffic (passive devices), and scanning for potential problems (preventative devices). Firewalls are a key example of an active device that establishes a barrier between internal and external networks and regulates incoming and outgoing traffic.
Market oriented Cloud Computing
This document discusses the vision, hype and reality of delivering IT services as computing utilities. It outlines the need for a market oriented cloud architecture to regulate supply and demand of cloud resources. Emerging cloud platforms like Amazon EC2, Google App Engine, Microsoft Live Mesh and Sun Grid are presented. The limitations of present cloud service providers are discussed. Finally, the concept of a Global Cloud Exchange is proposed to address these limitations through features like a market directory, banking system, brokers and price setting mechanisms.
secure file storage on cloud using hybrid Cryptography ppt.pptx
The document proposes a system for secure file storage on cloud using hybrid cryptography. It uses AES, 3DES and RC6 algorithms to encrypt files before uploading to the cloud. This provides higher security than using a single encryption algorithm. The system allows users to register, login, encrypt files, upload encrypted files to cloud, request files from cloud, decrypt files. It aims to provide secure data storage with less encryption/decryption time compared to existing systems.
Security Attacks.ppt
This document discusses different types of cyber attacks including passive attacks like eavesdropping and masquerading, active attacks like denial of service, and methods attackers use like spoofing, backdoors, brute force attacks, and dictionary attacks. It provides details on how each attack compromises security through unauthorized access, modification of data, denial of service, or repudiation.
The motion estimation
Introduction to Digital Videos, Motion Estimation: Principles & Compensation. Learn more in IIT Kharagpur's Image and Video Communication online certificate course.
Steganography
The document provides an overview of steganography, including its definition, history, techniques, applications, and future scope. It discusses different types of steganography such as text, image, and audio steganography. For image steganography, it describes techniques such as LSB insertion and compares image and transform domain methods. It also provides examples of steganography tools and their usage for confidential communication and data protection.
Symmetric Cipher Model, Substitution techniques, Transposition techniques, St...
1) The document discusses symmetric encryption techniques including the symmetric cipher model, substitution techniques like the Caesar cipher and transposition techniques like the rail fence cipher.
2) It also covers the one-time pad cipher and its requirements for security as well as steganography techniques for hiding messages.
3) Cryptanalysis methods like brute force attacks and cryptanalytic attacks are explained for analyzing encryption algorithms.
Substitution techniques
- Substitution techniques involve replacing the letters of plaintext with other letters, numbers or symbols. The main substitution techniques are Caesar cipher, monoalphabetic cipher, Playfair cipher and Hill cipher.
- The Caesar cipher replaces each letter with the letter three positions down the alphabet. The monoalphabetic cipher uses a single alphabetic key for the entire message. The Playfair cipher encrypts pairs of letters based on a 5x5 grid generated from a keyword. The Hill cipher encrypts blocks of letters as numerical values using a matrix-based approach.
CNS ASSIGNMENT 2 TEAM 1.pptx
This document describes models for network security. It discusses a generic model where principals communicate across the internet using protocols like TCP/IP. To protect information, security techniques add a transformation like encryption and rely on secret shared information like keys. A trusted third party can help distribute secrets. The document also presents a network access security model to prevent unwanted access through gatekeeper functions like login credentials and antivirus software to block exploits. The overall goal is to design algorithms, generate secrets, distribute secrets securely, and specify protocols for security services.
Module 1.pptx
This document provides an introduction to network security. It discusses how computer data can be at risk when traveling between computers unless protected by cryptography. It defines computer security, network security, and internet security. Network security aims to ensure optimal machine functioning and restrict user access rights. Advantages include protecting client data and shared information. The document outlines security requirements like confidentiality, integrity, availability, and authentication. It also discusses challenges of security and provides an overview of the network security model and intrusion detection systems.
More Related Content
What's hot
Ecg analysis in the cloud
ECG analysis in the cloud allows for remote monitoring of patients' heartbeats without visiting the hospital. Sensors attached to patients measure their ECG and transmit the data via Bluetooth to mobile devices and the cloud for analysis. This analysis is done as a cloud service across infrastructure, platform, and software layers. The cloud provides elastic resources and near real-time analysis, allowing doctors to monitor more patients without large local computing infrastructures.
Edge detection
The document discusses edge detection methods including gradient based approaches like Sobel and zero crossing based techniques like Laplacian of Gaussian. It proposes a new algorithm that applies fuzzy logic to the results of gradient and zero crossing edge detection on an image to more accurately identify edges. The algorithm calculates gradient and zero crossings, applies fuzzy rules to classify pixels, and thresholds to determine final edge pixels.
Hit and-miss transform
The hit-and-miss transform is a binary morphological operation that can detect particular patterns in an image. It uses a structuring element containing foreground and background pixels to search an image. If the structuring element pattern matches the image pixels underneath, the output pixel is set to foreground, otherwise it is set to background. The hit-and-miss transform can find features like corners, endpoints, and junctions and is used to implement other morphological operations like thinning and thickening. It is performed by matching the structuring element at all points in the image.
Steganography Project
This document provides an overview of steganography. It discusses how steganography hides messages within carriers so that the message is concealed. The document then discusses the history of steganography dating back to ancient Greece. It also discusses modern uses of steganography during the Cold War and by terrorist groups. The document outlines the objectives of the study which are to provide security during message transmission. It then discusses steganography techniques like the LSB algorithm and provides snapshots of its implementation. Finally, it discusses the results of using LSB steganography and concludes with possibilities for further enhancement.
