Bài giảng An toàn và bảo mật hệ thống công nghệ thông tin - Chương 8: Cryptography standards

Chương 8 trang bị cho người học những kiến thức cơ bản về các chuẩn mật mã. Những nội dung chính được trang bị trong chương này gồm có: Các chuẩn và các giao thức mã hóa, quản trị khóa và chu kỳ thời gian của khóa. Mời các bạn cùng tham khảo.
Nội dung trích xuất từ tài liệu:
Bài giảng An toàn và bảo mật hệ thống công nghệ thông tin - Chương 8: Cryptography standardsChapter8 Cryptography StandardsCryptographyStandardsandProtocols NSA:TheNationalSecurityAgency(NSA)isresponsible forcreatingcodes,breakingcodes,andcodingsystems fortheU.S.government.  Thisagencywascharteredin1952.Ittriestokeepalow profile;formanyyears,thegovernmentdidn’tpublicly acknowledgeitsexistence. NSA/CSS:TheNationalSecurityAgency/CentralSecurity Service(NSA/CSS)isanindependentlyfunctioningpartof theNSA.  Itwascreatedintheearly1970stohelpstandardizeand supportDepartmentofDefense(DoD)activities.  TheNSA/CSSsupportsallbranchesofthemilitary.CryptographyStandardsandProtocols NIST:TheNationalInstituteofStandardsandTechnology, knownastheNationalBureauofStandards(NBS).  NISThasbecomeveryinvolvedincryptographystandards, systems,andtechnologyinavarietyofareas. ABA:TheAmericanBankersAssociationhasbeenvery involvedinthesecurityissuesfacingthebankingand financialindustries.  Banksneedtocommunicatewitheachotherinasecure manner.  TheABAsponsorsandsupportsseveralkeyinitiatives regardingfinancialtransactions.CryptographyStandardsandProtocols IETF:TheInternetEngineeringTaskForce(IETF)isan internationalcommunityofcomputerprofessionals  networkengineers,vendors,administrators,and researchers.  TheIETFismainlyinterestedinimprovingtheInternet;it’s alsoveryinterestedincomputersecurityissues.  TheIETFusesworkinggroupstodevelopandpropose standards. ISOC:TheInternetSociety(ISOC)isaprofessionalgroup whosemembershipconsistsprimarilyofInternetexperts.  TheISOCoverseesanumberofcommitteesandgroups, includingtheIETF.CryptographyStandardsandProtocols W3C:TheWorldWideWebConsortium(W3C)isan associationconcernedwiththeinteroperability,growth,and standardizationoftheWorldWideWeb  theprimarysponsorofXMLandotherwebenabled technologies. ITU:TheInternationalTelecommunicationsUnionis responsibleforvirtuallyallaspectsoftelecommunications andradiocommunicationsstandardsworldwide. CCITT:TheComitéConsultatifInternationalTéléphoniqueet Télégraphique:committeehasbeeninvolvedindeveloping telecommunicationsanddatacommunicationsstandards. IEEE:TheInstituteofElectricalandElectronicsEngineers:is aninternationalorganizationfocusedontechnologyand relatedstandards.Protocols:SecureSocketsLayer(SSL) DevelopedbyNetscape Usespublickeyencryptiontosecurechanneloverpublic Internet SSLisusedtoestablishasecurecommunication connectionbetweentwoTCPbasedmachines. Providesprivacy  Encryptedconnection  Confidentialityandtamperdetection Providesauthentication  Authenticateserver  Authenticateclientoptionally Protocols:SecureSocketsLayer(SSL) Liesabovetransportlayer,belowapplicationlayer  Canlieatopanytransportprotocol,notjustTCP/IP  RunsunderapplicationprotocolslikeHTTP,FTP,andTELNETSSL:ServerAuthenticationSSL:ClientAuthenticationProtocols:SecureElectronicTransaction(SET) SETprovidesencryptionforcreditcardnumbersthatcan betransmittedovertheInternet. ItwasdevelopedbyVisaandMasterCard Worksinconjunctionwithanelectronicwalletthatmustbe setupinadvanceofthetransaction Anelectronicwalletisadevicethatidentifiesyou electronicallyinthesamewayasthecardsyoucarryin yourwallet.Protocols:SecureElectronicTransaction(SET)Protocols:SHTTP SecureHypertextTransferProtocol(SHTTP):extended versionofHypertextTransferProtocol;providesfor encryptionofindividualmessagesbetweenclientand serveracrossInternet SHTTPistheapplicationofSSLoverHTTP;allows encryptionofinformationpassingbetweencomputers throughprotectedandsecurevirtualconnectionProtocols:SecureShell(SSH)  SecureShell(SSH)isatunnelingprotocoloriginallyused onUnixsystems.  Thehandshakeprocessbetweentheclientandserveris similartotheprocessdescribedinSSL.  SSHisprimarilyintendedforinteractiveterminalsessions.  SSHconnectionsareestablishedintwophases:  Thefirstphaseisasecurechanneltonegotiatethechannel connection  Thesecondphaseisasecurechannelusedtoestablishthe connect ...