Lecture 10: Network Security Protocols
|
|
|
- Ruth West
- 8 years ago
- Views:
Transcription
1 ENTS 689i Lecture 10: Network Security Protocols Part III: Network Security
2 Part III: Outline November 13 (Today) IP Security (IPSec) Secure Socket Layer (SSL)/Transport Layer Security (TLS) Kerberos DNS Sec Network Anonymity HW Questions 2
3 Network Security Protocols Cryptographic protocols are the foundation for many security services/mechanisms Network computing environment Services provided at different layers Assumptions about the network (environment) Needs of communication peers Protocols challenges Design (standards) Implementation Environment/threat assumptions 3
4 IP Security (IPSec) Overview IP Security Protocol Suite Address security concerns in IP (protocols/mechanisms) Eavesdropping, session hijacking, spoofing, etc Implemented at the IP layer Transparent to applications and end users (transport layer) Below transport layer (TCP, UDP) / ICMP Collection of protocols/mechanisms Confidentiality Data origin authentication Message integrity Access control Replay detection 4
5 IP Security Architecture Authentication Header (AH) Provides support for data integrity and authentication Encapsulating Security Protocol (ESP) Provides support for confidentiality (authentication optional) Security Associations (SA) One way relationship between sender and receiver (sec parameters) Traffic related to SAs (Security Policy Database (SPD)) Transport mode Protection for upper-layer protocols Tunnel mode Protection for entire IP datagram 5
6 Transport Mode Protects upper-layer protocols Payload of IP datagram (data) IPSec information added between the IP header and the remainder of the packet End-to-end communication between hosts Directly between a server and client Hdr Payload Hdr IPSec Payload 6
7 Tunnel Mode Protection for entire IP datagram IP datagram (header + data) Adds new outer IP header Original IP datagram intact Between intermediate nodes (security gateway) Firewall to firewall VPN Hdr Payload New Hdr IPSec Hdr Payload 7
8 Tunnel Mode Host Host Application Application Transport Security Gateway Router Security Gateway Transport Internet IP/IPSec Internet IP/IPSec Internet Physical Physical Physical Physical Physical 8
9 Security Associations Unidirectional association between peers Describes the security services applied to packets Destination address, security protocol (ESP or AH), Security Parameter Index (SPI) (32-bit) Security Association Database (SAD) Security association parameters Sequence number counter Sequence counter overflow Anti-replay window AH Information ESP Information Association lifespan (time/bytes) IPSec Protocol mode Address of opposite end 9
10 Security Policy Database Security Policy Database (SPD) Maps IP traffic to SAs (think firewall rules) Selectors IP and upper layer protocol field values Destination to ,port 25, apply IPSec Dictates how messages are handled Discard Security services (IPSec) Forwarding Bypass 10
11 Authentication Header (AH) Security services Message integrity Static fields of IP header + IP Payload (Mutable fields?) Prevents undetected modifications Data origin authentication Authenticate user or application Prevents spoofing attacks Anti-replay (optional) Leverages HMAC Integrity Check Value (ICV) MD5, SHA-1 11
12 Authentication Header (AH) Stallings, William. Cryptography and Network Security. New Jersey: Pearson,
13 AH: Anti-replay Service Replay attack Attacker retransmits a copy of an authenticated packet Disrupt service/undesired consequence Sequence number Initialized to zero/incremented for each packet sent on SA (2 32-1) Stallings, William. Cryptography and Network Security. New Jersey: Pearson,
14 AH: Transport Mode Stallings, William. Cryptography and Network Security. New Jersey: Pearson,
15 AH: Tunnel Mode Stallings, William. Cryptography and Network Security. New Jersey: Pearson,
16 Encapsulating Security Payload Security Services: Confidentiality Traffic flow confidentiality AH services Adds both a header and trailer Authentication does not include IP Header Authentication happens after encryption Encryption and authentication algorithms 3DES, RC5, IDEA,3IDEA, CAST, Blowfish MD5, SHA-1 16
17 Encapsulating Security Payload Stallings, William. Cryptography and Network Security. New Jersey: Pearson,
18 ESP: Transport Mode Stallings, William. Cryptography and Network Security. New Jersey: Pearson,
19 ESP: Tunnel Mode Stallings, William. Cryptography and Network Security. New Jersey: Pearson,
20 Protocols and Modes AH ESP ESP with authentication Transport Mode Authenticates IP datagram payload and immutable fields of IP header Encrypts IP datagram payload Encrypts IP datagram payload. Authenticates IP datagram payload but not IP header. Tunnel Mode Authenticates entire inner IP datagram plus immutable fields of outer IP header Encrypts inner IP packet Encypts inner IP packet. Authenticates inner IP packet. 20
21 Key Management Generation and distribution of secret keys Manual: system administrator Automated: on-demand key generation Automated key management protocols Internet Security Association and Key Management Protocol (ISAKMP) Procedures (exchanges) and packet formats Establish, negotiate, modify, delete security associations Oakley Key Determination Protocol Key exchange protocol (similar to Diffie-Hellman) Internet Key Exchange Oakley + SKEME + ISAKMP 21