Cloud computing protocol
This document discusses cloud computing protocols. It begins by defining cloud computing as using remote servers over the internet to store and access data and applications. The cloud is broken into three categories: applications, storage, and connectivity. Protocols are then defined as sets of rules that allow electronic devices to connect and exchange information. Ten specific protocols are described: Gossip protocol for failure detection and messaging; Connectionless network protocol for fragmentation; State routing protocol for path selection; Internet group management protocol for multicasting; Secure shell protocol for secure remote login; Coverage enhanced ethernet protocol for network traffic handling; Extensible messaging and presence protocol for publish/subscribe systems; Advanced message queuing protocol for point-to-point messaging; Enhanced interior
Elliptic Curve Cryptography
This presentation contains the contents pertaining to the undergraduate course on Cryptography and Network Security (UITC203) at Sri Ramakrishna Institute of Technology. This covers the Elliptic Curve Cryptography and the basis of elliptic curve arithmetics.
MACs based on Hash Functions, MACs based on Block Ciphers
This document discusses message authentication codes (MACs) based on hash functions and block ciphers. It describes Hash-based MACs (HMAC) which uses a cryptographic hash function combined with a secret key to authenticate messages. HMAC provides integrity and authentication using public/private keys. The document also covers MACs based on block ciphers, specifically the Data Authentication Algorithm (DAA) which is based on DES-CBC, and Cipher-based MAC (CMAC) which fixes security issues with CBC-MAC and can use existing encryption functions to resist attacks. CMAC chains the cipher and XORs the message blocks to generate the authentication tag.
distributed Computing system model
This document discusses different distributed computing system (DCS) models:
1. The minicomputer model consists of a few minicomputers with remote access allowing resource sharing.
2. The workstation model consists of independent workstations scattered throughout a building where users log onto their home workstation.
3. The workstation-server model includes minicomputers, diskless and diskful workstations, and centralized services like databases and printing.
It provides an overview of the key characteristics and advantages of different DCS models.
CS6601 DISTRIBUTED SYSTEMS
UNIT V PROCESS & RESOURCE MANAGEMENT 9
Process Management: Process Migration: Features, Mechanism – Threads: Models, Issues, Implementation. Resource Management: Introduction- Features of Scheduling Algorithms –Task Assignment Approach – Load Balancing Approach – Load Sharing Approach.
SECRY - Secure file storage on cloud using hybrid cryptography
Final project presentation of Final year B.tech CSE Project APJ Abdul Kalam Technological University.
About the project
Cloud computing has now become a major trend, it is a new data hosting technology that is very popular in recent years. In this project, we are developing an web application that can securely store the files to a cloud server. We proposes a system that uses hybrid cryptography technique to securely store the data in cloud. The hybrid approach when deployed in cloud environment makes the remote server more secure and thus, helps the users to fetch more trust of their data in the cloud. For data security and privacy protection issues, the fundamental challenge of separation of sensitive data and access control is fulfilled. Cryptography technique translates original data into unreadable format. This technique uses keys for translate data into unreadable form. So only authorized person can access data from cloud server.
We provide a cloud storage that uses multiple crypotraphic technique which is known by hybrid cryptography. The product provides confidentiality by using security for both upload and download. The data will be secured since we use multi level security techniques and multiple servers for storage.
Distributed file systems chapter 9
This chapter deals with the various concepts ind distributed file systems text authored by Pradeep K, Sinha
Distributed shred memory architecture
Distributed shared memory (DSM) is a memory architecture where physically separate memories can be addressed as a single logical address space. In a DSM system, data moves between nodes' main and secondary memories when a process accesses shared data. Each node has a memory mapping manager that maps the shared virtual memory to local physical memory. DSM provides advantages like shielding programmers from message passing, lower cost than multiprocessors, and large virtual address spaces, but disadvantages include potential performance penalties from remote data access and lack of programmer control over messaging.
Network security model.pptx
Network security involves protecting networks from unauthorized access and risks. It is important for network administrators to take preventive measures to secure networks used by individuals, businesses, and governments. There are various types of network security devices that fulfill different functions like blocking surplus traffic (active devices), identifying unwanted traffic (passive devices), and scanning for potential problems (preventative devices). Firewalls are a key example of an active device that establishes a barrier between internal and external networks and regulates incoming and outgoing traffic.
Market oriented Cloud Computing
This document discusses the vision, hype and reality of delivering IT services as computing utilities. It outlines the need for a market oriented cloud architecture to regulate supply and demand of cloud resources. Emerging cloud platforms like Amazon EC2, Google App Engine, Microsoft Live Mesh and Sun Grid are presented. The limitations of present cloud service providers are discussed. Finally, the concept of a Global Cloud Exchange is proposed to address these limitations through features like a market directory, banking system, brokers and price setting mechanisms.
secure file storage on cloud using hybrid Cryptography ppt.pptx
The document proposes a system for secure file storage on cloud using hybrid cryptography. It uses AES, 3DES and RC6 algorithms to encrypt files before uploading to the cloud. This provides higher security than using a single encryption algorithm. The system allows users to register, login, encrypt files, upload encrypted files to cloud, request files from cloud, decrypt files. It aims to provide secure data storage with less encryption/decryption time compared to existing systems.
