Computer Networks and

Security
•Introduction to Cryptography
•Security Attacks
•Security Services
•Security Mechanisms
•A Model for Network Security

1
Key Security Concepts

Authentication
Non-repudiation
2
Security Goals
SECURITY GOALS

INTEGRITY AVAILABILITY
CONFIDENTIALITY

3
Security ATTACKS
Security Attacks

Modification
Snooping
Masqueradi
ng Denial of
Traffic Service
Analysis Replaying

Repudiation

Threat to confidentiality Threat to Integrity Threat to Availability

4
Security Attacks
Attacks Passive/Active Threatening

1. Snooping Passive Confidentiality

2. Traffic Analysis

1. Modification Active Integrity

2. Masquerading
3. Replaying
4. Repudiation

1. Denial of Service Active Availability

Security Attacks

• Passive Attack
• Just to obtain information. Does not Modify or harm the
system.

• Active Attack
• May Change the Data and harm the system.

6
Security Services
Security Services

Data Authentication
Data Integrity Non Repudiation Access Control
Confidentiality

Anti Change Peer Entity Proof of Origin

Anti Replay Data Origin Proof of Delivery

7
Security Mechanisms
Encipherment

Data Integrity

Digital Signature

Authentication Exchange
Security
Traffic Padding
Mechanisms
Routing Control

Notarization

Access Control

8
Relation Between Services and
Mechanisms
Security Services Security Mechanism

Data Confidentiality Encipherment, Routing Control

Data Integrity Encipherment, Digital Signature, Data Integrity

Authentication Encipherment, Digital Signature, Authentication

exchanges

Non Repudiation Digital Signature, Data Integrity and Notarization

Access Control Access Control Mechanisms

9
Levels of Impact

We can define 3 levels of impact from a security

attack
Low - The loss is minor
Moderate - The loss is serious
High - The loss severe or catastrophic

10
Three Aspects of Security

• The three aspects of information security are

• security attack
• security mechanism (control)
• security service
• Some terms
• threat – a potential for violation of security
• vulnerability – a way by which loss can happen
• attack – an attempt to avoid security services

11