22 SSL Overview Secure Socket Layer (SSL) Developed by Netscape (www browsers/servers) SSLv3 Negotiate mutually supported encryption suite Secure reliable end-to-end communication Confidentiality, integrity, authentication Transport Layer Security (TLS) protocol Internet standardization Minor differences/backwards compatible Requires reliable end-to-end communication (TCP) User-level not operating system changes 22
23 SSL Architecture Stallings, William. Cryptography and Network Security. New Jersey: Pearson,
24 Sessions and Connections SSL session Ongoing association between peers (client/server) Established by SSL Handshake Protocol Specifies cryptographic parameters Shared across multiple connections Expensive public-key crypto SSL connection Set of mechanisms used to transport data in an SSL session Describes how data is sent/received between peers (transient) Type of service Every connection is associated with one SSL session 24
25 SSL Session State Session identifier Chosen by server to uniquely identify active or resumable session state Peer certificate X509.v3 certificate of peer Compression method Algorithm used to compress data before encryption Cipher spec Specified encryption, hash algorithm, and crypto attributes Master secret 48 byte secret shared between client and server Is resumable Used to indicates if session can be used to initiate new connections 25
26 SSL Connection State Server and client random Byte sequences chosen for each connection (32-bytes) Server write MAC secret Shared key used to compute MAC on data sent by the server Client write MAC secret Shared key used to compute MAC on data sent by the client Server write key Shared key used to encrypt data sent by the server Client write key Shared key used to encrypt data sent by the client Initialization vectors Required when block cipher in CBC mode is used Sequence numbers Client/server maintain separate sequence numbers for transmitted/received messages 26
27 SSL Record Protocol Basic security services to higher-layer protocols (SSL connections) Confidentiality Message Integrity Application Message Fragments: 16 Kb (or smaller) Compressed (optional) Message Authentication Code (MAC) Similar to HMAC Encrypted with symmetric encryption Protocol Header Content Type, Major Version, Minor Version, Length Transmits in a TCP segment Retransmission and reliable delivery 27
28 SSL Record Protocol Stallings, William. Cryptography and Network Security. New Jersey: Pearson,
29 SSL Handshake Protocol Sets up parameters for the SSL record protocol Cryptographic keys, symmetric ciphers, MAC algorithms Authenticate server/client (optional) Before any application data is transmitted Four phases Establish security capabilities Server authentication and key exchange Client authentication and key exchange Finish Messages depend on level of security 29
30 SSL Handshake Protocol Stallings, William. Cryptography and Network Security. New Jersey: Pearson,
31 Phase 1: Establish Capabilities Initiate a connection and establish security capabilities Client initiates (client_hello) Version: highest supported version of SSL Random: nonce (32-bit ts /28 bytes random) Session ID: session identifier CipherSuite: client supported crypto-algorithms Compression Method: supported compression Server responds (server_hello) Selects parameters 31
32 Phase 2/3: Key Exchange/Authentication Key exchange methods RSA Fixed Diffie-Hellman Ephemeral Diffie-Hellman Anonymous Diffie-Hellman Verifies identity of peers Phase 2: Server Authentication/Key Exchange Sends certificate/server_key_exchange (if required) Server notifies client (server_done) Phase 3: Client Authentication/Key Exchange Verifies certificate Completes key exchange (client_key_exchange) 32
33 Phase 4: Finish Completes secure connection setup Notifies peer to use new cipher (change_cipher_spec) Change Cipher Spec Protocol Verifies key exchange and authentication were successful (finished) New keys, algorithms, parameters Handshake is complete! 33
34 SSL Change Cipher Spec Protocol Simplest SSL protocol Transferred using the SSL record protocol Handshake Protocol Indicates subsequent records will use updated cipher suite (transition) Pending state becomes fixed Message is single byte Carries the value 1 Sent by both client and server Session state is considered agreed 34
35 SSL Alert Protocol Signals SSL-related alerts between peers Messages (2-bytes) Severity Level (1-byte) Fatal (2): Connection immediately terminated Warning (1): Connection/security unstable Alert code (1-byte) Closure alert (close_notify) (truncation attack) Error alerts Fatal : unexpected_message, bad_record_mac, decompression_failure, handshake_failure, illegal_parameter Warning/Fatal: no_certificate, bad_certificate, unsupported_certificate, certificate_revoked, certificate_expired, certificate_unknown 35
36 Kerberos Kerberos Developed at MIT Version 4/ Version 5 A centralized network protocol that provides distributed authentication Trusted third-party authentication service Challenge A network environment where users at workstations need to access restricted distributed services (files, printers, etc) Services (symmetric key cryptography) Authentication Confidentiality Data integrity Authorization/Access control 36
37 Threats Unauthorized user gaining access to services/data Impersonation Pretend to be another user Address spoofing Eavesdropping Replay attack 37