Security Attacks.ppt
This document discusses different types of cyber attacks including passive attacks like eavesdropping and masquerading, active attacks like denial of service, and methods attackers use like spoofing, backdoors, brute force attacks, and dictionary attacks. It provides details on how each attack compromises security through unauthorized access, modification of data, denial of service, or repudiation.
The motion estimation
Introduction to Digital Videos, Motion Estimation: Principles & Compensation. Learn more in IIT Kharagpur's Image and Video Communication online certificate course.
Steganography
The document provides an overview of steganography, including its definition, history, techniques, applications, and future scope. It discusses different types of steganography such as text, image, and audio steganography. For image steganography, it describes techniques such as LSB insertion and compares image and transform domain methods. It also provides examples of steganography tools and their usage for confidential communication and data protection.
Symmetric Cipher Model, Substitution techniques, Transposition techniques, St...
1) The document discusses symmetric encryption techniques including the symmetric cipher model, substitution techniques like the Caesar cipher and transposition techniques like the rail fence cipher.
2) It also covers the one-time pad cipher and its requirements for security as well as steganography techniques for hiding messages.
3) Cryptanalysis methods like brute force attacks and cryptanalytic attacks are explained for analyzing encryption algorithms.
Substitution techniques
- Substitution techniques involve replacing the letters of plaintext with other letters, numbers or symbols. The main substitution techniques are Caesar cipher, monoalphabetic cipher, Playfair cipher and Hill cipher.
- The Caesar cipher replaces each letter with the letter three positions down the alphabet. The monoalphabetic cipher uses a single alphabetic key for the entire message. The Playfair cipher encrypts pairs of letters based on a 5x5 grid generated from a keyword. The Hill cipher encrypts blocks of letters as numerical values using a matrix-based approach.
What's hot (20)
MACs based on Hash Functions, MACs based on Block Ciphers
MACs based on Hash Functions, MACs based on Block Ciphers
SECRY - Secure file storage on cloud using hybrid cryptography
SECRY - Secure file storage on cloud using hybrid cryptography
secure file storage on cloud using hybrid Cryptography ppt.pptx
secure file storage on cloud using hybrid Cryptography ppt.pptx
Symmetric Cipher Model, Substitution techniques, Transposition techniques, St...
Symmetric Cipher Model, Substitution techniques, Transposition techniques, St...
Similar to Information and network security 9 model for network security
CNS ASSIGNMENT 2 TEAM 1.pptx
This document describes models for network security. It discusses a generic model where principals communicate across the internet using protocols like TCP/IP. To protect information, security techniques add a transformation like encryption and rely on secret shared information like keys. A trusted third party can help distribute secrets. The document also presents a network access security model to prevent unwanted access through gatekeeper functions like login credentials and antivirus software to block exploits. The overall goal is to design algorithms, generate secrets, distribute secrets securely, and specify protocols for security services.
Module 1.pptx
This document provides an introduction to network security. It discusses how computer data can be at risk when traveling between computers unless protected by cryptography. It defines computer security, network security, and internet security. Network security aims to ensure optimal machine functioning and restrict user access rights. Advantages include protecting client data and shared information. The document outlines security requirements like confidentiality, integrity, availability, and authentication. It also discusses challenges of security and provides an overview of the network security model and intrusion detection systems.
CNS Unit-I_final.ppt
The document discusses network security and cryptography. It provides an overview of security concepts like attacks, services, defense methods, and models. It defines information security, why it is important, and common security attacks like interruption, interception, modification, and fabrication. It also discusses security goals of confidentiality, integrity, and availability. Cryptography techniques like symmetric and asymmetric encryption are introduced along with concepts like plaintext, ciphertext, encryption, decryption, and cryptanalysis.
Flow of presentationAbstractIntroductionMethodologiesRes.docx
Flow of presentation
Abstract
Introduction
Methodologies
Results
Conclusion
References
Abstract
In today's world, having data safeguarded is the most important thing that any company or organization should accomplish. In this research, we will discuss what goes into an ' Encryption based access control system is superior to non-encrypted AC systems,' providing data security or authorized access within the control system using encryption techniques. Data storage and sharing applications may cause data information owners to fail to control the data access. In this paper, we will be presenting how the Encryption approach is designed to limit the user permissions to a system that could make access system models more flexible. In this paper, we will be researching mainly on how to involve encryption in access control systems. The research will be based on the different encryption techniques used like symmetrical and asymmetrical models, different types of access control systems, different types of security systems, types of threats that can happen, different terminology involved with the encryption and access controls. The results show that encryption-based access control systems can effectively improve data security and reduce unauthorized user access in any business application.
Keywords: Encryption, Access control, Public Key Infrastructure
introduction
When it comes to protect sensitive data is to be discussed, the concern of integrators was to simply stop unauthorized user access.
Any unauthorized user access or attacks to control systems leads to major risk / damage for any organization data, such as unauthorized employee being access to control server rooms, hackers able to logging to cloud databases.
Common method is to providing extra secured authorization layer to the user. And to protect user data using encryption and authorization.
introduction
Encryption is the art of secret writing. It is the process of encoding or converting the plaintext to ciphertext. It uses an algorithm or key.
The building blocks: Authentication, Integrity and Non-repudiation.
