APPLICATIONS AND STANDARDS

Transcription

1 Л Wj Км 1 WW \я$ I \ 1 \ W La ^и ^J I» I I APPLICATIONS AND STANDARDS FOURTH EDITION William Stallings Boston Columbus Indianapolis New York San Francisco Upper Saddle River Amsterdam Cape Town Dubai London Madrid Milan Munich Paris Montreal Toronto Delhi Mexico City Sao Paulo Sydney Hong Kong Seoul Singapore Taipei Tokyo

2 CONTENTS Preface 9 About the Author 14 Chapter 1 Introduction Computer Security Concepts The OSI Security Architecture Security Attacks Security Services Security Mechanisms A Model for Network Security Standards Outline of This Book Recommended Reading Internet and Web Resources Key Terms, Review Questions, and Problems 39 PART ONE CRYPTOGRAPHY 41 Chapter 2 Symmetric Encryption and Message Confidentiality Symmetric Encryption Principles Symmetric Block Encryption Algorithms Random and Pseudorandom Numbers Stream Ciphers and RC Cipher Block Modes of Operation Recommended Reading and Web Sites Key Terms, Review Questions, and Problems 70 Chapter 3 Public-Key Cryptography and Message Authentication Approaches to Message Authentication Secure Hash Functions Message Authentication Codes Public-Key Cryptography Principles Public-Key Cryptography Algorithms Digital Signatures Recommended Reading and Web Sites Key Terms, Review Questions, and Problems 105 PART TWO NETWORK SECURITY APPLICATIONS 111 Chapter 4 Key Distribution and User Authentication Symmetric Key Distribution Using Symmetric Encryption Kerberos Key Distribution Using Asymmetric Encryption X.509 Certificates Public-Key Infrastructure 138

3 6 CONTENTS 4.6 Federated Identity Management Recommended Reading and Web Sites Key Terms, Review Questions, and Problems 147 Chapter 5 Transport-Level Security Web Security Considerations Secure Socket Layer and Transport Layer Security Transport Layer Security HTTPS Secure Shell (SSH) Recommended Reading and Web Sites Key Terms, Review Questions, and Problems 187 Chapter 6 Wireless Network Security IEEE Wireless LAN Overview IEEE 802. Hi Wireless LAN Security Wireless Application Protocol Overview Wireless Transport Layer Security WAP End-to-End Security Recommended Reading and Web Sites Key Terms, Review Questions, and Problems 232 Chapter 7 Electronic Mail Security Pretty Good Privacy S/MIME DomainKeys Identified Mail Recommended Reading and Web Sites Key Terms, Review Questions, and Problems 279 Appendix 7A Radix-64 Conversion 280 Chapter 8 IP Security IP Security Overview IP Security Policy Encapsulating Security Payload Combining Security Associations Internet Key Exchange Cryptographic Suites Recommended Reading and Web Sites Key Terms, Review Questions, and Problems 317 PART THREE SYSTEM SECURITY 319 Chapter 9 Intruders Intruders Intrusion Detection Password Management Recommended Reading and Web Sites Key Terms, Review Questions, and Problems 348 Appendix 9AThe Base-Rate Fallacy 351

4 CONTENTS 7 Chapter 10 Malicious Software Types of Malicious Software Viruses Virus Countermeasures Worms Distributed Denial of Service Attacks Recommended Reading and Web Sites Key Terms, Review Questions, and Problems 385 Chapter 11 Firewalls The Need for Firewalls Firewall Characteristics Types of Firewalls Firewall Basing Firewall Location and Configurations Recommended Reading and Web Site Key Terms, Review Questions, and Problems 408 APPENDICES 412 Appendix A Some Aspects of Number Theory 412 A.l Prime and Relatively Prime Numbers 413 A.2 Modular Arithmetic 415 Appendix В Projects for Teaching Network Security 417 B.l Research Projects 418 B.2 Hacking Project 419 B.3 Programming Projects 419 B.4 Laboratory Exercises 420 B.5 Practical Security Assessments 420 B.6 Writing Assignments 420 B.7 Reading/Report Assignments 421 Index 422 ONLINE CHAPTERS Chapter 12 Network Management Security 12.1 Basic Concepts of SNMP 12.2 SNMPvl Community Facility 12.3 SNMPv Recommended Reading and Web Sites 12.5 Key Terms, Review Questions, and Problems Chapter 13 Legal and Ethical Aspects 13.1 Cybercrime and Computer Crime 13.2 Intellectual Property 13.3 Privacy 13.4 Ethical Issues

5 8 CONTENTS 13.5 Recommended Reading and Web Sites 13.6 Key Terms, Review Questions, and Problems ONLINE APPENDICES Appendix С Standards and Standards-Setting Organizations C.l The Importance of Standards C.2 Internet Standards and the Internet Society C.3 National Institute of Standards and Technology Appendix D TCP/IP and OSI D.l Protocols and Protocol Architectures D.2 The TCP/IP Protocol Architecture D.3 The Role of an Internet Protocol D.4 IPv4 D.5 IPv6 D.6 The OSI Protocol Architecture Appendix E Pseudorandom Number Generation E.l PRNG Requirements E.2 PRNG Using a Block Cipher E.3 PRNG Using a Hash Function or Message Authentication Code Appendix F Kerberos Encryption Techniques F. 1 Password-to-Key Transformation F.2 Propagating Cipher Block Chaining Mode Appendix G G.l Data Compression Using ZIP Compression Algorithm G.2 Decompression Algorithm Appendix H PGP Random Number Generation H.l True Random Numbers H.2 Pseudorandom Numbers Appendix I Glossary References The International Reference Alphabet