38 Entities Client (C) Access services on servers throughout network Logs in to workstation (userid/password) Kerberos Authentication Server (AS) Responsible for authenticating users (all passwords) Shares a unique key with each server Issues a ticket-granting ticket (TGT) Ticking-granting Server (TGS) Verifies users authenticated by AS Grants users service-granting tickets for particular services Application Server (V) Authenticates user using service-granting ticket Provides a service (files, printers, s, etc) 38
39 Kerberos Realms Networks of servers and clients under control of Authentication Server (administrative domain) Kerberos environment Kerberos server Clients UID and hashed passwords registered Application servers Secret key registered Inter-realm authentication Secret key shared between realms 39
40 Tickets Ticket Grants a particular authenticated client (user) the authorization to obtain a service from the specified server Types of Tickets Ticket-granting ticket Issued by Authentication Sever (AS) Authenticates client to Ticket Granting Server (TGS) Authorizes ability to ask for a service Lifetime: Once per user logon session Service-granting ticket Issued by Ticket Granting Server (TGS) Authenticates client to server Authorizes ability to use that service Lifetime: Once per type of service 40
41 Overview of Kerberos Client Kerberos Authentication Server Ticking-granting Server Server Realm Stallings, William. Cryptography and Network Security. New Jersey: Pearson,
42 Kerberos Version 4 Messages Authentication Service Exchange, To obtain Ticket-Granting Ticket (1) C AS: ID c ID tgs TS 1 (2) AS C: E Kc [K c,tgs ID tgs TS 2 Lifetime 2 Ticket tgs ] Ticket tgs = E Ktgs [ K c,tgs ID c AD c ID tgs TS 2 Lifetime 2 ] Ticket-Granting Service Exchange: To obtain Service-Granting Ticket (3) C TGS: ID v Ticket tgs Authenticator c (4) TGS C: E Kc,tgs [K c,v ID v TS 4 Ticket v ] Authenticator c = E Kc,tgs [ID c AD c TS 3 ] Client/Server Authentication Exchange: To Obtain Service (5) C V: Ticket v Authenticator c (6) V C: E Kc,v [TS 5 +1] Ticket v = E Kv [ K c,v ID c AD c ID v TS 4 Lifetime 4 ] Authenticator c = E Kc,v [ID c AD c TS 5 ] 42
43 Kerberos Version 5 Limitations of version 4 Environmental shortcomings Encryption algorithms, IP dependence, byte ordering, ticket lifetimes, authentication forwarding, inter-realm authentication Technical deficiencies Unnecessary encryption, PCBC CBC, subsession key, password attacks 43
44 Domain Name Service (DNS) Associates host names and IP addresses Forward record: host name IP address Reverse record: IP address host name Data is distributed (hierarchical: root servers) Caching Vulnerabilities: Denial of service Information disclosure (zone transfers) DNS cache poisoning DNS Spoofing (authoritative) Malware 44
45 DNS Resolving Default DNS Hosts Denial of Service root Resolver Local Name Server Cache Poison umd umd.edu 45
46 DNSSec Domain Name System Security Extensions (DNSSEC) Leverages public key cryptography (digital signatures) Authenticate servers DNS zone signs its data with private key (offline) Public keys are published in DNS Provides to clients (resolvers) Data origin authentication (authoritative source) Data integrity (not been modified) Authenticated denial of existence Digitally sign query answers DNS resource record (A, MX. PTR) 46
47 DNSSec Issues Public key storage? Key management Updating keys Information leak Zone enumeration (NSEC3) Secures traffic to local name server Failed validation? Does not address Confidentiality Availability 47
48 Network Anonymity Protect identity/data association (links) Shield our identity within a group of entities Why would someone want anonymity? Internet censorship Freedom of speech (journalists, whistleblowers, political dissidents) Protects privacy (medical, financial, etc) Negatives ISPs, marketers, etc Criminal attribution (attacks, contraband) Network Anonymity Anonymous Mailers (r ers) Anonymous Routing 48
49 The Onion Router (TOR) The Onion Router (TOR) Low latency anonymous Internet connections Client (Onion Proxy) Transport layer (TCP) (SOCKS) Web browsing, IRC, instant messaging Onion routers Distributed overlay network Virtual circuit Directory servers Sender chooses random sequence of routers Layered cryptography (fixed sized cells) 49
50 The Onion Router (TOR) K 2 Servers Client R 1 R 2 R 3 K 4 K 2 K 6 Symmetric Keys R 4 R 5 R 6 K 4 K 6 Exit Node K 4 K2 K 6 50
51 TOR Issues Out of band leaks DNS JavaScript/Flash errors (application layer) Traffic analysis Global passive adversary Enter/exit nodes Delay watermarking (Timing) Congestion (Volume) Exit node eavesdropping Anonymity security Intercept usernames and passwords (2007) Routing Optimizations (adaptation) 51
52 References Cryptography and Network Security William Stallings Computer Security: Art and Science Matt Bishop Information Security Cristina Nita-Rotaru Security in Computing Charles P. Pfleeger and Shari Lawrence Pfleeger Network Security Charlie Kaufman, Radia Perlman, and Mike Speciner 52
Web Security Considerations
CEN 448 Security and Internet Protocols Chapter 17 Web Security Dr. Mostafa Hassan Dahshan Computer Engineering Department College of Computer and Information Sciences King Saud University mdahshan@ccis.ksu.edu.sa
Network Security Part II: Standards
Network Security Part II: Standards Raj Jain Washington University Saint Louis, MO 63131 Jain@cse.wustl.edu These slides are available on-line at: http://www.cse.wustl.edu/~jain/cse473-05/ 18-1 Overview
Network Security [2] Plain text Encryption algorithm Public and private key pair Cipher text Decryption algorithm. See next slide
