Page : 1 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 Lecture-1 Overview and Introduction (Lecture Contents Summary) Network Security Design Fundamentals ET-IDA , v17 Prof. W. Adi

Page : 2 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 Recommended References Possible Textbooks: 1. Cryptography and Network Security W. Stallings, Printice Hall 2003, ISBN: W. Stallings, Printice Hall 2003, ISBN: Or: Or: Network Security Essentials: Applications and Standards Network Security Essentials: Applications and Standards William Stallings, 3rd Edition, Prentice Hall, © 2007, ISBN: William Stallings, 3rd Edition, Prentice Hall, © 2007, ISBN: Network Security Private communication in a public world Private communication in a public world C. Kaufman, R. Perlman, M. Speciner, Printice-Hall 10th printing 2007, ISBN C. Kaufman, R. Perlman, M. Speciner, Printice-Hall 10th printing 2007, ISBN Other reference books: 1. Cryptography & Network Security FOROUZAN, McGraw-Hill 2007, ISBN10: , ISBN13: FOROUZAN, McGraw-Hill 2007, ISBN10: , ISBN13: Handbook of Applied Cryptography by Alfred J. Menezes, Paul C. Van Oorschot, Scott A. Vanstone by Alfred J. Menezes, Paul C. Van Oorschot, Scott A. VanstoneAlfred J. MenezesPaul C. Van OorschotScott A. VanstoneAlfred J. MenezesPaul C. Van OorschotScott A. Vanstone CRC Press (October 16, 1996) (available free of charge on the WEB) CRC Press (October 16, 1996) (available free of charge on the WEB) Central TU Library

Page : 3 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 Security of Information and Communication Networks Stamatios V. Kartalopoulos ISBN: , Hardcover, 344 pages, April 2009, Wiley-IEEE Press Computer Security and Cryptography Alan G. Konheim ISBN: , Hardcover, 544 pages February 2007, Wiley Mobile Communication Systems and Security Man Young Rhee ISBN: , Hardcover, 448 pages April 2009, Wiley Phishing and Countermeasures: Understanding the Increasing Problem of Electronic Identity Theft Markus JakobssonMarkus Jakobsson (Editor), Steven Myers (Editor)Steven Myers ISBN: , Hardcover, 700 pages, January 2007, Wiley Other books:

Page : 4 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 Why Security ? Why Security ? The Story of Security Science The Story of Security Science Traditional Security Systems Overview Traditional Security Systems Overview Modern Security Systems Overview Modern Security Systems Overview Applications Applications Network Security Network Security Outlines This introduction presents essential examples of the main course contents, however with minimum mathematics !

Page : 5 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 Widespread Expanding very fast unlimited applications Mobile-Commerce etc… 6000 million mobile devices Internet Power Station power line network Why Security ? Open Information World scenario Service node TV Global Information Short-Circuit (AAA Scenario) Anywhere Any time Any device

Page : 6 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi G, 3G Mobile Network Architecture Circuit/ Signaling Gateway 2G/2.5G 2G GSM IN Services Call Agent Feature Server(s) RNC 3G Data + Packet Voice Circuit Switch Circuit Network Packet Network (Internet) Radio Access Control Voice Mobility Manager IP Core Network IP RAN Security threats are spead over the fixed and mobile networks! 4G … 5G

Page : 7 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 Impacts of Globalization on Information Technology ! Security is still a serious issue in most communication systems, and is a very essential one !! Globalization (Borderless) Unlimited resources Unrestricted resources Easy untraceable access No national boarders/Law? Manageability ? controllability ? Abuse-ability

Page : 8 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 Two Major Security Tasks Authentication Securely identify an entity Secrecy Keep data safe against illegal users Security tasks require to deploy cryptographic mechanisms to be realized Cryptography: is the science dealing with hiding information and data security questions

Page : 9 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi Secret Key Cryptography Overview Concepts

Page : 10 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 Secret Key Cryptography K-open = K-close (Symmetric System) - Open and close using shared secret keys (mostly one shared key) !! - Secret key agreement required !

Page : 11 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 SENDER RECEIVER Secret Key Crypto-System : mechanical simulation Message Z Lock Z Key = Z Secret key agreement Key = Z Message

Page : 12 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi Public-Key Cryptography Scientific Breakthrough 1976

Page : 13 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 Public-Key Secrecy Systems K-secret K-open Two Major Schemes in Public Key Cryptography: Diffie-Hellman Public Key exchange scheme RSA public Key secrecy system - Open and close with different keys!! - No Secret Key Agreement required

Page : 14 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 User A User B Basic Public Key Secrecy System (RSA system1978) (Mechanical simulation: user B gets a secured message from A) Public register Close Kc open ( ) Kc (mod m) Kc M M Kc M Kc.Ko = M Ko= Kc -1 (M Kc ) Ko Ko

Page : 15 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi Authentication Identification, Signature /Certificates.. - Secret Key Techniques - Public-Key Techniques

Page : 16 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 International Mobile Equipment Identity IMEI (non-secured) SIM (secured) Subscriber Identity Module Secured Identity (Authentic Identity)

Page : 17 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi Security Protocols SSL, IPSEC, KERBEROS, PGP, X509.. Standards, Applications

Page : 18 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 Example: SSL: Secure Socket Layer “Security Protocols” Server

Page : 19 bfolieq.drw Technical University of Braunschweig IDA: Institute of Computer and Network Engineering  W. Adi 2011 “Network Security” Objectives (course objectives summary) The aims of this course is to give a basic understanding of the design fundamentals and tools used in modern network security systems mainly includes: Course strategy: less proofs, more practical design hints! Review Fundamentals of Cryptology Review Fundamentals of Cryptology Network security primitives, Certificates, Ciphering, Integrity Network security primitives, Certificates, Ciphering, Integrity Network security Standards, SSL, IPSEC, PGP.. Network security Standards, SSL, IPSEC, PGP.. Network security applications. E-Money, E-Vote.. Network security applications. E-Money, E-Vote..