Jump to first page Internet Security in Perspective Yong Cao December 2000

Jump to first page Overview n Introduction n Security threats n Integrated security n Control measures n Summary

Jump to first page Growth of the Internet

Jump to first page Security Threats n Unauthorized access n User misrepresents identity n Access to unauthorized data n Data intercepted, read or modified n Virus attacks n Hackers

Jump to first page Integrated Security Secure transaction: n Confidentiality: others cannot eavesdrop on an exchange. n Integrity: the messages received are identical to the messages sent. n Authenticity: you are assured of the persons with whom you are making an exchange. n Non-Repudiability: none of the involved parties can deny that the exchange took place. Secure access: n Access control: prevent unauthorized users. n Audit trials: track down the users.

Jump to first page Control measures n Firewalls n Cryptography n Digital signature n Virus control

Jump to first page Firewalls n Protect nets with unsafe hosts n Single point of control and expertise n The firewall is often the only secure piece of an Internet arrangement n Backdoors usually diminish the effectiveness of a firewall n Proxy server

Jump to first page Cryptography n Transforming of information into a form unreadable by anyone without a secret decryption key. n Secret Key (Symmetric) n Public Key (Asymmetric) n PGP

Jump to first page Digital Signature n A digital signature shows that the person who signed the document had access to the private key and the pass phrase for the key indicated by the signature and that the document has not been modified since it was signed. n PGP

Jump to first page Virus Control n Using anti-virus software to scan known viruses to protect the computers. n Need to update frequently. n McAfee VirusScan

Jump to first page Secure Sockets Layer (SSL) n Developed by Netscape Communications, SSL is a security- enhanced abstraction of sockets that provides transaction security at the link or transport level. With SSL, security properties are attached to the link or channel of communication between two parties, not the documents themselves. n Utilizing public and private keys, message digests, digital signatures, and certificates

Jump to first page Summary n Security is a big concern in internet use. n Integrated security should have confidentiality, integrity, authenticity, non-repudiability, access control, audit trials. n The common security controls are firewalls, cryptography, digital signature, virus control.