Encryption techniques must be applied into AC systems to protect the data confidentiality by limiting the user access and user permissions.
Juan M. Marın Perez, Gregorio Martınez Perez, Antonio F. Skarmeta Gomez [2] operates on motion data This research will show literature survey on various encryption algorithms methods used in protecting sensitive data and avoiding unauthorized user access.
findings
The most key finding of research:
We described how encryption-based AC systems are more beneficial over non-encrypted systems.
Encryption algorithm incorporated into the backend systems to limit the user permissions, so that avoid any data modifications and data security
Various Encryption models is designed to limit the user permissions to a system that could make access system models more flexible
Few drawbacks of using non-encryption and possible risks and possible attacks.
M.
Methodology for Deriving and Integrating Countermeasures Design Models for El...
Methodology for Deriving and Integrating Countermeasures Design Models for El...International Journal of Science and Research (IJSR)
In this paper, we provide a detailed description of methodology for deriving and applying Electronic Commerce (EC) security countermeasures design models from the existing IT standards. Our goal is to describe a model-based approach of how to extend such a model or “specialize” it in order to apply it to e-commerce systems.
I MSc CS CNS Day 1.pptx
The document discusses the objectives and syllabus of a Cryptography and Network Security course. The objectives are to understand access control models, encryption techniques, block ciphers like DES and AES, public key cryptography, message authentication, hash functions, and web, email and firewall security. The syllabus covers topics like classical encryption techniques, symmetric cipher models, security services like confidentiality, authentication, access control and availability, and security attacks. It also discusses trends in internet vulnerabilities and security incidents reported to CERT.
Identity-Based Key Management in MANETs Using Public Key Cryptography
Wireless mobile Ad Hoc Networks (MANETs) are an emerging area of mobile computing. MANETs face serious security problems due to their unique characteristics such as mobility, dynamic topology and lack of central infrastructure support. In conventional networks, deploying a robust and reliable security scheme such as Public Key Infrastructure (PKI) requires a central authority or trusted third party to provide fundamental security services including digital certificates, authentication and encryption. In the proposed scheme, a secure identity-based key management scheme is proposed for networks in environments without any PKI. This scheme solved the security problem in the MANET and is suitable for application to other wired network structures
SYMMETRIC-KEY BASED PRIVACYPRESERVING SCHEME FOR MINING SUPPORT COUNTS
In this paper we study the problem of mining support counts using symmetric-key crypto which is more
efficient than previous work. Consider a scenario that each user has an option (like or unlike) of the
specified product, and a third party wants to obtain the popularity of this product. We design a much more
efficient privacy-preserving scheme for users to prevent the loss of the personal interests. Unlike most
previous works, we do not use any exponential or modular algorithms, but we provide a symmetric-key
based method which can also protect the information. Specifically, our protocol uses a third party that
generates a number of matrixes as each user’s key. Then user uses these key to encrypt their data which is
more efficient to obtain the support counts of a given pattern.
Information and network security 3 security challenges
Misconfiguration. Misconfigurations of cloud security settings are a leading cause of cloud data breaches.
Unauthorized Access.
Insecure Interfaces/APIs.
Hijacking of Accounts.
Lack of Visibility.
External Sharing of Data.
Malicious Insiders.
Cyberattacks
Cryptography introduction
This document provides information about a cryptography course including:
- The course name, code, credits, program, and instructor details
- An overview of the course units covering introduction to cryptography, security goals, cryptographic attacks, security services and mechanisms, traditional symmetric key techniques, and more
- Descriptions of topics within each unit including different types of cryptographic attacks, security services like confidentiality and integrity, security mechanisms like encryption and digital signatures, and categories of traditional ciphers like substitution and transposition ciphers
Lessson 1
This document section discusses technical security controls like firewalls and VPNs. It covers access control methods, authentication factors, authorization processes, and accountability through logging. Firewalls are described as protecting networks by filtering packets between trusted and untrusted networks. Packet-filtering firewalls examine packet headers to enforce rules on IP addresses and ports. Stateful inspection firewalls also track the state of network connections.
International journal of computer science and innovation vol 2015-n2-paper4
This document provides an overview of cloud computing security issues. It discusses the security concerns associated with different cloud deployment models (public, private, community, hybrid) and service models (SaaS, PaaS, IaaS). For each model, it identifies key security risks such as multi-tenancy issues, access control, virtualization exploits, identity management challenges, and lack of data redundancy. The document serves as a survey of prominent security risks in cloud computing and how these risks manifest depending on the deployment architecture and services provided.
Iaetsd a survey on cloud storage security with
This document discusses signcryption as a method for secure cloud storage. It begins with an abstract that introduces signcryption as a public key cryptographic method that achieves confidentiality and unforgeability with less overhead than digital signatures followed by encryption. The introduction provides more details on signcryption and its advantages over separate signing and encryption. It then discusses related work on address-based cryptography, key aggregate cryptography, and time-bound hierarchical key assignment schemes. The document focuses on how signcryption can provide high security for sharing data through cloud storage.