![Network Security [2] Plain text Encryption algorithm Public and private key pair Cipher text Decryption algorithm. See next slide](/thumbs/24/4351346.jpg "Network Security [2] Plain text Encryption algorithm Public and private key pair Cipher text Decryption algorithm. See next slide")
Network Security [2] Public Key Encryption Also used in message authentication & key distribution Based on mathematical algorithms, not only on operations over bit patterns (as conventional) => much overhead
Secure Socket Layer. Security Threat Classifications
Secure Socket Layer 1 Security Threat Classifications One way to classify Web security threats in terms of the type of the threat: Passive threats Active threats Another way to classify Web security threats
Chapter 7 Transport-Level Security
Cryptography and Network Security Chapter 7 Transport-Level Security Lectured by Nguyễn Đức Thái Outline Web Security Issues Security Socket Layer (SSL) Transport Layer Security (TLS) HTTPS Secure Shell
CS 356 Lecture 27 Internet Security Protocols. Spring 2013
CS 356 Lecture 27 Internet Security Protocols Spring 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access Control Lists
SECURE SOCKETS LAYER (SSL)
INFS 766 Internet Security Protocols Lecture 5 SSL Prof. Ravi Sandhu SECURE SOCKETS LAYER (SSL) layered on top of TCP SSL versions 1.0, 2.0, 3.0, 3.1 Netscape protocol later refitted as IETF standard TLS
SECURE SOCKETS LAYER (SSL) SECURE SOCKETS LAYER (SSL) SSL ARCHITECTURE SSL/TLS DIFFERENCES SSL ARCHITECTURE. INFS 766 Internet Security Protocols
INFS 766 Internet Security s Lecture 5 SSL Prof. Ravi Sandhu SECURE SOCKETS LAYER (SSL) layered on top of TCP SSL versions 1.0, 2.0, 3.0, 3.1 Netscape protocol later refitted as IETF standard TLS (Transport
APNIC elearning: IPSec Basics. Contact: training@apnic.net. esec03_v1.0
APNIC elearning: IPSec Basics Contact: training@apnic.net esec03_v1.0 Overview Virtual Private Networks What is IPsec? Benefits of IPsec Tunnel and Transport Mode IPsec Architecture Security Associations
INF3510 Information Security University of Oslo Spring 2011. Lecture 9 Communication Security. Audun Jøsang
INF3510 Information Security University of Oslo Spring 2011 Lecture 9 Communication Security Audun Jøsang Outline Network security concepts Communication security Perimeter security Protocol architecture
Communication Systems SSL
Communication Systems SSL Computer Science Organization I. Data and voice communication in IP networks II. Security issues in networking III. Digital telephony networks and voice over IP 2 Network Security
Communication Security for Applications
Communication Security for Applications Antonio Carzaniga Faculty of Informatics University of Lugano March 10, 2008 c 2008 Antonio Carzaniga 1 Intro to distributed computing: -server computing Transport-layer
Security Protocols HTTPS/ DNSSEC TLS. Internet (IPSEC) Network (802.1x) Application (HTTP,DNS) Transport (TCP/UDP) Transport (TCP/UDP) Internet (IP)
Security Protocols Security Protocols Necessary to communicate securely across untrusted network Provide integrity, confidentiality, authenticity of communications Based on previously discussed cryptographic
Network Security Essentials Chapter 5
Network Security Essentials Chapter 5 Fourth Edition by William Stallings Lecture slides by Lawrie Brown Chapter 5 Transport-Level Security Use your mentality Wake up to reality From the song, "I've Got
Communication Systems 16 th lecture. Chair of Communication Systems Department of Applied Sciences University of Freiburg 2009
16 th lecture Chair of Communication Systems Department of Applied Sciences University of Freiburg 2009 1 25 Organization Welcome to the New Year! Reminder: Structure of Communication Systems lectures
CSC 774 -- Network Security
CSC 774 -- Network Security Topic 6: Transport Layer Security Dr. Peng Ning CSC 774 Network Security 1 Transport Layer Security Protocols Secure Socket Layer (SSL) Originally developed to secure http Version
CSCI 454/554 Computer and Network Security. Topic 8.1 IPsec
CSCI 454/554 Computer and Network Security Topic 8.1 IPsec Outline IPsec Objectives IPsec architecture & concepts IPsec authentication header IPsec encapsulating security payload 2 IPsec Objectives Why
CSC 474 Information Systems Security
CSC 474 Information Systems Security Topic 4.5 Transport Layer Security CSC 474 Dr. Peng Ning 1 Transport Layer Security Protocols Secure Socket Layer (SSL) Originally developed to secure http Version
Authentication Application
Authentication Application KERBEROS In an open distributed environment servers to be able to restrict access to authorized users to be able to authenticate requests for service a workstation cannot be
Authentication applications Kerberos X.509 Authentication services E mail security IP security Web security
UNIT 4 SECURITY PRACTICE Authentication applications Kerberos X.509 Authentication services E mail security IP security Web security Slides Courtesy of William Stallings, Cryptography & Network Security,
Announcement. Final exam: Wed, June 9, 9:30-11:18 Scope: materials after RSA (but you need to know RSA) Open books, open notes. Calculators allowed.
Announcement Final exam: Wed, June 9, 9:30-11:18 Scope: materials after RSA (but you need to know RSA) Open books, open notes. Calculators allowed. 1 We have learned Symmetric encryption: DES, 3DES, AES,
The Secure Sockets Layer (SSL)
Due to the fact that nearly all businesses have websites (as well as government agencies and individuals) a large enthusiasm exists for setting up facilities on the Web for electronic commerce. Of course
