Data Security 101 Part 1: PKI and SSL. Reading First, read the VeriSign case, –page 294-297 Second, read section 5.3 –pages 268-279 Finally, briefly skim.

Slides:

Advertisements

Similar presentations

Last Class: The Problem BobAlice Eve Private Message Eavesdropping.

Advertisements

Internet and Intranet Protocols and Applications Lecture 9a: Secure Sockets Layer (SSL) March, 2004 Arthur Goldberg Computer Science Department New York.

Netprog: Cryptgraphy1 Cryptography Reference: Network Security PRIVATE Communication in a PUBLIC World. by Kaufman, Perlman & Speciner.

More on SSL/TLS. Internet security: TLS TLS is one of the more prominent internet security protocols. TLS is one of the more prominent internet security.

Digital Signatures and applications Math 7290CryptographySu07.

Http Web Authentication Web authentication is used to verify a users identity before allowing access to certain web pages On web browsers you get a login.

Cryptography in e-Business Guest Lecture, November 13, 2006, Olin College Steven R. Gordon Prof. of Info Tech Management Babson College.

6/3/2015topic1 Web Security Qiang Yang Simon Fraser University Thanks: Francis Lau (HKU)

ECOMMERCE TECHNOLOGY FALL 2003 COPYRIGHT © 2003 MICHAEL I. SHAMOS Cryptography.

8-1 What is network security? Confidentiality: only sender, intended receiver should “understand” message contents m sender encrypts message m receiver.

Symmetric Key Distribution Protocol with Hybrid Crypto Systems Tony Nguyen.

1 Digital Signatures CSSE 490 Computer Security Mark Ardis, Rose-Hulman Institute April 12, 2004.

RSA Exponentiation cipher

Cryptography Prof. Seth D. Bergmann Rowan University Computer Science.

Introduction to Public Key Infrastructure (PKI) Office of Information Security The University of Texas at Brownsville & Texas Southmost College.

INTRODUCTION Why Signatures? A uthenticates who created a document Adds formality and finality In many cases, required by law or rule Digital Signatures.

Chapter 13 Digital Signature

Cryptography 101 Frank Hecker

Chapter 31 Network Security

Csci5233 Computer Security1 Bishop: Chapter 10 Key Management: Digital Signature.

31.1 Chapter 31 Network Security Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display.

Pretty Good Privacy by Philip Zimmerman presented by: Chris Ward.

Copyright ©1997 NetDox, Inc. All Rights Reserved. CONFIDENTIAL 1 DATE HERE Julie Grace - NetDox, Inc. Emerging Internet Commerce.

Computer Security Tran, Van Hoai Department of Systems & Networking Faculty of Computer Science & Engineering HCMC University of Technology.

ECE453 – Introduction to Computer Networks Lecture 18 – Network Security (I)

Part Two Network Security Applications Chapter 4 Key Distribution and User Authentication.

Public-key Cryptography Strengths and Weaknesses Matt Blumenthal.

Lecture 19 Page 1 CS 111 Online Symmetric Cryptosystems C = E(K,P) P = D(K,C) E() and D() are not necessarily the same operations.

May 2002Patroklos Argyroudis1 A crash course in cryptography and network security Patroklos Argyroudis CITY Liberal Studies.

Symmetric versus Asymmetric Cryptography. Why is it worth presenting cryptography? Top concern in security Fundamental knowledge in computer security.

Pertemuan-13 Enkripsi and Authentication. Symmetric-key Cryptography  Data encrypted and decrypted with same key  Classical examples: Caesar cipher,

E-commerce What are the relationships among: – Client (i.e. you) – Server – Bank – Certification authority Other things to consider: – How to set up your.

Public-Key Cryptography CS110 Fall Conventional Encryption.

CSCD 218 : DATA COMMUNICATIONS AND NETWORKING 1

Chapter 31 Cryptography And Network Security Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display.

Digital Envelopes, Secure Socket Layer and Digital Certificates By: Anthony and James.

1 Cryptography NOTES. 2 Secret Key Cryptography Single key used to encrypt and decrypt. Key must be known by both parties. Assuming we live in a hostile.

Symmetric Cryptography, Asymmetric Cryptography, and Digital Signatures.

Facilities for Secure Communication The Internet is insecure The Internet is a shared collection of networks. Unfortunately, that makes it insecure An.

The TAOS Authentication System: Reasoning Formally About Security Brad Karp UCL Computer Science CS GZ03 / M th November, 2008.