Design of Hybrid Cryptography Algorithm for Secure Communication
This document proposes a hybrid cryptography model to securely transmit information between parties. It aims to achieve confidentiality, authentication, and integrity simultaneously. The proposed model uses a combination of symmetric and asymmetric encryption algorithms. Specifically, it uses Diffie-Hellman key exchange for key agreement, RSA and private key encryption for authentication and confidentiality, SHA-1 for integrity verification, and RC5 symmetric encryption for encrypting the ciphertext and message digest. The model encrypts data using a symmetric key, then encrypts that symmetric key using the receiver's public key for transmission. This allows the receiver to decrypt the symmetric key using their private key and then decrypt the message for authentication and confidentiality.
Single sign on mechanism for distributed computing
IJRET : International Journal of Research in Engineering and Technology is an international peer reviewed, online journal published by eSAT Publishing House for the enhancement of research in various disciplines of Engineering and Technology. The aim and scope of the journal is to provide an academic medium and an important reference for the advancement and dissemination of research results that support high-level learning, teaching and research in the fields of Engineering and Technology. We bring together Scientists, Academician, Field Engineers, Scholars and Students of related fields of Engineering and Technology
Unit-1.pptx
The document discusses various topics in network security including:
1. It describes the OSI security architecture and defines security attacks, mechanisms, and services.
2. It covers different types of security attacks like passive attacks and active attacks.
3. It discusses security services like authentication, access control, data confidentiality, and data integrity.
4. It provides an overview of classical encryption techniques like symmetric ciphers, substitution ciphers, transposition ciphers, and steganography.
Chapter 1 Introduction of Cryptography and Network security
(1) Cryptography and network security are important topics that involve terminology like plaintext, ciphertext, encryption, decryption, and cryptanalysis. (2) The document discusses principles of security like confidentiality, integrity, authentication, non-repudiation, and availability and how attacks can compromise them. (3) It also covers security services, mechanisms, and models in the OSI standard to enhance security and counter different types of security attacks.
Network Security Fundamentals
A 5-part course on network security from cryptographic algorithms to secure communications protocols.
cns unit 1.pptx
The document outlines the syllabus for a course on cryptography and network security. It discusses key topics that will be covered including cryptographic algorithms, network security concepts, security services, security mechanisms, and types of security attacks. The goal is for students to understand the fundamentals of network security and how to apply cryptographic techniques and authentication schemes to secure applications and networks.
CISSP - Chapter 3 - System security architecture
The document discusses several key concepts related to security engineering including the trusted computing base (TCB), security perimeter, reference monitor, security kernel, security models, and covert channels. It provides definitions and explanations of these concepts. For example, it defines the TCB as the collection of hardware, software, and firmware components that provide security controls and enforce the system security policy. It also explains that the reference monitor is an abstract machine that mediates all access subjects have to objects.
Similar to Information and network security 9 model for network security (20)
Flow of presentationAbstractIntroductionMethodologiesRes.docx
Flow of presentationAbstractIntroductionMethodologiesRes.docx
Methodology for Deriving and Integrating Countermeasures Design Models for El...
Methodology for Deriving and Integrating Countermeasures Design Models for El...
Identity-Based Key Management in MANETs Using Public Key Cryptography
Identity-Based Key Management in MANETs Using Public Key Cryptography
SYMMETRIC-KEY BASED PRIVACYPRESERVING SCHEME FOR MINING SUPPORT COUNTS
SYMMETRIC-KEY BASED PRIVACYPRESERVING SCHEME FOR MINING SUPPORT COUNTS
Information and network security 3 security challenges
Information and network security 3 security challenges
International journal of computer science and innovation vol 2015-n2-paper4
International journal of computer science and innovation vol 2015-n2-paper4
Design of Hybrid Cryptography Algorithm for Secure Communication
Design of Hybrid Cryptography Algorithm for Secure Communication
Single sign on mechanism for distributed computing
Single sign on mechanism for distributed computing
Chapter 1 Introduction of Cryptography and Network security
Chapter 1 Introduction of Cryptography and Network security
More from Vaibhav Khanna
Information and network security 47 authentication applications
Kerberos provides a centralized authentication server whose function is to authenticate users to servers and servers to users. In Kerberos Authentication server and database is used for client authentication. Kerberos runs as a third-party trusted server known as the Key Distribution Center (KDC).
Information and network security 46 digital signature algorithm
The Digital Signature Algorithm (DSA) is a Federal Information Processing Standard for digital signatures, based on the mathematical concept of modular exponentiation and the discrete logarithm problem. DSA is a variant of the Schnorr and ElGamal signature schemes
Information and network security 45 digital signature standard
The Digital Signature Standard is a Federal Information Processing Standard specifying a suite of algorithms that can be used to generate digital signatures established by the U.S. National Institute of Standards and Technology in 1994
Information and network security 44 direct digital signatures
The Direct Digital Signature is only include two parties one to send message and other one to receive it. According to direct digital signature both parties trust each other and knows there public key. The message are prone to get corrupted and the sender can declines about the message sent by him any time
Information and network security 43 digital signatures
Digital signatures are the public-key primitives of message authentication. In the physical world, it is common to use handwritten signatures on handwritten or typed messages. ... Digital signature is a cryptographic value that is calculated from the data and a secret key known only by the signer
Information and network security 42 security of message authentication code
Message Authentication Requirements
Disclosure: Release of message contents to any person or process not possess- ing the appropriate cryptographic key.
Traffic analysis: Discovery of the pattern of traffic between parties. ...