7 Network Security. 7.1 Introduction 7.2 Improving the Security 7.3 Internet Security Framework. 7.5 Absolute Security?
7 Network Security 7.1 Introduction 7.2 Improving the Security 7.3 Internet Security Framework 7.4 Firewalls 7.5 Absolute Security? 7.1 Introduction Security of Communications data transport e.g. risk
IP Security. Ola Flygt Växjö University, Sweden http://w3.msi.vxu.se/users/ofl/ Ola.Flygt@vxu.se +46 470 70 86 49
IP Security Ola Flygt Växjö University, Sweden http://w3.msi.vxu.se/users/ofl/ Ola.Flygt@vxu.se +46 470 70 86 49 1 Internetworking and Internet Protocols (Appendix 6A) IP Security Overview IP Security
Transport Layer Security Protocols
SSL/TLS 1 Transport Layer Security Protocols Secure Socket Layer (SSL) Originally designed to by Netscape to secure HTTP Version 2 is being replaced by version 3 Subsequently became Internet Standard known
Outline. INF3510 Information Security. Lecture 10: Communications Security. Communication Security Analogy. Network Security Concepts
Outline INF3510 Information Security Lecture 10: Communications Security Network security concepts Communication security Perimeter security Protocol architecture and security services Example security
How To Understand And Understand The Ssl Protocol (Www.Slapl) And Its Security Features (Protocol)
WEB Security: Secure Socket Layer Cunsheng Ding HKUST, Hong Kong, CHINA C. Ding - COMP581 - L22 1 Outline of this Lecture Brief Information on SSL and TLS Secure Socket Layer (SSL) Transport Layer Security
SSL Secure Socket Layer
??? SSL Secure Socket Layer - architecture and services - sessions and connections - SSL Record Protocol - SSL Handshake Protocol - key exchange alternatives - analysis of the SSL Record and Handshake
Security vulnerabilities in the Internet and possible solutions
Security vulnerabilities in the Internet and possible solutions 1. Introduction The foundation of today's Internet is the TCP/IP protocol suite. Since the time when these specifications were finished in
Real-Time Communication Security: SSL/TLS. Guevara Noubir noubir@ccs.neu.edu CSU610
Real-Time Communication Security: SSL/TLS Guevara Noubir noubir@ccs.neu.edu CSU610 1 Some Issues with Real-time Communication Session key establishment Perfect Forward Secrecy Diffie-Hellman based PFS
Part III-b. Universität Klagenfurt - IWAS Multimedia Kommunikation (VK) M. Euchner; Mai 2001. Siemens AG 2001, ICN M NT
Part III-b Contents Part III-b Secure Applications and Security Protocols Practical Security Measures Internet Security IPSEC, IKE SSL/TLS Virtual Private Networks Firewall Kerberos SET Security Measures
Lecture 10: Communications Security
INF3510 Information Security Lecture 10: Communications Security Audun Jøsang University of Oslo Spring 2015 Outline Network security concepts Communication security Perimeter security Protocol architecture
Transport Level Security
Transport Level Security Overview Raj Jain Washington University in Saint Louis Saint Louis, MO 63130 Jain@cse.wustl.edu Audio/Video recordings of this lecture are available at: http://www.cse.wustl.edu/~jain/cse571-14/
SSL Secure Socket Layer
??? SSL Secure Socket Layer - architecture and services - sessions and connections - SSL Record Protocol - SSL Handshake Protocol - key exchange alternatives - analysis of the SSL Record and Handshake
Chapter 5: Network Layer Security
Managing and Securing Computer Networks Guy Leduc Mainly based on Network Security - PRIVATE Communication in a PUBLIC World C. Kaufman, R. Pearlman, M. Speciner Pearson Education, 2002. (chapters 17 and
Secure Sockets Layer
SSL/TLS provides endpoint authentication and communications privacy over the Internet using cryptography. For web browsing, email, faxing, other data transmission. In typical use, only the server is authenticated
Computer and Network Security
Computer and Network Security c Copyright 2000 R E Newman Computer & Information Sciences & Engineering University Of Florida Gainesville, Florida 32611-6120 nemo@ciseufledu Network Security Protocols
Secure Socket Layer/ Transport Layer Security (SSL/TLS)
Secure Socket Layer/ Transport Layer Security (SSL/TLS) David Sánchez Universitat Pompeu Fabra World Wide Web (www) Client/server services running over the Internet or TCP/IP Intranets nets widely used
Overview of SSL. Outline. CSC/ECE 574 Computer and Network Security. Reminder: What Layer? Protocols. SSL Architecture
OS Appl. CSC/ECE 574 Computer and Network Security Outline I. Overview II. The Record Protocol III. The Handshake and Other Protocols Topic 8.3 /TLS 1 2 Reminder: What Layer? Overview of 3 4 Protocols
Protocol Security Where?
