Computer Security Concepts and Definitions
Uploaded by
Sachhyam SthapitComputer Security Concepts and Definitions
Uploaded by
Sachhyam SthapitCommon questions
Powered by AIInternet access in classrooms offers substantial educational benefits by providing vast resources and fostering interactive learning. However, it raises concerns about distractions and misuse. Ethical considerations include ensuring it aligns with educational goals and is used responsibly. Strategies to manage potential issues involve implementing usage policies, employing filtering software, setting clear guidelines, and monitoring usage to balance accessibility with focus and security .
Active attacks involve attempts to alter system resources or affect their operations, such as data modification, while passive attacks involve monitoring or eavesdropping on communications. Passive attacks are often considered more dangerous because they are stealthy and generally go undetected, allowing attackers to gather information silently, which can later be used in more damaging active attacks .
DSS and RSA are both standards used for creating digital signatures, which authenticates the validity of a message or document. DSS is based on the Digital Signature Algorithm (DSA) and focuses on ensuring the integrity and authenticity of a digital message. RSA, on the other hand, involves a pair of keys for encrypting a message, ensuring both confidentiality and authenticity. Both use mathematical algorithms to provide a secure means of verifying the source of digital information .
A honeypot is a decoy system designed to trap attackers by imitating a legitimate target in a network. It helps in learning about intruder techniques and protecting sensitive data by diverting attackers away from critical systems. Honeypots are best deployed in the demilitarized zone (DMZ) or within the internal network as bait, helping identify unauthorized access attempts or attacks .
The Caesar cipher encrypts data by shifting the letters in the plaintext by a fixed number down the alphabet. For the text 'Exam' encrypted with a key of 23, starting with A=0, the resultant cipher would be 'Buxj'. Each letter is shifted back by 23 positions in the alphabet .
A comprehensive computer security strategy encompasses the CIA Triad: confidentiality, integrity, and availability. Confidentiality can be maintained through encryption and access controls, ensuring that only authorized users can view sensitive data. Integrity involves maintaining data accuracy and consistency, using measures like checksums, hashing, and digital signatures to prevent unauthorized alterations. Availability ensures that systems remain accessible and functional, using redundant systems and resource management to prevent downtime. Effective security strategies integrate these principles to protect against a wide range of threats .
Block ciphers encrypt data in fixed-size blocks, typically involving multiple rounds of processing for each block, resulting in a secure encrypted output. They are well-suited for scenarios requiring high security, such as banking transactions. Stream ciphers, on the other hand, encrypt data one bit or byte at a time, generating a pseudo-random keystream combined with the plaintext bit. They are generally faster and best suited for situations requiring high adaptability, such as real-time communications .
Two-Factor Authentication (2FA) adds an additional layer of security by requiring two types of credentials before granting access. Typically, it combines something you know (like a password) with something you have (such as a mobile device) or something you are (biometrics). By requiring two factors, it reduces the likelihood of unauthorized access arising from a compromised single factor, significantly enhancing the overall security of accounts and systems .
An Intrusion Detection System monitors network traffic for suspicious activity and issues alerts when such activity is discovered. Statistical anomaly detection involves establishing a baseline of normal behavior and flagging deviations from this norm, while rule-based detection uses predefined rules to identify suspicious activity. A key difference is that anomaly detection can identify previously unknown threats but may produce false positives, whereas rule-based detection is more precise but can miss new types of threats .
RSA encryption involves generating a public key from two chosen prime numbers, p and q. The keys include a modulus derived from multiplying p and q (n=p*q) and an exponent e that is coprime with (p-1)*(q-1). To encrypt a message M, one raises M to the power of e modulo n. Decryption requires a private key, calculated from the inverse of e modulo (p-1)*(q-1). This ensures only the receiver with the private key can transform the cipher back to the plaintext .