Securing TCP/IP

Securing TCP/IP

1. cipher, algorithm, complete algorithm

   • cipher text

2. word patterns, frequency analysis

3. symmetric key algorithm

   • block cipher
     • DES
     • AES
       • SSH
   • stream cipher
     • RC4

4. asymmetric key algorithm

   • public key
     • RSA

5. encryption

   • IPsec layer 3
     • transport
     • tunnel
     • AH, ESP, ISAKMP, IKE
   • nonrepudiation
     • authentication
       • authorisation
       • CRAM-MD5, server auth
   • 2,3,7

6. hashes

   • give checksum
   • MD5
   • SHA-1, SHA-2
   • digital signatures, email encryp

7. PKI

   • CA
     • Root, Intermediate, Issuing

8. self signing certs - PGP

9. NAC

10. ACL

    • manditory
      • discretionary
        • roll-based
          • RBAC
        • DAC
      • MAC

11. SFTP