Network Security
Network Security
Network Security
Henric Johnson 1
Outline
• Attacks, services and mechanisms
• Security attacks
• Security services
• Methods of Defense
• A model for Internetwork Security
• Internet standards and RFCs
2
Security requirements
• Information security: physical and administrative means,
automated tools for protecting files or data stored on
computers.
• The generic name for the collection of tools designed to
protect data and to prevent hackers is computer security.
• Network security measures are needed to protect data
during transmission. The term Internet security is used.
• There are no clear boundaries between these forms of
security because a viruses may introduced in various ways.
• Internetwork security.
3
Attacks, Services and
Mechanisms
• Security Attack: Any action that
compromises the security of information.
• Security Mechanism: A mechanism that is
designed to detect, prevent, or recover from a
security attack.
• Security Service: A service that enhances
the security of data processing systems and
information transfers. A security service
makes use of one or more security mechanisms.
4
Security Attacks
5
Security Attacks
• Interruption: This is an attack on
availability
• Interception: This is an attack on
confidentiality
• Modfication: This is an attack on
integtrity
• Fabrication: This is an attack on
authenticity
6
Security Goals
Confidentiality
Integrity Avaliability
7
8
Security Services
• Confidentiality (privacy)
• Authentication (who created or sent the data)
• Integrity (has not been altered)
• Non-repudiation (the order is final)
• Access control (prevent misuse of resources)
• Availability (permanence, non-erasure)
– Denial of Service Attacks
– Virus that deletes files
9
Henric Johnson 10
11
Methods of Defence
• Encryption
• Software Controls (access limitations
in a data base, in operating system
protect each user from other users)
• Hardware Controls (smartcard)
• Policies (frequent changes of
passwords)
• Physical Controls
12
Internet standards and
RFCs
• The Internet society
– Internet Architecture Board (IAB)
– Internet Engineering Task Force (IETF)
– Internet Engineering Steering Group
(IESG)
13
Internet RFC Publication
Process
14