COURSE: BACHELOR OF SCIENCE IN COMPUTER SCIENCE
SCHOOL: COMPUTING AND INFORMATICS
DEPARTMENT: INFORMATION TECHNOLOGY
BIT4104: SECURITY AND CRYPTOGRAPHY
ASSIGNMENT
GROUP 38 MEMBERS
S/NO NAME REGISTRATION NUMBER
1. MAYEN LUAL BSCCS/2025/67976
2. POTH DARBEL BIT/2024/45573
3. JONKALTZ MIRCH BSCCS/2024/38477
4. MELLAN PAUL BSCCS/2024/42272
5. NOOR ALI BSCCS/2023/63709
6. DERRICK MURITHI BSCCS/2025/34007
TOPIC: NETWORK SECURITY
Objectives
To understand Network Security (examples, strengths, weaknesses, and practical
implications)
Authentication of Systems (Kerberos V4 and V5 and X.509 Authentication Service)
To understand the principles and components of data communication systems.
1. Network Security
Objectives
To understand the importance of securing computer networks.
To learn about different threats to network security and how to mitigate them.
To explore tools, techniques, and protocols used to secure networks.
To understand how different network security mechanisms work together to ensure
confidentiality, integrity, and availability.
Definition of Terms
1. Network Security: A set of policies, practices, and tools designed to protect the integrity,
confidentiality, and availability of computer networks and data from unauthorized
access, misuse, and attacks.
2. Firewall: A system designed to monitor and control incoming and outgoing network
traffic based on security rules.
3. Encryption: The process of converting data into a form that cannot be easily understood
without decryption, ensuring data confidentiality.
4. Intrusion Detection System (IDS): A tool used to monitor network traffic for suspicious
activity and potential threats.
5. Denial of Service (DoS): A type of cyber-attack where the attacker tries to prevent
legitimate users from accessing a service by overwhelming it with traffic.
Types of Network Security
a) Firewalls are used to block unauthorized access to a network, ensuring only trusted
traffic is allowed.
b) Intrusion Detection/Prevention Systems (IDS/IPS): Monitor and block malicious activity.
c) Virtual Private Networks (VPNs): Secure remote access via encrypted tunnels.
d) Access Control Policies: Define who can access what resources.
Strengths
1. Firewalls provide an essential barrier between trusted internal networks and untrusted
external networks (like the internet), significantly reducing the risk of unauthorized
access.
2. Encryption ensures that even if data is intercepted during transmission, it cannot be read
by unauthorized users.
3. IDS helps to detect potential intrusions and raise alarms before significant damage is
done.
Weaknesses
Firewalls cannot protect against internal threats (e.g., disgruntled employees) or
advanced attacks like zero-day exploits.
Encryption can be computationally expensive and may slow down performance,
especially in environments with high traffic.
IDS systems can generate false positives, causing alarm fatigue, and may not catch
sophisticated, stealthy attacks.
Demonstration
Firewall Example: A company uses a firewall to block all incoming traffic except that
which originates from its own trusted network, ensuring external attackers cannot
access internal resources.
Encryption Example: A user connects to an online bank using HTTPS, which encrypts
their session, ensuring that any information entered (e.g., account number, password)
remains confidential.
Practical Implications
Network Security protects businesses and individuals from financial losses due to cybercrime.
For businesses, it ensures the protection of customer data, intellectual property, and
communication channels. For individuals, network security ensures safe browsing, prevents
identity theft, and protects personal information from being exposed or stolen.
2. Authentication of Systems (Kerberos V4 and V5, and X.509 Authentication Service)
Objectives
To understand how systems and users authenticate their identities in a secure manner.
To learn about Kerberos V4, Kerberos V5, and X.509 Authentication Services, their
functionalities, and differences.
To examine how these authentication protocols contribute to secure communication and
access control.
Definition of Terms
1. Authentication: The process of verifying the identity of a user, device, or system.
2. Kerberos: A network authentication protocol that uses secret-key cryptography to allow
secure authentication between clients and servers over an insecure network.
