This is the last part of the course. The main concepts that are discussed in this part are: Tools and techniques to protect data during the transmission over the Internet, Sobig F. worm, grappling Hook attack, Morris Internet worm, Overview of the Internet security protocols such as https and ssh. | Network Security Lecture 31 Presented by: Dr. Munam Ali Shah Summary of the Previous Lecture Secure Socket Layer (SSL) Architecture Connection Session Record Protocol Service Record Protocol operation Three SSL-specific protocols that use the SSL Record Protocol SSL Change Cipher Spec Protocol Alert Protocol Handshake Protocol Integrating SSL/TLS with HTTP HTTPS HTTPS and SSH Course Revision Outlines of revision lecture Part -I System/Computer Security The main concepts revised in this part are: Security concepts, security violation categories, security measure levels, methods to violate security, types of attacks and firewalls. Outlines of revision lecture Part – II Network Security This part is will cover most of the contents of the course. It has been further divided in following sub- parts: Analysis of network security Cryptography as a network security tool Symmetric key cryptography Asymmetric key cryptography Incorporating security in other parts of the network Outlines of . | Network Security Lecture 31 Presented by: Dr. Munam Ali Shah Summary of the Previous Lecture Secure Socket Layer (SSL) Architecture Connection Session Record Protocol Service Record Protocol operation Three SSL-specific protocols that use the SSL Record Protocol SSL Change Cipher Spec Protocol Alert Protocol Handshake Protocol Integrating SSL/TLS with HTTP HTTPS HTTPS and SSH Course Revision Outlines of revision lecture Part -I System/Computer Security The main concepts revised in this part are: Security concepts, security violation categories, security measure levels, methods to violate security, types of attacks and firewalls. Outlines of revision lecture Part – II Network Security This part is will cover most of the contents of the course. It has been further divided in following sub- parts: Analysis of network security Cryptography as a network security tool Symmetric key cryptography Asymmetric key cryptography Incorporating security in other parts of the network Outlines of revision lecture Part – III Internet/Web Security This is the last part of the course. The main concepts that are discussed in this part are: Tools and techniques to protect data during the transmission over the Internet, Sobig F. worm, grappling Hook attack, Morris Internet worm, Overview of the Internet security protocols such as https and ssh. The Security Problem “A System is secure if resources are used and accessed as intended under all circumstances” (Silberschatz, Galvin and Gagne) There are four things to notice here 1- resources 2- used and accessed 3- as intended 4- in all circumstances 7 Some examples A transmit a file (containing sensitive information) to B. C, who is not authorized to read the file, is able monitor the transmission Administrator D sends a message to computer E for updating an authorization file. F intercept the message, alters its content to add or delete entries, and then forwards the message to E. E accept the message and update the authorization file .
