compare and contrast two fundamental security design principles. Analyze how these principles and how they impact an organizations security posture.
Principles and Practice
Eighth Edition
Chapter 1
Information and Network
Security
Concepts
Cybersecurity
is the collection of tools, policies, security concepts, security safeguards, guidelines, risk management approaches, actions, training, best practices, assurance, and technologies that can be used to protect the cyberspace environment and organization and users’ assets.
Organization and users’ assets include connected computing
devices, personnel, infrastructure, applications, services, telecommunications systems, and the totality of transmitted and/or stored information in the cyberspace environment.
Cybersecurity strives to ensure the attainment and maintenance of the security properties of the organization and users’ assets against relevant security risks in the cyberspace environment. The general security objectives comprise the following: availability; integrity, which may include data authenticity and nonrepudiation; and confidentiality
Information Security
1. This term refers to preservation of confidentiality, integrity, and availability of information. In addition, other properties, such as authenticity, accountability, nonrepudiation, and reliability can also be involved
Network Security
1. This term refers to protection of networks and their service from unauthorized modification, destruction, or disclosure, and provision of assurance that the network performs its critical
function
s correctly and there are no harmful side effects
1. The cybersecurity definition introduces three key objectives that are at the heart of information and network security:
2. Confidentiality: This term covers two related
concepts:
0. Data confidentiality: Assures that private or confidential information is not made available or disclosed to unauthorized individuals
0. Privacy: Assures that individuals control or influence what information related to them may be collected and stored and by whom and to whom that information may be disclosed
1. Integrity: This term covers two related concepts:
3. Data integrity: Assures that data and programs are changed only in a specified and authorized manner. This concept also encompasses data authenticity, which means that a digital object is indeed what it claims to be or what it is claimed to be, and nonrepudiation, which is assurance that the sender of information is provided with proof of delivery and the recipient is provided with proof of the sender’s identity, so neither can later deny having processed the information
3. System integrity: Assures that a system performs its intended function in an unimpaired manner, free from deliberate or inadvertent unauthorized manipulation of the system
1. Availability: Assures that systems work promptly and service is not denied to authorized users
Figure 1.1 Essential Information and Network Security Objectives
1. Security is not simple
1. Potential attacks on the security features need to be considered
1. Procedures used to provide particular services are often counter-intuitive
1. It is necessary to decide where to use the various security mechanisms
1. Requires constant monitoring
1. Is too often an afterthought
1.
Security mechanisms typically involve more than a particular algorithm or protocol
1. Security is essentially a battle of wits between a perpetrator and the designer
1. Little benefit from security investment is perceived until a security failure occurs
1. Strong security is often viewed as an impediment to efficient and user-friendly operation
1. Security attack
15. Any action that compromises the security of information
owned by an organization
1. Security mechanism
16. A process (or a device incorporating such a process) that is designed to detect, prevent, or recover from a security attack
1. Security service
17. A processing or communication service that enhances the security of the data processing systems and the information transfers of an organization
17. Intended to counter security attacks, and they make use of one or more security mechanisms to provide the service
Threat
A potential for violation of security, which exists when there is a circumstance, capability, action, or event that could breach security and cause harm. That is, a threat is a possible danger that might exploit a vulnerability.
Attack
An assault on system security that derives from an intelligent threat; that is, an intelligent act that is a deliberate attempt (especially in the sense of a method or technique) to evade security services and violate the security policy of a system.
Figure 1.2 Key Concepts in Security (1 of 2)
(2 of 2)
1. A means of classifying security attacks, used both in X.800 and RFC 4949, is in terms of passive attacks and active attacks
1. A passive attack attempts to learn or make use of information from the system but does not affect system resources
1. An active attack attempts to alter system resources or
affect their operation
1. Are in the nature of eavesdropping on, or monitoring of, transmissions
1. Goal of the opponent is to obtain information that is being transmitted
1.
Two types of passive
attacks are:
23. The release of message contents
23. Traffic analysis
1. Involve some modification of the data stream or the creation of a false stream
1. Difficult to prevent because of the wide variety of potential physical, software, and network vulnerabilities
1. Goal is to detect attacks and to recover from any disruption or delays caused by them
1.