3. Kerberos V4: The older version of Kerberos, which used a symmetric key approach for
authentication.
4. Kerberos V5: The updated version that supports stronger encryption methods and
provides additional features like ticket renewal.
5. X.509: A standard for defining the format of public-key certificates used in a Public Key
Infrastructure (PKI). It’s widely used for secure communication in systems such as
SSL/TLS.
Examples
a) Kerberos Authentication is commonly used in corporate environments, such as in
Microsoft Active Directory, where users are authenticated using a central server.
b) X.509 Certificates are used in web browsers for secure SSL/TLS connections, where
websites present their certificates to authenticate themselves and establish a secure
connection.
Strengths
Kerberos provides mutual authentication, ensuring both the client and server are
verified, making it resistant to man-in-the-middle attacks.
X.509 Certificates are a trusted and widely adopted standard for ensuring the
authenticity of public keys and securing communication channels, especially for SSL/TLS.
Weaknesses
1. Kerberos V4 is outdated, lacks support for modern encryption algorithms, and is
vulnerable to certain types of attacks (e.g., replay attacks).
2. Kerberos V5 is more secure but is complex to implement and requires central
management via a Key Distribution Center (KDC), which can become a single point of
failure.
3. X.509 Certificates require ongoing management (renewals, revocations), and the cost of
managing a PKI infrastructure can be high.
Demonstration
Kerberos Authentication Example: A user logs into a Windows system using Kerberos.
The system requests a ticket from the Key Distribution Center (KDC) to authenticate the
user. Once authenticated, the user receives a ticket to access various services without
having to re-enter credentials.
X.509 Example: A user connects to an HTTPS website. The website presents its X.509
certificate, which is validated by the browser. If the certificate is valid, a secure
connection (SSL/TLS) is established.
Practical Implications
a) Kerberos Authentication is widely used in enterprise systems to manage user access to
various network services securely. It eliminates the need for users to repeatedly
authenticate for each service.
b) X.509 Certificates are essential for securing communication between clients and servers,
such as in e-commerce sites, email encryption, or VPNs. They ensure users' privacy and
trust when using online services.
3. Data Communication
Objectives
To understand the principles and components of data communication systems.
To learn about the different communication models, including point-to-point and
multipoint communication.
To explore the protocols and methods used for transmitting data between devices.
Definition of Terms
1. Data Communication: The exchange of data between devices using a transmission
medium, such as cables or wireless signals, and protocols to ensure the accurate transfer
of data.
2. Protocol: A set of rules that define how data is transmitted and received over a network.
3. Transmission Medium: The physical path over which data travels, such as copper wires,
fiber optics, or wireless signals.
4. Modem: A device that modulates and demodulates signals for data transmission over
phone lines.
Examples
Ethernet is commonly used for wired communication in local area networks (LANs),
where data is transmitted through copper cables.
Wi-Fi is a wireless communication standard used to transmit data between devices in a
home or office without using physical cables.
Strengths
Ethernet offers high-speed, reliable communication in local networks, with minimal
interference and low latency.
Wi-Fi provides flexibility and convenience, allowing users to connect without cables, and
supports high data rates in modern versions (e.g., Wi-Fi 6).
Weaknesses
Ethernet requires physical cables, which can be cumbersome and difficult to scale in
large environments.
Wi-Fi is prone to interference from other wireless devices, walls, or other obstacles. It
may also have lower speeds and less stability compared to wired networks.
Demonstration
Ethernet Communication Example: A computer in a local office connects to a router
using an Ethernet cable. The router sends the data over a fiber optic link to the internet,
ensuring fast and secure communication.
Wi-Fi Communication Example: A smartphone connects to the internet via Wi-Fi in a
coffee shop, where it communicates wirelessly with a router that connects to the
internet.
Practical Implications
Data Communication is critical for almost all modern communication systems, from
email and web browsing to real-time video conferencing. The choice of transmission
medium and protocol impacts data speed, reliability, and security.
Understanding the differences between wired and wireless data communication helps in
selecting the appropriate network infrastructure for home, office, or industrial
environments.