Masquerade: Insertion of messages into the network from a fraudulent source
Information and network security 41 message authentication code
Message authentication aims to protect integrity, validate originator identity, and provide non-repudiation. It addresses threats like masquerading, content or sequence modification, and source/destination repudiation. A Message Authentication Code (MAC) provides assurance that a message is unaltered and from the sender by appending a cryptographic checksum to the message dependent on the key and content. The receiver can validate the MAC to verify integrity and authenticity.
Information and network security 40 sha3 secure hash algorithm
SHA-3 is the latest member of the Secure Hash Algorithm family of standards, released by NIST on August 5, 2015. Although part of the same series of standards, SHA-3 is internally different from the MD5-like structure of SHA-1 and SHA-2
Information and network security 39 secure hash algorithm
The Secure Hash Algorithm (SHA) is a cryptographic hash function developed by the US National Security Agency. SHA-512 is the latest version that produces a 512-bit hash value. It processes message blocks of 1024 bits using an 80-step compression function that updates a 512-bit buffer. Each step uses a 64-bit value derived from the message and a round constant. SHA-512 supports messages up to 2^128 bits in length and adds between 1 and 1023 padding bits as needed.
Information and network security 38 birthday attacks and security of hash fun...
Birthday attack can be used in communication abusage between two or more parties. ... The mathematics behind this problem led to a well-known cryptographic attack called the birthday attack, which uses this probabilistic model to reduce the complexity of cracking a hash function
Information and network security 37 hash functions and message authentication
Message Authentication Code ... A message authentication code (MAC) is similar to a cryptographic hash, except that it is based on a secret key
Information and network security 35 the chinese remainder theorem
In number theory, the Chinese remainder theorem states that if one knows the remainders of the Euclidean division of an integer n by several integers, then one can determine uniquely the remainder of the division of n by the product of these integers, under the condition that the divisors are pairwise coprime.
Information and network security 34 primality
A primality test is an algorithm for determining whether an input number is prime. Among other fields of mathematics, it is used for cryptography. Unlike integer factorization, primality tests do not generally give prime factors, only stating whether the input number is prime or not
Information and network security 33 rsa algorithm
RSA algorithm is asymmetric cryptography algorithm. Asymmetric actually means that it works on two different keys i.e. Public Key and Private Key. As the name describes that the Public Key is given to everyone and Private key is kept private
Information and network security 32 principles of public key cryptosystems
Public-key cryptography, or asymmetric cryptography, is an encryption scheme that uses two mathematically related, but not identical, keys - a public key and a private key. Unlike symmetric key algorithms that rely on one key to both encrypt and decrypt, each key performs a unique function.
Information and network security 31 public key cryptography
Public-key cryptography, or asymmetric cryptography, is a cryptographic system that uses pairs of keys: public keys, and private keys. The generation of such key pairs depends on cryptographic algorithms which are based on mathematical problems termed one-way function
Information and network security 30 random numbers
Random numbers are fundamental building blocks of cryptographic systems and as such, play a key role in each of these elements. Random numbers are used to inject unpredictable or non-deterministic data into cryptographic algorithms and protocols to make the resulting data streams unrepeatable and virtually unguessable
Information and network security 29 international data encryption algorithm
International Data Encryption Algorithm (IDEA) is a once-proprietary free and open block cipher that was once intended to replace Data Encryption Standard (DES). IDEA has been and is optionally available for use with Pretty Good Privacy (PGP). IDEA has been succeeded by the IDEA NXT algorithm
Information and network security 28 blowfish
Blowfish is a symmetric block cipher designed as a replacement for DES. It encrypts data in 64-bit blocks using a variable-length key. The algorithm uses substitution boxes and a complex key schedule to encrypt the data in multiple rounds. It is very fast, uses little memory, and is resistant to cryptanalysis due to its complex key schedule and substitution boxes.
Information and network security 27 triple des
Part of what Triple DES does is to protect against brute force attacks. The original DES symmetric encryption algorithm specified the use of 56-bit keys -- not enough, by 1999, to protect against practical brute force attacks. Triple DES specifies the use of three distinct DES keys, for a total key length of 168 bits
More from Vaibhav Khanna (20)
Information and network security 47 authentication applications
Information and network security 47 authentication applications
Information and network security 46 digital signature algorithm
Information and network security 46 digital signature algorithm
Information and network security 45 digital signature standard
Information and network security 45 digital signature standard
Information and network security 44 direct digital signatures
Information and network security 44 direct digital signatures
Information and network security 43 digital signatures
Information and network security 43 digital signatures
Information and network security 42 security of message authentication code
Information and network security 42 security of message authentication code
Information and network security 41 message authentication code
Information and network security 41 message authentication code
Information and network security 40 sha3 secure hash algorithm
Information and network security 40 sha3 secure hash algorithm
Information and network security 39 secure hash algorithm
Information and network security 39 secure hash algorithm
Information and network security 38 birthday attacks and security of hash fun...
Information and network security 38 birthday attacks and security of hash fun...
