Sin título

Página 1

NETWORK AND INFORMATION SECURITY (CI7130) REVISION LECTURE Eckhard Pfluegel & Martin Tunnicliffe Announcements • The coursework is in the process of being marked • Should be ready early next week • Exam: Friday, May 15th, 2-5pm Basic Concepts • Be familiar with basic terms and concepts in computer security and dependability • Security goals • Dependability attributes • Threats, vulnerabilities and controls • Know basic techniques of cryptography • Symmetric/Asymmetric key encryption • Cryptographic hash functions Security Assessment I + II • Understand the concept and principle of security management and assessment. • Know context and basic approach of risk analysis • Be able to differentiate between mature frameworks and standards for security management and assessment • Have a high-level overview of the frameworks with an emphasis on the OCTAVE approach • Know the main phases and processes • Know how to create a threat profile • Enhance the threat profile to form risk profile • Be able to critically compare with other frameworks Cloud Security • To understand Cloud Computing and its main service models • To know the relevant security aspects of Cloud Computing • To be able to discuss traditional and novel threats, vulnerabilities and controls for the Cloud, following a suitable risk assessment framework (e.g., STRIDE) • Be aware of trust issues within cloud computing environments Network Security • Basic concepts • Network Address Translation (NAT) • Packet filtering • Computer viruses and other malware • Web application security • Reliability • Bitcoin General Network Security Concepts • Network Address Translation • Mapping of private and public IP addresses • Fixed and Dynamic (per session) mappings • Use of port numbers to allow NAT overload • Packet Filtering and Stateful Inspection • Configuring Firewall Rule-bases/ACLs • Application Level Gateways • Web-Based Attacks • XSS, Buffer Overflow etc. • Malware • Viruses, Worms, Trojans… Intrusion Detection • Statistical Anomaly Detection • Baselining and Threshold Detection • Use of Intruder/Non-Intruder Profiles • Rule-Based Detection • Defining rule-sets • Penetration Testing • Advantages: • Examples: Deterring intruders, monitoring attacks… • Limitations • Examples: lack of scalability, false positives (base-rate fallacy), cannot examine encrypted data… Reliability and Fault Tolerance • Hazard rate, reliability function, MTTF/MTBF • Repairable systems • Calculating availability • The exponential reliability model • Constant hazard rate • Component life-testing • Confidence Limits on MTTF • Components in Series and Parallel • Computing overall reliability function • HSRP, RAID disk systems, etc. Cryptography and Applications • Symmetric and Public Key Cryptography • Virtual Private Networks - Tunnelling • Digital Signatures • Hash Functions • Use of these concepts in the Bitcoin System • Bitcoin Transfers • The “Double Spending Problem” • Bitcoin Mining • The “Proof of Work” Problem • The Block-Chain Public Ledger Guidelines for Exam Revision • Attend revision lecture • Revise relevant slides • Refresh memory by reading through notes and relevant pages in textbook • Check whether able to rephrase in own words • Review provided past exam paper • During the exam: pay attention to allocated marks