Network Security and Cryptography - Short Answer Notes
UNIT 1: Network Security Concepts
• Network security ensures protection of data integrity, confidentiality, and availability during transmission.
• CIA Triad: Confidentiality (hiding data), Integrity (preventing unauthorized changes), Availability (ensuring
data access).
• Security Attacks: Passive (eavesdropping, traffic analysis) and Active (masquerade, replay, modification,
DoS).
• Security Mechanisms include Encipherment, Digital Signature, Access Control, Authentication Exchange,
and Traffic Padding.
• Security Services: Confidentiality, Authentication, Integrity, Non-repudiation, Access Control, and
Availability.
• Network Security Model: Involves sender, receiver, trusted third party, and key exchange ensuring secure
communication.
UNIT 2: Cryptography Fundamentals
• Cryptography: Science of transforming information for secure communication.
• Types: Symmetric (same key for encryption/decryption) and Asymmetric (public-private key pair).
• Classical Techniques: Caesar Cipher, Playfair, Hill, Transposition, and One-Time Pad.
• Feistel Structure: Combines substitution and permutation; base for DES algorithm.
• Block Cipher Modes: ECB, CBC, CFB, OFB, and CTR enhance security during multiple block processing.
• DES: 64-bit block cipher using 16 rounds and 56-bit effective key; AES: modern replacement with 128-bit
block size.
UNIT 3: Message Authentication and Hash Functions
• Message Authentication verifies message source, integrity, and sequence correctness.
• Methods: Encryption, Message Authentication Code (MAC), and Hash Functions.
• Hash Function Properties: Fixed-length output, one-way, collision resistance, and easy computation.
• SHA-1: Produces 160-bit hash digest from message blocks using 80 rounds of operations.
• HMAC: Combines a secret key with hash algorithm (MD5, SHA-1) for integrity verification.
• CMAC: Block cipher-based authentication code, enhancement over CBC-MAC for fixed-length messages.
UNIT 4: Public Key Cryptography
• Public Key Cryptography uses a key pair: Public (for encryption) and Private (for decryption).
• RSA Algorithm: Uses large primes p, q; public key (e, n) and private key (d, n) for secure encryption.
• Diffie-Hellman: Key exchange protocol allowing two parties to generate a shared secret key securely.
• Digital Signature: Ensures non-repudiation and authenticity using sender’s private key and verification by
public key.
• Kerberos: Authentication protocol using tickets and time-stamped keys for secure access control.
• X.509 Certificates: Standard for public key infrastructure ensuring identity verification in networks.
UNIT 5: Security Applications and Advanced Topics
• Firewalls: Control network traffic between trusted and untrusted networks using filtering rules.
• Intrusion Detection Systems (IDS): Monitor and analyze system activities to detect malicious behavior.
• VPNs: Create secure encrypted tunnels for remote communication over the internet.
• E-mail Security: Uses PGP and S/MIME for message encryption, authentication, and integrity.
• Web Security: HTTPS protocol ensures secure client-server communication using SSL/TLS.
• Cyber Attacks: Include phishing, malware, ransomware, and denial of service; require layered defense.