密码编码学与网络安全-原理与实践

.,CryptographyandNetworkSecurityOverviewnotonthechanceofhisnotattacking,butratheronthefactthatwehavemadeourpositionunassailable.TheArtofWar,SunTzu,.,Roadmap,CryptographicalgorithmssymmetricciphersasymmetricencryptionhashfunctionsMutualTrustNetworkSecurityComputerSecurity,.,StandardsOrganizations,NationalInstituteofStandardsneedprotectionfromdisclosure,tampering,ordestruction;benotarizedorwitnessed;berecordedorlicensed,.,SecurityServices,X.800:“aserviceprovidedbyaprotocollayerofcommunicatingopensystems,whichensuresadequatesecurityofthesystemsorofdatatransfers”RFC2828:“aprocessingorcommunicationserviceprovidedbyasystemtogiveaspecifickindofprotectiontosystemresources”,.,SecurityServices(X.800),Authentication-assurancethatcommunicatingentityistheoneclaimedhavebothpeer-entity&dataoriginauthenticationAccessControl-preventionoftheunauthorizeduseofaresourceDataConfidentialityprotectionofdatafromunauthorizeddisclosureDataIntegrity-assurancethatdatareceivedisassentbyanauthorizedentityNon-Repudiation-protectionagainstdenialbyoneofthepartiesinacommunicationAvailabilityresourceaccessible/usable,.,SecurityMechanism,featuredesignedtodetect,prevent,orrecoverfromasecurityattacknosinglemechanismthatwillsupportallservicesrequiredhoweveroneparticularelementunderliesmanyofthesecuritymechanismsinuse:cryptographictechniqueshenceourfocusonthistopic,.,SecurityMechanisms(X.800),specificsecuritymechanisms:encipherment,digitalsignatures,accesscontrols,dataintegrity,authenticationexchange,trafficpadding,routingcontrol,notarizationpervasivesecuritymechanisms:trustedfunctionality,securitylabels,eventdetection,securityaudittrails,securityrecovery,.,ModelforNetworkSecurity,.,ModelforNetworkSecurity,usingthismodelrequiresusto:designasuitablealgorithmforthesecuritytransformationgeneratethesecretinformation(keys)usedbythealgorithmdevelopmethodstodistributeandsharethesecretinformationspecifyaprotocolenablingtheprincipalstousethetransformationandsecretinformationforasecurityservice,.,ModelforNetworkAccessSecurity,.,ModelforNetworkAccessSecurity,usingthismodelrequiresusto:selectappropriategatekeeperfunctionstoidentifyusersimplementsecuritycontrolstoensureonlyauthorisedusersaccessdesignatedinformationorresources,.,Summary,topicroadmap&standardsorganizationssecurityconcepts:confidentia