{"id":5,"date":"2018-07-11T08:43:16","date_gmt":"2018-07-11T08:43:16","guid":{"rendered":"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/2018\/07\/11\/chapter-1\/"},"modified":"2022-01-06T10:36:58","modified_gmt":"2022-01-06T10:36:58","slug":"chapter-1","status":"publish","type":"chapter","link":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/chapter\/chapter-1\/","title":{"rendered":"Cryptography"},"content":{"raw":"
\"epgp<\/a>\r\n<\/span><\/div>\r\nModule 1: Introduction to cryptography, key principles of security, security mechanisms, security services, threat, attack, the information systems security engineering process.\r\n\r\nTypes of security :<\/strong>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Information<\/td>\r\nProtecting\u00a0 information\u00a0 (physical\u00a0 or\u00a0 digital)\u00a0 from<\/td>\r\n<\/tr>\r\n
Security<\/td>\r\nunauthorized\u00a0 access,\u00a0 use,\u00a0 disclosure,\u00a0 disruption,<\/td>\r\n<\/tr>\r\n
<\/td>\r\nmodification or destruction.<\/td>\r\n<\/tr>\r\n
Computer<\/td>\r\nTo protect files and other information stored on the computer. Computer may<\/td>\r\n<\/tr>\r\n
Security<\/td>\r\nbe time shared or part of public telephone network, data network or the<\/td>\r\n<\/tr>\r\n
<\/td>\r\ninternet.<\/td>\r\n<\/tr>\r\n
<\/td>\r\n<\/td>\r\n<\/tr>\r\n
Network<\/td>\r\nTo protect data, when data is transmitted between computer to computer.<\/td>\r\n<\/tr>\r\n
Security<\/td>\r\n<\/td>\r\n<\/tr>\r\n
<\/td>\r\n<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\nSecurity Violation :\r\n\r\n\"\"\r\n\r\n\"\"\r\n\r\n \r\n\r\n\"\"\r\n\r\n\"\"\r\n\r\nThe OSI Security Architecture:<\/strong>\r\n\r\n \r\n

The International Telecommunication Union(ITU) Telecommunication Standardization Sector(ITU-T) develops standards relating to open systems interconnection(OSI). OSI security architecture was developed in the context of the OSI protocol architecture.<\/p>\r\n \r\n\r\nThe OSI Security Architecture:<\/strong>\r\n\r\n \r\n

    \r\n \t
  1. Security attack: <\/strong>If information owned by an organization is compromised by any action, it is called security attack.<\/li>\r\n \t
  2. Security mechanism: <\/strong>Security mechanism is a process that is designed to detect, prevent or recover from a security attack.<\/li>\r\n \t
  3. Security service: <\/strong>Security service is used to mitigate security attack by using one or more security mechanism.<\/li>\r\n<\/ol>\r\nSecurity Policy<\/strong>: An Information Technology (IT) Security Policy identifies the rules and procedures for all who are accessing and using an organization's IT assets and resources.\r\n\r\n \r\n\r\nVulnerabilities, Threats, Attacks(RFC 2828):<\/strong>\r\n\r\n \r\n