Cryptography & Security: Protect Data from Cyber Threats

Explore security attack mechanisms and services by distinguishing attacks from threats, and examining prevention, detection, and recovery strategies to protect information and facilities in network communications.

Identify the first classification of security attacks on networks. Differentiate passive attacks that observe information without affecting resources from active attacks that modify how the system operates.

Traffic analysis reveals message patterns by observing timing and frequency, even if content is encrypted; use digital signatures to authenticate senders and prevent masquerade.

Demonstrate how a replay attack intercepts a signed message, then resends it to increase a salary, and discuss using timestamps to detect duplicate messages in network protocols.

An attacker intercepts a message, changes the decrease to an increase in salary, and a replay attack shows how an unmodified message can be copied from a prior exchange.

Explore denial of service attacks, the six main classifications, and the distinction between active and passive attacks, with examples like modification, replay, and masquerade, plus core security services.

Authentication verifies that a message comes from the claimed sender, preventing masquerade attacks. It covers peer entity authentication and data origin to confirm the message source.

verify data origin by ensuring data comes from a valid origin, an entity deemed valid regardless of its specific identity.

Explore access control to prevent unauthorized use of resources across a network, including servers, WiFi, and data. Understand how access control mechanisms safeguard resources.

Explain how a firewall sits between internal networks and the world to control access to resources, and outline confidentiality, integrity, and availability as core security services, including denial-of-service threats.