信息安全基础0(密码编码学与网络安全).ppt

Preface 杨帆 2012 Spring2012 FoundationofInformationSecurity CourseObjective Anintroductioncoursetoinformationsecurity studyingthebasicprinciplesandsystematicframeworkofitClassTime Classroom Tues3 4Z 204 Fri5 6Z 204Don tbelateforclass Textbook CryptographyandNetworkSecurity principlesandPractices 4EDbyWilliamStallings 密码编码学与网络安全 原理与实践 第四版 电子工业出版社 CourseInformation ReferenceBook 密码学引论 张焕国著 武汉大学出版社 ComputerSecurityPrinciplesandPractice 计算机安全原理与实践 机械工业出版社 信息安全导论 王丽娜著 武汉大学出版社Grading Classparticipation15 Classwork homework15 FinalExam70 ContactMe planesail CourseInformation cont d CourseStructure知识构架 以计算机 数学 通信为基础 交叉组成的综合性学科计算机 程序设计 数据结构 操作系统 组成原理 网络数学 信息安全数学基础通信 信息论与编码 通信原理 信号与系统核心课程 密码学 网络安全 计算机病毒 入侵检测 操作系统安全 信息隐藏 信息安全管理 SpecialtyComposing学科构成 InformationRevolutionarousedthemostactiveproductivityinhistoryInformationisavaluableresourceandthesecurityofinformationiscrucial至关重要Fromeveryone sdailylife toournation spolitical economicalandmilitaryfields informationsecurityisveryimportant privacy E business E government NeedsforInformationSecurity ImportanceofInformationSecurity 信息对抗的威胁在增加 电力 交通 医疗 金融 工业 广播 控制 通讯 因特网 安全漏洞危害在增大 ThepastdecadehasseenanexplosionintheconcernfortheinformationsecurityMaliciouscodes恶意代码 viruses worms trojan hackeretc causedover 28billionineconomiclossesin2003 anditgrewtoover 75billionby2007 CodeRed 2001 13hoursinfected 360Kmachines 2 6billionlossSlammer 2003 10minutesinfected 75Kmachines 1billionlossInternetattacksareincreasinginfrequency severityandsophisticationSecurityspecialistsmarketsareexpanding StatusQuo现状 Top10VirusesinHistory Worm WhBoy 2011 sAnnualReportofNetworkSecurityinChina 2011 sAnnualReportofNetworkSecurityinChina cont d 2011 sAnnualReportofNetworkSecurityinChina cont d 2011 sAnnualReportofNetworkSecurityinChina cont d 2011 sAnnualReportofNetworkSecurityinChina cont d 2011 sAnnualReportofNetworkSecurityinChina cont d NewCharacteristics AttackingonInternet banking MobileTerminal移动终端Blackindustrial chainofvirusesemergesDrive bydownloadofbrowser浏览器挂马Downloaderscam欺诈下载Phishingsitescam钓鱼网站Zero dayattack零日攻击prevailsSocialengineering社会工程学turnsintoanimportantintrusion入侵approach HistoryofComputing Foralongtime securitywaslargelyignoredinthecommunity Thecomputerindustrywasin survivalmode 幸存模式 strugglingtoovercometechnologicalandeconomichurdles Asaresult alotofmeasureswerecutandmademanycompromises折衷 Therewaslotsoftheory andevenexamplesofsystemsbuiltwithverygoodsecurity butwerelargelyignoredorunsuccessful ComputingTodayisQuiteDifferent Computerstodayarefarfrom survivalmode Performanceisabundantandthecostisverycheap Asaresult computersarenowubiquitous普及ateveryfacetofsocietyInternet Computersareallconnectedandinterdependent相互依存 Thiscodependencymagnifiestheeffectsofanyfailures BiologicalAnalogy Computingtodayisveryhomogeneous相似 AsinglearchitectureandahandfulofOSdominates占统治地位Inbiology homogeneous同类的populationsareindanger Asinglediseaseorviruscanwipethemoutovernightbecausetheyallsharethesameweakness Thediseaseonlyneedsavector载体totravelamonghostsComputersareliketheanimals theInternetprovidesthevector Itislikehavingonlyonekindofcowintheworld andhavingthemdrinkfromonesinglepoolofwater TheSpreadofSlammerWorms Hacker MostWell knownHackers KevinMitnick RobertMorris AttackedWebsites DevelopmentTendency GerminationPhrase萌芽阶段from1999to2004EruptionPhrase爆发阶段from2005to2009PopularizationPhrase普及阶段after2010 InformationWar FirstElectronicsWarinhumanhistory WarbetweenJapan RussiaonFeb 1904FirstInformationWarincomputerera theFirstGulfWarin1991FutureofInformationWar SeriousSituationofInformationSecurityinChina Thewholesocietyisnotawareofthei