Chapter 18 Network Security Business Data Communications 5

Chapter 18: Network Security Business Data Communications, 5 e

Types of Security • Information Security • Computer Security • Network Security Business Data Communications, 5 e 2

Security Requirements • • Confidentiality Integrity Availability Authenticity Business Data Communications, 5 e 3

Security Threats • Passive attacks – – Release of message contents Traffic analysis Difficult to detect because there is no data alteration Emphasis on prevention through encryption • Active attacks – – Masquerae Replay Modification of messages Denial of Service Business Data Communications, 5 e 4

Symmetric Encryption • The only form of encryption prior to late 1970 s • Five components to the algorithm – – – Plaintext The original message or data Encryption algorithm Secret key Ciphertext Decryption algorithm • Two requirements – Strong encryption algorithm – Secure exchange of keys Business Data Communications, 5 e 5

Conventional Encryption Operation Business Data Communications, 5 e 6

Symmetric Encryption Attacks • Cryptanalysis – Exploits the algorithm to attempt to deduce a specific plaintext or key being used – If successful, future and past messages encrypted with that key are compromised • Brute Force – Try every possible key on a piece of ciphertext until an intelligible translation into plaintext is obtained – On average, half of all possible keys must be tried to achieve success Business Data Communications, 5 e 7

Data Encryption Standard (DES) • Dominant encryption algorithm after release in 1977 • 56 -bit key made it too easy to crack by 1998 • Life of DES extended by use of triple DES (3 DES – Repeats basic DES algorithm three times, using either two or three unique keys – Key size of 112 or 168 bits – Drawbacks: Algorithm is sluggish in software, 64 -bit block size is inefficient Business Data Communications, 5 e 8

Advanced Encryption Standard Business Data Communications, 5 e 9

Location of Encryption Devices • Link encryption – Each vulnerable communications link is equipped on both ends with an encryption device. – All traffic over all communications links is secured. – Vulnerable at each switch • End-to-end encryption – Encryption process carried out at two end systems – Encrypted data transmitted unaltered across network; destination shares key with source to decrypt data – Packet headers cannot be secured Business Data Communications, 5 e 10

Symmetric Encryption Key Distribution • Both parties must have the secret key • Key is changed frequently • Requires either manual delivery of keys, or a third-party encrypted channel • Most effective method is a Key Distribution Center (e. g. Kerberos) Business Data Communications, 5 e 11

End-to-End Encryption • Two types of keys – Session keys – Permanent keys • Required components – Key distribution center – Security service module (SSM) Business Data Communications, 5 e 12

Automated Key Distribution Business Data Communications, 5 e 13

Traffic Padding • A function that produces ciphertext output continuously, even in the absence of plaintext • Continuous random data stream is generated. When plaintext is available, it is encrypted and transmitted. When input plaintext is not present, the random data are encrypted and transmitted • Makes it impossible for an attacker to distinguish between true data flow and noise and therefore impossible to deduce the amount of traffic Business Data Communications, 5 e 14

Message Authentication • Must verify that contents have not been altered and that source is authentic • Approaches – Authentication using symmetric encryption – Authentication without message encryption – Message authentication code – One-way hash function Business Data Communications, 5 e 15

Hash Function (H) Requirements • • Can be applied to a block of data of any size. Produces a fixed-length output. H(x) is relatively easy to compute for any given x For any given code h, it is computationally infeasible to find x such that H(x) = h. • For any given block x, it is computationally infeasible to find y ≠ x with H(y) = H(x). • It is computationally infeasible to find any pair (x, y) such that H(x) = H(y). Business Data Communications, 5 e 16

Public-Key Encryption • Based on mathematical functions rather than on simple operations on bit patterns • Asymmetric, involving the use of two separate keys • Misconceptions about public key encryption – it is more secure from cryptanalysis – it is a general-purpose technique that has made conventional encryption obsolete – it is less cumbersome than conventional encryption Business Data Communications, 5 e 17

Public-Key Encryption Components • • • Plaintext Encryption algorithm Public and private key Ciphertext Decryption algorithm Business Data Communications, 5 e 18

Public-Key Encryption Operation Business Data Communications, 5 e 19

Public-Key Signature Operation Business Data Communications, 5 e 20

Characteristics of Public-Key • Computationally infeasible to determine the decryption key given knowledge of the cryptographic algorithm and the encryption key • Either of the two related keys can be used for encryption, with the other used for decryption Business Data Communications, 5 e 21