IPsec: AH and ESP 1 Protocol Security Where? Application layer: (+) easy access to user credentials, extend without waiting for OS vendor, understand data; (-) design again and again; e.g., PGP, ssh, Kerberos
Managing and Securing Computer Networks. Guy Leduc. Chapter 4: Securing TCP. connections. connections. Chapter goals: security in practice:
Managing and Securing Computer Networks Guy Leduc Chapter 4: Securing TCP connections Computer Networking: A Top Down Approach, 6 th edition. Jim Kurose, Keith Ross Addison-Wesley, March 2012. (section
Outline. Transport Layer Security (TLS) Security Protocols (bmevihim132)
Security Protocols (bmevihim132) Dr. Levente Buttyán associate professor BME Híradástechnikai Tanszék Lab of Cryptography and System Security (CrySyS) buttyan@hit.bme.hu, buttyan@crysys.hu Outline - architecture
How To Use Kerberos
KERBEROS 1 Kerberos Authentication Service Developed at MIT under Project Athena in mid 1980s Versions 1-3 were for internal use; versions 4 and 5 are being used externally Version 4 has a larger installed
Cryptography and network security CNET4523
1. Name of Course 2. Course Code 3. Name(s) of academic staff 4. Rationale for the inclusion of the course/module in the programme Cryptography and network security CNET4523 Major The Great use of local
WEB Security & SET. Outline. Web Security Considerations. Web Security Considerations. Secure Socket Layer (SSL) and Transport Layer Security (TLS)
Outline WEB Security & SET (Chapter 19 & Stalling Chapter 7) Web Security Considerations Secure Socket Layer (SSL) and Transport Layer Security (TLS) Secure Electronic Transaction (SET) Web Security Considerations
Internet Security Architecture
accepted for publication in Computer Networks and ISDN Systems Journal Internet Security Architecture Refik Molva Institut Eurécom 2229, route des Crêtes F-06904 Sophia-Antipolis molva@eurecom.fr Abstract
Protocol Rollback and Network Security
CSE 484 / CSE M 584 (Spring 2012) Protocol Rollback and Network Security Tadayoshi Kohno Thanks to Dan Boneh, Dieter Gollmann, Dan Halperin, John Manferdelli, John Mitchell, Vitaly Shmatikov, Bennet Yee,
Network Security. Lecture 3
Network Security Lecture 3 Design and Analysis of Communication Networks (DACS) University of Twente The Netherlands Security protocols application transport network datalink physical Contents IPSec overview
3.2: Transport Layer: SSL/TLS Secure Socket Layer (SSL) Transport Layer Security (TLS) Protocol
Chapter 2: Security Techniques Background Chapter 3: Security on Network and Transport Layer Network Layer: IPSec Transport Layer: SSL/TLS Chapter 4: Security on the Application Layer Chapter 5: Security
Chapter 10. Network Security
Chapter 10 Network Security 10.1. Chapter 10: Outline 10.1 INTRODUCTION 10.2 CONFIDENTIALITY 10.3 OTHER ASPECTS OF SECURITY 10.4 INTERNET SECURITY 10.5 FIREWALLS 10.2 Chapter 10: Objective We introduce
Chapter 17. Transport-Level Security
Chapter 17 Transport-Level Security Web Security Considerations The World Wide Web is fundamentally a client/server application running over the Internet and TCP/IP intranets The following characteristics
Network Security. Abusayeed Saifullah. CS 5600 Computer Networks. These slides are adapted from Kurose and Ross 8-1
Network Security Abusayeed Saifullah CS 5600 Computer Networks These slides are adapted from Kurose and Ross 8-1 roadmap 1 What is network security? 2 Principles of cryptography 3 Message integrity, authentication
Today s Topics SSL/TLS. Certification Authorities VPN. Server Certificates Client Certificates. Trust Registration Authorities
SSL/TLS Today s Topics Server Certificates Client Certificates Certification Authorities Trust Registration Authorities VPN IPSec Client tunnels LAN-to-LAN tunnels Secure Sockets Layer Secure Sockets Layer
Network Security Web Security and SSL/TLS. Angelos Keromytis Columbia University
Network Security Web Security and SSL/TLS Angelos Keromytis Columbia University Web security issues Authentication (basic, digest) Cookies Access control via network address Multiple layers SHTTP SSL (TLS)
IPsec Details 1 / 43. IPsec Details
Header (AH) AH Layout Other AH Fields Mutable Parts of the IP Header What is an SPI? What s an SA? Encapsulating Security Payload (ESP) ESP Layout Padding Using ESP IPsec and Firewalls IPsec and the DNS
Security Engineering Part III Network Security. Security Protocols (I): SSL/TLS
Security Engineering Part III Network Security Security Protocols (I): SSL/TLS Juan E. Tapiador jestevez@inf.uc3m.es Department of Computer Science, UC3M Security Engineering 4th year BSc in Computer Science,
Security. Contents. S-72.3240 Wireless Personal, Local, Metropolitan, and Wide Area Networks 1
Contents Security requirements Public key cryptography Key agreement/transport schemes Man-in-the-middle attack vulnerability Encryption. digital signature, hash, certification Complete security solutions
Web Security (SSL) Tecniche di Sicurezza dei Sistemi 1
Web Security (SSL) Tecniche di Sicurezza dei Sistemi 1 How the Web Works - HTTP Hypertext transfer protocol (http). Clients request documents (or scripts) through URL. Server response with documents. Documents
Cryptography and Network Security Sicurezza delle reti e dei sistemi informatici SSL/TSL
Cryptography and Network Security Sicurezza delle reti e dei sistemi informatici SSL/TSL Security architecture and protocol stack Applicat. (SHTTP) SSL/TLS TCP IPSEC IP Secure applications: PGP, SHTTP,