Masquerade
27. Takes place when one entity pretends to be a different entity
27. Usually includes one of the other forms of active attack
1. Replay
28. Involves the passive capture of a data unit and its subsequent retransmission to produce an unauthorized effect
1. Data Modification
29. Some portion of a legitimate message is altered,
or message
s are delayed or reordered to produce an unauthorized effect
1. Denial of service
30. Prevents or inhi
bits
the normal use or management of communications facilities
1. Concerned with assuring that a communication is authentic
31. In the case of a single message, assures the recipient that the message is from the source that it claims to be from
31. In the case of ongoing interaction, assures the two entities are authentic and that the connection is not interfered with in such a way that a third party can masquerade as one of the two legitimate parties
1. Two specific authentication services are defined in X.800:
32. Peer entity authentication
32. Data origin authentication
1. Peer entity authentication
33. Provides for the corroboration of the identity of a peer entity in an association. Two entities are considered peers if they implement the same protocol in different systems. Peer entity authentication is provided for use at the establishment of, or at times during the data transfer phase of, a connection. It attempts to provide confidence that an entity is not performing either a masquerade or an unauthorized replay of a previous connection
1. Data origin authentication
34. Provides for the corroboration of the source of a data unit. It does not provide protection against the duplication or modification of data units. This type of service supports applications like electronic mail, where there are no ongoing interactions between the communicating entities
1. The ability to limit and control the access to host systems
and applications via communications links
1. To achieve this, each entity trying to gain access must first be identified, or authenticated, so that access rights can be tailored to the individual
1. The protection of transmitted data from passive attacks
37. Broadest service protects all user data transmitted between
two users over a period of time
37. Narrower forms of service includes the protection of a single message or even specific fields within a message
1. The protection of traffic flow from analysis
38. This requires that an attacker not be able to observe the source and destination, frequency, length, or other characteristics of the traffic on a communications facility
1. Can apply to a stream of messages, a single message, or selected fields within a message
1. Connection-oriented integrity service, one that deals with a stream of messages, assures that messages are received as sent with no duplication, insertion, modification, reordering, or replays
1. A connectionless integrity service, one that deals with individual messages without regard to any larger context, generally provides protection against message modification only
1. Prevents either sender or receiver from denying a transmitted message
1. When a message is sent, the receiver can prove that the alleged sender in fact sent the message
1. When a message is received, the sender can prove that the alleged receiver in fact received the message
1. Protects a system to ensure its availability
1. This service addresses the security concerns raised by denial-of-service attacks
1. It depends on proper management and control of system resources and thus depends on access control service and other security services
1. Cryptographic algorithms: We can distinguish between reversible cryptographic mechanisms and irreversible cryptographic mechanisms. A reversible cryptographic mechanism is simply an encryption algorithm that allows data to be encrypted and subsequently decrypted. Irreversible cryptographic mechanisms include hash algorithms and message authentication codes, which are used in digital signature and message authentication applications.
1. Data integrity: This category covers a variety of mechanisms used to assure the integrity of a data unit or stream of data units.
1. Digital signature: Data appended to, or a cryptographic transformation of, a data unit that allows a recipient of the data unit to prove the source and integrity of the data unit and protect against forgery.
1. Authentication exchange: A mechanism intended to ensure
the identity of an entity by means of information exchange.
1. Traffic padding: The insertion of bits into gaps in a data stream
to frustrate traffic analysis attempts.
1. Routing control: Enables selection of particular physically or logically secure routes for certain data and allows routing changes, especially when a breach of security is suspected.