Steps in Public Key Encryption • Each user generates a pair of keys to be used for the encryption and decryption of messages. • Each user places one of the two keys in a public register or other accessible file. This is the public key. The companion key is kept private. • If Bob wishes to send a private message to Alice, Bob encrypts the message using Alice's public key. • When Alice receives the message, she decrypts it using her private key. No other recipient can decrypt the message because only Alice knows Alice's private key. Business Data Communications, 5 e 22

Digital Signature Process Business Data Communications, 5 e 23

RSA Encryption Algorithm • Developed in 1977, first published in 1978 • Widely accepted and implemented approach to public-key encryption • For plaintext block M and ciphertext block C – C = Me mod n – M = Cd mod n = (Me)d mod n = Med mod n • Both sender and receiver must know values of n and e; only receiver knows value of d • Public key of KU = {e, n} • Private key of KR = {d, n}. Business Data Communications, 5 e 24

RSA Requirements • It is possible to find values of e, d, n such that Med = M mod n for all M < n. • It is relatively easy to calculate Me and Cd for all values of M < n. • It is infeasible to determine d given e and n. – This requirement can be met with large values of e and n Business Data Communications, 5 e 25

Approaches to Defeating RSA • Brute force approach: try all possible private keys. – The larger the number of bits in e and d, the more secure the algorithm. – However, the larger the size of the key, the slower the system will run. • Cryptanalysis: factoring n into its two prime factors – A hard problem, but not as hard as it used to be – Currently, a 1024 -bit key size is considered strong enough for virtually all applications Business Data Communications, 5 e 26

Key Management • Symmetric encryption requires both parties to share a secret key • Secure distribution of keys is the most difficult problem for symmetric encryption • Public key encryption solves this problem, but adds the issue of authenticity • Public key certiciates address this issue Business Data Communications, 5 e 27

Public Key Certificates Business Data Communications, 5 e 28

Public Key Certificate Process 1. A public key is generated by the user and submitted to Agency X for certification. 2. X determines by some procedure, such as a faceto-face meeting, that this is authentically the user’s public key. 3. X appends a timestamp to the public key, generates the hash code of the result, and encrypts that result with X’s private key forming the signature. 4. The signature is attached to the public key. Business Data Communications, 5 e 29

Virtual Private Networks (VPNs) • Internet connectivity provides easier access for telecommuters and off-site employees • Use of a public network exposes corporate traffic to eavesdropping and provides an entry point for unauthorized users • A variety of encryption and authentication packages and products are available to secure and authenticate remote access • Need for a standard that allows a variety of platforms to interconnect securely Business Data Communications, 5 e 30

Applications of IPSec • Secures communications across a LAN, WANs, and/or the Internet • Can encrypt and/or authenticate all traffic at the IP level • Examples of use: – Secure branch office connectivity over the Internet – Secure remote access over the Internet – Establishing extranet and intranet connectivity with partners – Enhancing electronic commerce security Business Data Communications, 5 e 31

Benefits of IPSec • When implemented in a firewall or router, provides strong security for all traffic crossing the perimeter • IPSec in a firewall is resistant to bypass • Runs below the transport layer (TCP, UDP) and so is transparent to applications • Can be transparent to end users • Can provide security for individual users if needed Business Data Communications, 5 e 32

IPSec Functions • IPSec provides three main facilities – authentication-only function referred to as Authentication Header (AH) – combined authentication/encryption function called Encapsulating Security Payload (ESP) – a key exchange function • For VPNs, both authentication and encryption are generally desired Business Data Communications, 5 e 33

ESP Transport and Tunneling • Transport Mode • Tunnel Mode – provides protection primarily for upper-layer protocols. – Typically used for end-toend communication between two hosts – encrypts and optionally authenticates the IP payload but not the IP header – useful for relatively small networks; for a full-blown VPN, tunnel mode is far more efficient – Provides protection to the entire packet – Original packet is encapsulated in ESP fields, protecting contents from examination – Used when one or both ends is a security gateway – Multiple hosts on networks behind firewalls may engage in secure communications without implementing IPSec Business Data Communications, 5 e 34

IPSec Key Management • Manual – System administrator manually configures each system with its own keys and with the keys of other communicating systems – Practical for small, relatively static environments • Automated – Enables the on-demand creation of keys for SAs and facilitates the use of keys in a large distributed system – Most flexible but requires more effort to configure and requires more software Business Data Communications, 5 e 35

IPSec and VPNs • Organizations need to isolate their networks and at the same time send and receive traffic over the Internet • Authentication and privacy mechanisms of secure IP allow for security strategy • IPSec can be implemented in routers or firewalls owned and operated by the organization, allowing the network manager complete control over security aspects of the VPN Business Data Communications, 5 e 36