Lecture 4: Transport Layer Security (secure Socket Layer)
Lecture 4: Transport Layer Security (secure Socket Layer) Recommended reading: Thomas, SSS and TLS essentials (old but very well written) SSL/TLS: layered view HTTP SMTP TCP/UDP IPsec Network layer security
INTERNET SECURITY: FIREWALLS AND BEYOND. Mehernosh H. Amroli 4-25-2002
INTERNET SECURITY: FIREWALLS AND BEYOND Mehernosh H. Amroli 4-25-2002 Preview History of Internet Firewall Technology Internet Layer Security Transport Layer Security Application Layer Security Before
Security in IPv6. Basic Security Requirements and Techniques. Confidentiality. Integrity
Basic Security Requirements and Techniques Confidentiality The property that stored or transmitted information cannot be read or altered by an unauthorized party Integrity The property that any alteration
Securing IP Networks with Implementation of IPv6
Securing IP Networks with Implementation of IPv6 R.M.Agarwal DDG(SA), TEC Security Threats in IP Networks Packet sniffing IP Spoofing Connection Hijacking Denial of Service (DoS) Attacks Man in the Middle
Chapter 8. Cryptography Symmetric-Key Algorithms. Digital Signatures Management of Public Keys Communication Security Authentication Protocols
Network Security Chapter 8 Cryptography Symmetric-Key Algorithms Public-Key Algorithms Digital Signatures Management of Public Keys Communication Security Authentication Protocols Email Security Web Security
Secure Socket Layer (SSL) and Trnasport Layer Security (TLS)
Secure Socket Layer (SSL) and Trnasport Layer Security (TLS) CSE598K/CSE545 - Advanced Network Security Prof. McDaniel - Spring 2008 1 SSL/TLS The Secure Socket Layer (SSL) and Transport Layer Security
Chapter 11 Security Protocols. Network Security Threats Security and Cryptography Network Security Protocols Cryptographic Algorithms
Chapter 11 Security Protocols Network Security Threats Security and Cryptography Network Security Protocols Cryptographic Algorithms Chapter 11 Security Protocols Network Security Threats Network Security
CSCI 454/554 Computer and Network Security. Final Exam Review
CSCI 454/554 Computer and Network Security Final Exam Review Topics covered by Final Topic before Midterm 20% Topic after Midterm 80% Date: 05/13/2015 9:00am noon Place: the same classroom Open book/notes
Chapter 32 Internet Security
Chapter 32 Internet Security Copyright The McGraw-Hill Companies, Inc. Permission required for reproduction or display. Chapter 32: Outline 32.1 NETWORK-LAYER SECURITY 32.2 TRANSPORT-LAYER SECURITY 32.3
Internet Protocol Security IPSec
Internet Protocol Security IPSec Summer Semester 2011 Integrated Communication Systems Group Ilmenau University of Technology Outline Introduction Authentication Header (AH) Encapsulating Security Payload
Authenticity of Public Keys
SSL/TLS EJ Jung 10/18/10 Authenticity of Public Keys Bob s key? private key Bob public key Problem: How does know that the public key she received is really Bob s public key? Distribution of Public Keys!
IPSec and SSL Virtual Private Networks
IPSec and SSL Virtual Private Networks ISP Workshops Last updated 29 June 2014 1 Acknowledgment p Content sourced from n Merike Kaeo of Double Shot Security n Contact: merike@doubleshotsecurity.com Virtual
Security Considerations for Intrinsic Monitoring within IPv6 Networks: Work in Progress
Security Considerations for Intrinsic Monitoring within IPv6 Networks: Work in Progress Alan Davy and Lei Shi Telecommunication Software&Systems Group, Waterford Institute of Technology, Ireland adavy,lshi@tssg.org
IP SECURITY (IPSEC) PROTOCOLS
29 IP SECURITY (IPSEC) PROTOCOLS One of the weaknesses of the original Internet Protocol (IP) is that it lacks any sort of general-purpose mechanism for ensuring the authenticity and privacy of data as
Overview. SSL Cryptography Overview CHAPTER 1
CHAPTER 1 Note The information in this chapter applies to both the ACE module and the ACE appliance unless otherwise noted. The features in this chapter apply to IPv4 and IPv6 unless otherwise noted. Secure
Chapter 4. Authentication Applications. COSC 490 Network Security Annie Lu 1
Chapter 4 Authentication Applications COSC 490 Network Security Annie Lu 1 OUTLINE Kerberos X.509 Authentication Service COSC 490 Network Security Annie Lu 2 Authentication Applications authentication
Secure Socket Layer (SSL) and Transport Layer Security (TLS)
Secure Socket Layer (SSL) and Transport Layer Security (TLS) Raj Jain Washington University in Saint Louis Saint Louis, MO 63130 Jain@cse.wustl.edu Audio/Video recordings of this lecture are available
SSL/TLS. What Layer? History. SSL vs. IPsec. SSL Architecture. SSL Architecture. IT443 Network Security Administration Instructor: Bo Sheng
What Layer? /TLS IT443 Network Security Administration Instructor: Bo Sheng Application TCP IPSec IP LAN layer Application TCP IP LAN layer 1 2 History v2 proposed and deployed in Netscape 1.1 (1995) PCT
Using etoken for SSL Web Authentication. SSL V3.0 Overview
Using etoken for SSL Web Authentication Lesson 12 April 2004 etoken Certification Course SSL V3.0 Overview Secure Sockets Layer protocol, version 3.0 Provides communication privacy over the internet. Prevents
CS 356 Lecture 28 Internet Authentication. Spring 2013
CS 356 Lecture 28 Internet Authentication Spring 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access Control Lists