Information and network security 37 hash functions and message authentication
Information and network security 37 hash functions and message authentication
Information and network security 35 the chinese remainder theorem
Information and network security 35 the chinese remainder theorem
Information and network security 32 principles of public key cryptosystems
Information and network security 32 principles of public key cryptosystems
Information and network security 31 public key cryptography
Information and network security 31 public key cryptography
Information and network security 30 random numbers
Information and network security 30 random numbers
Information and network security 29 international data encryption algorithm
Information and network security 29 international data encryption algorithm
Recently uploaded
Atelier - Innover avec l’IA Générative et les graphes de connaissances
Atelier - Innover avec l’IA Générative et les graphes de connaissances
Allez au-delà du battage médiatique autour de l’IA et découvrez des techniques pratiques pour utiliser l’IA de manière responsable à travers les données de votre organisation. Explorez comment utiliser les graphes de connaissances pour augmenter la précision, la transparence et la capacité d’explication dans les systèmes d’IA générative. Vous partirez avec une expérience pratique combinant les relations entre les données et les LLM pour apporter du contexte spécifique à votre domaine et améliorer votre raisonnement.
Amenez votre ordinateur portable et nous vous guiderons sur la mise en place de votre propre pile d’IA générative, en vous fournissant des exemples pratiques et codés pour démarrer en quelques minutes.
Hand Rolled Applicative User Validation Code Kata
Could you use a simple piece of Scala validation code (granted, a very simplistic one too!) that you can rewrite, now and again, to refresh your basic understanding of Applicative operators <*>, <*, *>?
The goal is not to write perfect code showcasing validation, but rather, to provide a small, rough-and ready exercise to reinforce your muscle-memory.
Despite its grandiose-sounding title, this deck consists of just three slides showing the Scala 3 code to be rewritten whenever the details of the operators begin to fade away.
The code is my rough and ready translation of a Haskell user-validation program found in a book called Finding Success (and Failure) in Haskell - Fall in love with applicative functors.
Requirement Traceability in Xen Functional Safety
Using OpenFastTrace to trace requirements in Xen functional safety
Energy consumption of Database Management - Florina Jonuzi
Presentation from Florina Jonuzi at the GSD Community Stage Meetup on June 06, 2024
Using Query Store in Azure PostgreSQL to Understand Query Performance
Microsoft has added an excellent new extension in PostgreSQL on their Azure Platform. This session, presented at Posette 2024, covers what Query Store is and the types of information you can get out of it.
How to write a program in any programming language
How to write a program in any programming language
Oracle Database 19c New Features for DBAs and Developers.pptx
Oracle Database 19c New Features for DBAs and Developers. This video you can watch from my youtube channel at https://youtu.be/m-F-mZA3MkU
Transform Your Communication with Cloud-Based IVR Solutions
Discover the power of Cloud-Based IVR Solutions to streamline communication processes. Embrace scalability and cost-efficiency while enhancing customer experiences with features like automated call routing and voice recognition. Accessible from anywhere, these solutions integrate seamlessly with existing systems, providing real-time analytics for continuous improvement. Revolutionize your communication strategy today with Cloud-Based IVR Solutions. Learn more at: https://thesmspoint.com/channel/cloud-telephony
E-Invoicing Implementation: A Step-by-Step Guide for Saudi Arabian Companies
Explore the seamless transition to e-invoicing with this comprehensive guide tailored for Saudi Arabian businesses. Navigate the process effortlessly with step-by-step instructions designed to streamline implementation and enhance efficiency.
Automated software refactoring with OpenRewrite and Generative AI.pptx.pdf
https://2024.springio.net/sessions/automated-software-refactoring-with-openrewrite-and-generative-ai/
Measures in SQL (SIGMOD 2024, Santiago, Chile)
SQL has attained widespread adoption, but Business Intelligence tools still use their own higher level languages based upon a multidimensional paradigm. Composable calculations are what is missing from SQL, and we propose a new kind of column, called a measure, that attaches a calculation to a table. Like regular tables, tables with measures are composable and closed when used in queries.
SQL-with-measures has the power, conciseness and reusability of multidimensional languages but retains SQL semantics. Measure invocations can be expanded in place to simple, clear SQL.
To define the evaluation semantics for measures, we introduce context-sensitive expressions (a way to evaluate multidimensional expressions that is consistent with existing SQL semantics), a concept called evaluation context, and several operations for setting and modifying the evaluation context.
A talk at SIGMOD, June 9–15, 2024, Santiago, Chile
Authors: Julian Hyde (Google) and John Fremlin (Google)
https://doi.org/10.1145/3626246.3653374
SMS API Integration in Saudi Arabia| Best SMS API Service
Discover the benefits and implementation of SMS API integration in the UAE and Middle East. This comprehensive guide covers the importance of SMS messaging APIs, the advantages of bulk SMS APIs, and real-world case studies. Learn how CEQUENS, a leader in communication solutions, can help your business enhance customer engagement and streamline operations with innovative CPaaS, reliable SMS APIs, and omnichannel solutions, including WhatsApp Business. Perfect for businesses seeking to optimize their communication strategies in the digital age.
Neo4j - Product Vision and Knowledge Graphs - GraphSummit Paris
Dr. Jesús Barrasa, Head of Solutions Architecture for EMEA, Neo4j
Découvrez les dernières innovations de Neo4j, et notamment les dernières intégrations cloud et les améliorations produits qui font de Neo4j un choix essentiel pour les développeurs qui créent des applications avec des données interconnectées et de l’IA générative.
How Can Hiring A Mobile App Development Company Help Your Business Grow?