Lecture 16: Security CDK4: Chapter 7 CDK5: Chapter 11 TvS: Chapter 9.

8-1 Chapter 8 Security Computer Networking: A Top Down Approach 6 th edition Jim Kurose, Keith Ross Addison-Wesley March 2012 part 2: Message integrity.

31.1 Chapter 31 Network Security Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display.

1 Network Security Basics. 2 Network Security Foundations: r what is security? r cryptography r authentication r message integrity r key distribution.

1 Needham-Schroeder A --> S: A,B, N A S --> A: {N A,B,K AB,{K AB,A} KBS } KAS A --> B:{K AB,A} KBS B --> A:{N B } KAB A --> B:{N B -1} KAB.

Cryptography 1 Crypto Cryptography 2 Crypto  Cryptology  The art and science of making and breaking “secret codes”  Cryptography  making “secret.

31.1 Chapter 31 Network Security Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display.

CS453: Introduction to Information Security for E-Commerce Prof. Tom Horton.

The School of Electrical Engineering and Computer Science (EECS) CS/ECE Network Security Dr. Attila Altay Yavuz Authentication Protocols (I): Secure Handshake.

Network Security Continued. Digital Signature You want to sign a document. Three conditions. – 1. The receiver can verify the identity of the sender.

Chapter 4: Public Key Cryptography

Jump to first page Internet Security in Perspective Yong Cao December 2000.

Lecture 22 Network Security (cont) CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger slides are modified from Jim Kurose,

Database Management Systems, 3ed, R. Ramakrishnan and J. Gehrke1 Database architecture and security Workshop 4.

- Richard Bhuleskar “At the end of the day, the goals are simple: safety and security” – Jodi Rell.

CPIS 312 Chapter Four: PUBLIC KEY CRYPTO. Index 2 A.Introduction A.1 Asymmetric Key Cryptography- Introduction A.2 General ideas about the Public Key.

CMSC 414 Computer and Network Security Lecture 2 Jonathan Katz.

Network Security Chapter 8 roadmap 8.1 What is network security? 8.2 Principles of cryptography (confidentiality) 8.3 Message integrity 8.4 End-point authentication.

Basics of Cryptography

Computer Communication & Networks

Digital Signatures A digital signature is a protocol that produces the same effect as a real signature: It is a mark that only the sender can make but.

Uses Uses of cryptography Lab today on RSA

Introduction to security goals and usage of cryptographic algorithms

Message Security, User Authentication, and Key Management

Recap unit 2 Review cipher systems, RSA Digital signatures

CDK4: Chapter 7 CDK5: Chapter 11 TvS: Chapter 9

CDK: Chapter 7 TvS: Chapter 9

Public – Private Key Cryptography

Key Exchange With Public Key Cryptography

Presentation transcript:

Data Security 101 Part 1: PKI and SSL

Reading First, read the VeriSign case, –page Second, read section 5.3 –pages Finally, briefly skim (don’t study) all of chapter 7 –pages

Public Key Cryptography (Simple Case)

Advantages Confidentiality – no one but Bob can read Alice’s message.

Advantages Integrity – If someone intercepts Alice’s message, they can’t alter it in a meaningful way.

Problem Igor could pretend to be Bob and send Alice Igor’s public key. Then Igor can decrypt Alice’s message.

Problem Authenticity – Alice really has no way to be sure that she’s really talking to Bob

Problem Non-repudiation: If something goes wrong, Bob can always deny it and blame it on an imposter (Igor)

Signatures (also called Session Keys) How to send a private message How to send a signature.

Signatures Alice can send Bob a signature. No one else can create this signature unless they have Alice’s private key.

Signatures If Alice signs all of her messages, then Bob can detect if an imposter (Igor) is pretending to be Alice.

Signatures If the signature suddenly changes, the Bob knows the message is NOT from Alice.

Problem Initial Authentication – Again, what if Igor pretends to be Alice from the start?

Certificates Here I’m glossy over many details. The big picture is what’s important: Rather then get the Signature directly from each other, Bob and Alice agree to get the signatures from a 3 rd Party (VeriSign for example).

Certificates Rather than get the Signature directly from each other, Bob and Alice agree to get the signatures from a 3 rd Party (VeriSign for example). VeriSign holds a certificate and “private key” for Alice. The only way Igor can pretend to be Alice is to compromise VeriSign. How exactly is this more secure?