Network Security. Marcus Bendtsen Institutionen för Datavetenskap (IDA) Avdelningen för Databas- och Informationsteknik (ADIT)
Network Security Securing communications (SSL/TLS and IPSec) Marcus Bendtsen Institutionen för Datavetenskap (IDA) Avdelningen för Databas- och Informationsteknik (ADIT) Network communication Who are you
Overview. Securing TCP/IP. Introduction to TCP/IP (cont d) Introduction to TCP/IP
Overview Securing TCP/IP Chapter 6 TCP/IP Open Systems Interconnection Model Anatomy of a Packet Internet Protocol Security (IPSec) Web Security (HTTP over TLS, Secure-HTTP) Lecturer: Pei-yih Ting 1 2
Network Security Fundamentals
APNIC elearning: Network Security Fundamentals 27 November 2013 04:30 pm Brisbane Time (GMT+10) Introduction Presenter Sheryl Hermoso Training Officer sheryl@apnic.net Specialties: Network Security IPv6
TLS and SRTP for Skype Connect. Technical Datasheet
TLS and SRTP for Skype Connect Technical Datasheet Copyright Skype Limited 2011 Introducing TLS and SRTP Protocols help protect enterprise communications Skype Connect now provides Transport Layer Security
Branch Office VPN Tunnels and Mobile VPN
WatchGuard Certified Training Branch Office VPN Tunnels and Mobile VPN Fireware XTM and WatchGuard System Manager v11.7 Revised: January 2013 Updated for: Fireware XTM v11.7 Notice to Users Information
Security Engineering Part III Network Security. Security Protocols (II): IPsec
Security Engineering Part III Network Security Security Protocols (II): IPsec Juan E. Tapiador jestevez@inf.uc3m.es Department of Computer Science, UC3M Security Engineering 4th year BSc in Computer Science,
Internetwork Security
Internetwork Security Why Network Security Layers? Fundamentals of Encryption Network Security Layer Overview PGP Security on Internet Layer IPSec IPv6-GCAs SSL/TLS Lower Layers 1 Prof. Dr. Thomas Schmidt
APNIC elearning: Network Security Fundamentals. 20 March 2013 10:30 pm Brisbane Time (GMT+10)
APNIC elearning: Network Security Fundamentals 20 March 2013 10:30 pm Brisbane Time (GMT+10) Introduction Presenter/s Nurul Islam Roman Senior Training Specialist nurul@apnic.net Specialties: Routing &
Computer Security Lectures 11+12 Network Security Jussipekka Leiwo leiwo@cs.vu.nl Network threats Network controls Firewalls Internet security Outline Network threats Causes of security problems: Sharing
Lecture 17 - Network Security
Lecture 17 - Network Security CMPSC 443 - Spring 2012 Introduction Computer and Network Security Professor Jaeger www.cse.psu.edu/~tjaeger/cse443-s12/ Idea Why donʼt we just integrate some of these neat
Security Protocols and Infrastructures. h_da, Winter Term 2011/2012
Winter Term 2011/2012 Chapter 7: Transport Layer Security Protocol Key Questions Application context of TLS? Which security goals shall be achieved? Approaches? 2 Contents Overview Record Protocol Cipher
Bit Chat: A Peer-to-Peer Instant Messenger
Bit Chat: A Peer-to-Peer Instant Messenger Shreyas Zare shreyas@technitium.com https://technitium.com December 20, 2015 Abstract. Bit Chat is a peer-to-peer instant messaging concept, allowing one-to-one
Cryptography and Network Security IPSEC
Cryptography and Network Security IPSEC Security architecture and protocol stack Applicaz. (SHTTP) SSL/TLS TCP IPSEC IP Secure applications: PGP, SHTTP, SFTP, or Security down in the protocol stack -SSL
Computer security Lecture 9
Computer security Lecture 9 Communications and network security Jonathan Jogenfors Communication and network security: Threat model Passive attacks: Eavesdropping, Wiretapping, Sniffing, and Traffic analysis
Netzwerksicherheit: Anwendungen
Internet-Technologien (CS262) Netzwerksicherheit: Anwendungen 22. Mai 2015 Christian Tschudin & Thomas Meyer Departement Mathematik und Informatik, Universität Basel Chapter 8 Security in Computer Networks
Security Protocols/Standards
Security Protocols/Standards Security Protocols/Standards Security Protocols/Standards How do we actually communicate securely across a hostile network? Provide integrity, confidentiality, authenticity
Internet Privacy Options
2 Privacy Internet Privacy Sirindhorn International Institute of Technology Thammasat University Prepared by Steven Gordon on 19 June 2014 Common/Reports/internet-privacy-options.tex, r892 1 Privacy Acronyms
T-79.159 Cryptography and Data Security
T-79.159 Cryptography and Data Security Lecture 11: Security systems using public keys 11.1 PGP Kaufman et al: Ch 17, 11.2 SSL/TLS 18, 19 11.3 IPSEC Stallings: Ch 16,17 1 Pretty Good Privacy Email encryption
CS 494/594 Computer and Network Security
CS 494/594 Computer and Network Security Dr. Jinyuan (Stella) Sun Dept. of Electrical Engineering and Computer Science University of Tennessee Fall 2010 1 Exercise: Chapters 13, 15-18 18 1. [Kaufman] 13.1
13 Virtual Private Networks 13.1 Point-to-Point Protocol (PPP) 13.2 Layer 2/3/4 VPNs 13.3 Multi-Protocol Label Switching 13.4 IPsec Transport Mode
13 Virtual Private Networks 13.1 Point-to-Point Protocol (PPP) PPP-based remote access using dial-in PPP encryption control protocol (ECP) PPP extensible authentication protocol (EAP) 13.2 Layer 2/3/4
Application Note: Onsight Device VPN Configuration V1.1
Application Note: Onsight Device VPN Configuration V1.1 Table of Contents OVERVIEW 2 1 SUPPORTED VPN TYPES 2 1.1 OD VPN CLIENT 2 1.2 SUPPORTED PROTOCOLS AND CONFIGURATION 2 2 OD VPN CONFIGURATION 2 2.1