ToXSL Technologies is an award-winning Mobile App Development Company in Dubai that helps businesses reshape their digital possibilities with custom app services. As a top app development company in Dubai, we offer highly engaging iOS & Android app solutions. https://rb.gy/necdnt
Graspan: A Big Data System for Big Code Analysis
We built a disk-based parallel graph system, Graspan, that uses a novel edge-pair centric computation model to compute dynamic transitive closures on very large program graphs.
We implement context-sensitive pointer/alias and dataflow analyses on Graspan. An evaluation of these analyses on large codebases such as Linux shows that their Graspan implementations scale to millions of lines of code and are much simpler than their original implementations.
These analyses were used to augment the existing checkers; these augmented checkers found 132 new NULL pointer bugs and 1308 unnecessary NULL tests in Linux 4.4.0-rc5, PostgreSQL 8.3.9, and Apache httpd 2.2.18.
- Accepted in ASPLOS ‘17, Xi’an, China.
- Featured in the tutorial, Systemized Program Analyses: A Big Data Perspective on Static Analysis Scalability, ASPLOS ‘17.
- Invited for presentation at SoCal PLS ‘16.
- Invited for poster presentation at PLDI SRC ‘16.
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
Charla impartida en el evento de "KuberTENes Birthday Bash Guadalajara" para celebrar el 10mo. aniversario de Kubernetes #kuberTENes #celebr8k8s #k8s
Microservice Teams - How the cloud changes the way we work
A lot of technical challenges and complexity come with building a cloud-native and distributed architecture. The way we develop backend software has fundamentally changed in the last ten years. Managing a microservices architecture demands a lot of us to ensure observability and operational resiliency. But did you also change the way you run your development teams?
Sven will talk about Atlassian’s journey from a monolith to a multi-tenanted architecture and how it affected the way the engineering teams work. You will learn how we shifted to service ownership, moved to more autonomous teams (and its challenges), and established platform and enablement teams.
Recently uploaded (20)
Atelier - Innover avec l’IA Générative et les graphes de connaissances
Atelier - Innover avec l’IA Générative et les graphes de connaissances
Energy consumption of Database Management - Florina Jonuzi
Energy consumption of Database Management - Florina Jonuzi
Using Query Store in Azure PostgreSQL to Understand Query Performance
Using Query Store in Azure PostgreSQL to Understand Query Performance
How to write a program in any programming language
How to write a program in any programming language
Oracle Database 19c New Features for DBAs and Developers.pptx
Oracle Database 19c New Features for DBAs and Developers.pptx
Transform Your Communication with Cloud-Based IVR Solutions
Transform Your Communication with Cloud-Based IVR Solutions
E-Invoicing Implementation: A Step-by-Step Guide for Saudi Arabian Companies
E-Invoicing Implementation: A Step-by-Step Guide for Saudi Arabian Companies
Automated software refactoring with OpenRewrite and Generative AI.pptx.pdf
Automated software refactoring with OpenRewrite and Generative AI.pptx.pdf
SMS API Integration in Saudi Arabia| Best SMS API Service
SMS API Integration in Saudi Arabia| Best SMS API Service
Neo4j - Product Vision and Knowledge Graphs - GraphSummit Paris
Neo4j - Product Vision and Knowledge Graphs - GraphSummit Paris
How Can Hiring A Mobile App Development Company Help Your Business Grow?
How Can Hiring A Mobile App Development Company Help Your Business Grow?
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
Microservice Teams - How the cloud changes the way we work
Microservice Teams - How the cloud changes the way we work
Information and network security 9 model for network security
- 1. Information and Network Security:9 Model for Network Security Prof Neeraj Bhargava Vaibhav Khanna Department of Computer Science School of Engineering and Systems Sciences Maharshi Dayanand Saraswati University Ajmer
- 2. Model for Network Security
- 3. Model for Network Security • In considering the place of encryption, its useful to use the following two models • The first, illustrated in Figure models information being transferred from one party to another over an insecure communications channel, in the presence of possible opponents. • The two parties, who are the principals in this transaction, must cooperate for the exchange to take place.
- 4. • They can use an appropriate security transform (encryption algorithm), with suitable keys, possibly negotiated using the presence of a trusted third party. • Parts One through Four of this book concentrates on the types of security mechanisms and services that fit into the model shown here.
- 5. Model for Network Security using this model requires us to: 1. design a suitable algorithm for the security transformation 2. generate the secret information (keys) used by the algorithm 3. develop methods to distribute and share the secret information 4. specify a protocol enabling the principals to use the transformation and secret information for a security service This general model shows that there are four basic tasks in designing a particular security service, as listed.
- 6. Model for Network Access Security
- 7. Model for Network Access Security • The second model is concerned with controlled access to information or resources on a computer system, in the presence of possible opponents. Here appropriate controls are needed on the access to and within the system, to provide suitable security.
- 8. Model for Network Access Security • The security mechanisms needed to cope with unwanted access fall into two broad categories. • The first category might be termed a gatekeeper function. • It includes password-based login procedures that are designed to deny access to all but authorized users and screening logic that is designed to detect and reject worms, viruses, and other similar attacks. • Once either an unwanted user or unwanted software gains access, the second line of defense consists of a variety of internal controls that monitor activity and analyze stored information in an attempt to detect the presence of unwanted intruders.
- 9. Model for Network Access Security using this model requires us to: 1. select appropriate gatekeeper functions to identify users 2. implement security controls to ensure only authorised users access designated information or resources
- 10. Assignment • Draw and describe the model for network security