1. Notarization: The use of a trusted third party to assure certain
properties of a data exchange
1. Access control: A variety of mechanisms that enforce access rights to resources.
1. Deterministic functions that have certain properties useful for cryptography
1. One type of keyless algorithm is the cryptographic hash
function
57. A hash function turns a variable amount of text into a small, fixed-length value called a hash value, hash code, or digest
57. A cryptographic hash function is one that has additional properties that make it useful as part of another cryptographic algorithm, such as a message authentication code or a digital signature
1. A pseudorandom number generator produces a deterministic sequence of numbers or bits that has the appearance of being a truly random sequence
1. Single-key cryptographic algorithms depend on the use of a secret key
1. Encryption algorithms that use a single key are referred to
as symmetric encryption algorithms
60. With symmetric encryption, an encryption algorithm takes as input some data to be protected and a secret key and produces an unintelligible transformation on that data
60. A corresponding decryption algorithm takes the transformed data and the same secret key and recovers the original data
1. Symmetric encryption takes the following forms:
61. Block cipher
0. A block cipher operates on data as a sequence of
blocks
0. In most versions of the block cipher, known as modes of operation, the transformation depends not only on the current data block and the secret key but also on the content of preceding blocks
61. Stream cipher
1. A stream cipher operates on data as a sequence of
bits
1. As with the block cipher, the transformation depends
on a secret key
1. Another form of single-key cryptographic algorithm is the message authentication code (MAC)
62. A MAC is a data element associated with a data block
or message
62. The MAC is generated by a cryptographic transformation involving a secret key and, typically, a cryptographic hash function of the message
62. The MAC is designed so that someone in possession
of the secret key can verify the integrity of the message
62. The recipient of the message plus the MAC can perform the same calculation on the message; if the calculated MAC matches the MAC accompanying the message, this provides assurance that the message has not been altered
1. Encryption algorithms that use a single key are referred to as
asymmetric encryption algorithms
1. Digital signature algorithm
64. A digital signature is a value computed with a cryptographic algorithm and associated with a data object in such a way that any recipient of the data can use the signature to verify the data’s origin and integrity
1. Key exchange
65. The process of securely distributing a symmetric key to two or more parties
1. User authentication
66. The process of authenticating that a user attempting to access an application or service is genuine and, similarly, that the application or service is genuine
Security
1. Deals with the protection of communications through the network, including measures to protect against both passive and active attacks
1. Communications security is primarily implemented using network protocols
68. A network protocol consists of the format and procedures that governs the transmitting and receiving of data between points in a network
68. A protocol defines the structure of the individual data units and the control commands that manage the data transfer
1. With respect to network security, a security protocol may be an enhancement that is part of an existing protocol or a standalone protocol
1. The other aspect of network security is the protection of network devices, such as routers and switches, and end systems connected to the network, such as client systems and servers
1. The primary security concerns are intruders that gain access to the system to perform unauthorized actions, insert malicious software (malware), or overwhelm system resources to diminish availability
1. Three types of device security are:
72. Firewall
0. A hardware and/or software capability that limits access between a network and device attached to the network, in accordance with a specific security policy. The firewall acts as a filter that permits or denies data traffic, both incoming and outgoing, based on a set of rules based on traffic content and/or traffic pattern
72. Intrusion detection
1. Hardware or software products that gather and analyze information from various areas within a computer or a network for the purpose of finding, and providing real-time or near-real- time warning of, attempts to access system resources in an unauthorized manner
72. Intrusion prevention
2. Hardware or software products designed to detect intrusive activity and attempt to stop the activity, ideally before it reaches its target
1. One of the most widely accepted and most cited definitions of trust is:
“the willingness of a party to be vulnerable to the actions of another party based on the expectation that the other will perform a particular action important to the trustor, irrespective of the ability to monitor or control that other party”
1. Three related concepts are relevant to a trust model:
74. Trustworthiness: A characteristic of an entity that reflects the degree to which that entity is deserving of trust
74. Propensity to trust: A tendency to be willing to trust others across a broad spectrum of situations and trust targets. This suggests that every individual has some baseline level of trust that will influence the person’s willingness to rely on the words and actions of others
74. Risk: A measure of the extent to which an entity is threatened by a potential circumstance or event, and typically a function of 1) the adverse impacts that would arise if the circumstance or event occurs; and 2) the likelihood of occurrence
Security
1. Trust is confidence that an entity will perform in a way that will not prejudice the security of the user of the system of which that entity is a part
1. Trust is always restricted to specific functions or ways of behavior and
is meaningful only in the context of a security policy
1. Generally, an entity is said to trust a second entity when the first entity assumes that the second entity will behave exactly as the first entity expects
1. In this context, the term entity may refer to a single hardware component or software module, a piece of equipment identified by make and model, a site or location, or an organization
1. Organizations need to be concerned about both internal users (employees, on-site contractors) and external users (customers, suppliers) of their information systems
1. W ith respect to internal users, an organization develops a level of trust in individuals by policies in the following two areas:
1. Human resource security
81. Sound security practice dictates that information security requirements be embedded into each stage of the employment life cycle, specifying security-related actions required during the induction of each individual, their ongoing management, and termination of their employment. Human resource security also includes assigning ownership of information (including responsibility for its protection) to capable individuals and obtaining confirmation of their understanding and acceptance
1. Security awareness and training
82. This area refers to disseminating security information to all employees, including I T staff, I T security staff, and management, as well as I T users and other employees. A workforce that has a high level of security awareness and appropriate security training for each individual’s role is as important, if not more important, than any other security countermeasure or control
1. Most organizations rely on information system service and information provided by external organizations, as well as partnerships to accomplish missions and business functions (examples are cloud service providers and companies that form part of the supply chain for the organization)
1. To manage risk to the organization, it must establish trust relationships with these external organizations
1. NIST SP 800-39 (Managing Information Security Risk, March 2011) indicates that such trust relationships can be:
85. Formally established, for example, by documenting the trust-related information in contracts, service-level agreements, statements of work, memoranda of agreement/understanding, or interconnection security agreements
85. Scalable and inter-organizational or intra-organizational in nature
85. Represented by simple (bilateral) relationships between two partners or more complex many-to-many relationships among many diverse partners
Systems
1. SP 800-39 defines trustworthiness for information systems as
“the degree to which information systems (including the information technology products from which the systems are built) can be expected to preserve the confidentiality, integrity, and availability of the information being processed, stored, or transmitted by the systems across the full range of threats”
1. Two factors affecting the trustworthiness of information systems are:
87. Security functionality: The security features/functions employed within the system. These include cryptographic and network security technologies
87. Security assurance: The grounds for confidence that the security functionality is effective in its application. This area is addressed by security management techniques, such as auditing and incorporating security considerations into the system development life cycle
1. Validated trust:
88. Trust is based on evidence obtained by the trusting organization about the trusted organization or entity. The information may include information security policy, security measures, and level of oversight
1. Direct historical trust:
89. This type of trust is based on the security-related track record exhibited by an organization in the past, particularly in interactions with the organization seeking to establish trust
1. Mediated trust:
90. Mediated trust involves the use of a third party that is mutually trusted by two parties, with the third party providing assurance or guarantee of a given level of trust between the first two parties
1. Mandated trust:
91. An organization establishes a level of trust with another organization based on a specific mandate issued by a third party in a position of authority
1. National Institute of Standards and Technology:
92. N I S T is a U.S. federal agency that deals with measurement science, standards, and technology related to U.S. government use and to the promotion of U.S. private-sector innovation. Despite its national scope, N I ST Federal Information Processing Standards (F I P S) and Special Publications (S P) have a worldwide impact
1. Internet Society:
93. I S O C is a professional membership society with worldwide organizational and individual membership. It provides leadership in addressing issues that confront the future of the Internet and is the organization home for the groups responsible for Internet infrastructure standards, including the Internet Engineering Task Force (I ET F) and the Internet Architecture Board (IAB). These organizations develop Internet standards and related specifications, all of which are published as Requests for Comments (R F C s).
1. I T U-T:
94. The International Telecommunication Union (IT U) is an international organization within the United Nations System in which governments and the private sector coordinate global telecom networks and services. The I T U Telecommunication Standardization Sector (I T U-T) is one of the three sectors of the I TU. I T U-T’s mission is the development of technical standards covering all fields of telecommunications. I TU-T standards are referred to as Recommendations
1. I S O:
95. The International Organization for Standardization (I SO) is a worldwide federation of national standards bodies from more than 140 countries, one from each country. I SO is a nongovernmental organization that promotes the development of standardization and related activities with a view to facilitating the international exchange of goods and services and to developing cooperation in the spheres of intellectual, scientific, technological, and economic activity. I SO’s work results in international agreements that are published as International Standards
1. Describe the key security requirements of confidentiality, integrity, and availability
1. List and briefly describe key organizations involved in cryptography standards
1. Provide an overview of keyless, single-key and two-key cryptographic algorithms
1. Provide an overview of the main areas of network security
1. Describe a trust model for information security
1. Discuss the types of security threats and attacks that must be dealt with and give examples of the types of threats and attacks that apply to different categories of computer and network assets
This work is protected by United States copyright laws and is provided solely for the use of instructors in teaching their courses and assessing student learning. Dissemination or sale of any part of this work (including on the World Wide Web) will destroy the integrity of the work and is not permitted. The work and materials from it should never be made available to students except by instructors using the accompanying text in their classes. All recipients of this work are expected to abide by these restrictions and to honor the intended pedagogical purposes and the needs of other instructors who rely on these materials.