Chapter 1: Introduction (1)

Objectives of Chapter 1: To define three security goals; to define security attacks that threaten security goals; to define security services and how they are related to the three security goals; to define security mechanisms to provide security services; to introduce two techniques, cryptography and steganography, to implement security mechanisms
Nội dung trích xuất từ tài liệu:
Chapter 1: Introduction (1) Chapter 1 Objectives To define three security goals To define security attacks that threaten security goals Chapter 1 To define security services and how they are related to the three security goals Introduction To define security mechanisms to provide security services To introduce two techniques, cryptography and steganography, to implement security mechanisms.1.1 1.2 1.1 Continued 1-1 SECURITY GOALS Figure 1.1 Taxonomy of security goals This section defines three security goals. Topics discussed in this section: 1.1.1 Confidentiality 1.1.2 Integrity 1.1.3 Security1.3 1.4 1.1.1 Confidentiality 1.1.2 Integrity Confidentiality is probably the most common aspect of Information needs to be changed constantly. Integrity means information security. We need to protect our confidential that changes need to be done only by authorized entities and information. An organization needs to guard against those through authorized mechanisms. malicious actions that endanger the confidentiality of its information.1.5 1.6 1 1.1.3 Availability Strong Protection The information created and stored by an organization needs to The information created and stored by an organization needs to be available to authorized entities. Information needs to be be available to authorized entities. Information needs to be constantly changed, which means it must be accessible to constantly changed, which means it must be accessible to authorized entities. authorized entities.1.7 1.8 1.2 Continued 1-2 ATTACKS Figure 1.2 Taxonomy of attacks with relation to security goals The three goals of securityconfidentiality, integrity, and availabilitycan be threatened by security attacks attacks.. Topics discussed in this section: 1.2.1 Attacks Threatening Confidentiality 1.2.2 Attacks Threatening Integrity 1.2.3 Attacks Threatening Availability 1.2.4 Passive versus Active Attacks1.9 1.10 1.2.1 Attacks Threatening Confidentiality 1.2.2 Attacks Threatening Integrity Snooping refers to unauthorized access to or interception of Modification means that the attacker intercepts the message data. and changes it. Masquerading or spoofing happens when the attacker Traffic analysis refers to obtaining some other type of impersonates somebody else. information by monitoring online traffic. Replaying means the attacker obtains a copy of a message sent by a user and later tries to replay it. Repudiation means that sender of the message might later deny that she has sent the message; the receiver of the message might later deny that he has received the message.1.11 1.12 2 1.2.3 Attacks Threatening Availability 1.2.4 Passive Versus Active Attacks Denial of service (DoS) is a very common attack. It may slow Table 1.1 Categorization of passive and active attacks down or totally interrupt the service of a system.1.13 1.14 1.3.1 Security Services 1-3 SERVICES AND MECHANISMS Figure 1.3 Security services ITU-T provides some security services and some ITU- ...