communication security over the internet the big picture
play

Communication security over the Internet The big picture Me - PowerPoint PPT Presentation

Oct 09, 2022 •14 likes •244 views

Communication security over the Internet The big picture Me Internet Resource Internet Server Client Attack vectors MAN DNS LAN Client Internet Back Bone Router Networking WWW overview MITM (Man In The Middle) 3 2 4 5 LAN

  1. Communication security over the Internet

  2. The big picture Me Internet Resource Internet Server Client Attack vectors

  3. MAN DNS LAN Client Internet Back Bone Router Networking WWW overview

  4. MITM (Man In The Middle) 3 2 4 5 LAN 2 3 Router Internet 1 1 AV: Spoofing

  5. Use WPA! Sniffer Don't use WEP! Router W-LAN Internet AV: Sniffing

  6. HTTP network capture

  7. Encryption Enc ncryp ypt Decrypt

  8. Encrypted channel ???!!! %#$ %#$ %#$ Internet c c a a b b b b a a c c

  9. HTTPS Capture

  10. HTTPS (TLS/SSL) 4. da data 3. keys 2. certificate 1. requ quest Client Server

  11. AV: Phishing my-bank.com % % # # %#$ $ $ my-bamk.com

  12. Resolver Root NS NS where? 1. where is “m-b” where? my-bank.com there! where? NS there! Other NS there! % % # # $ $ AV: DNS my-bank.com

  13. CA SSL / Certificates delegate CA 3. verify s s i i g g n n 5. da data 4. keys 2. certificate 1. requ quest Client Server

  14. SSL in action (1)

  15. SSL in action (2)

  16. SSL in action (3)

  17. SSL in action (4)

  18. SSL missing in action ???!!!

  19. ??? Huh ???

  20. Check “SHA1 Fingerprint”!!! Don't rely on “MD5 Fingerprint”!!!

  21. The explanation!

  22. Email security Browser Outlook IMAPS Use GnuPG! HTTPS My-Mail Extra-Mail ??? ;)

  23. Keep focus!

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Securing Internet Communication: TLS, contd Network security CS 161: Computer Security Prof.

Securing Internet Communication: TLS, contd Network security CS 161: Computer Security Prof.

Securing Internet Communication: TLS, contd Network security CS 161: Computer Security Prof. Raluca Ada Popa Feb 27, 2018 Some slides credit David Wagner Announcements Midterm grades released Regrades: Read the follow-ups on the

1.75k views • 156 slides
Internet communication The internet A redundant, decentralized communication network

Internet communication The internet A redundant, decentralized communication network

Internet communication The internet A redundant, decentralized communication network connecting computers all over the world Data is sent in packets between machines Communication between computers is routed using the Internet

464 views • 7 slides
Securing Internet Communication CS 161: Computer Security Prof. Vern Paxson TAs: Devdatta

Securing Internet Communication CS 161: Computer Security Prof. Vern Paxson TAs: Devdatta

Securing Internet Communication CS 161: Computer Security Prof. Vern Paxson TAs: Devdatta Akhawe, Mobin Javed & Matthias Vallentin http://inst.eecs.berkeley.edu/~cs161/ March 31, 2011 Todays Lecture Applying crypto technology in

695 views • 51 slides
Security Protocols Q: Why security protocols? Bob Alice A: To allow reliable communication over

Security Protocols Q: Why security protocols? Bob Alice A: To allow reliable communication over

Security Protocols Q: Why security protocols? Bob Alice A: To allow reliable communication over an untrusted channel (eg. Internet) 2 Security Protocols are out there Authentication Confidentiality Example: HTTPS (HTTP + TLS)

669 views • 42 slides
Securing Internet Communication: TLS CS 161: Computer Security Prof. Haojin Materials adopted

Securing Internet Communication: TLS CS 161: Computer Security Prof. Haojin Materials adopted

Securing Internet Communication: TLS CS 161: Computer Security Prof. Haojin Materials adopted from Prof. David Wagner 2018 Todays Lecture Applying crypto technology in practice Two simple abstractions cover 80% of the use cases

623 views • 49 slides
Anonymous Communication and Internet Freedom CS 161: Computer Security Prof. David Wagner May 2,

Anonymous Communication and Internet Freedom CS 161: Computer Security Prof. David Wagner May 2,

Anonymous Communication and Internet Freedom CS 161: Computer Security Prof. David Wagner May 2, 2013 oday Goals For T State-sponsored adversaries Anonymous communication Internet censorship State-Sponsored Adversaries Anonymous

974 views • 58 slides
Securing Internet Communication: TLS CS 161: Computer Security Prof. Vern Paxson TAs: Paul

Securing Internet Communication: TLS CS 161: Computer Security Prof. Vern Paxson TAs: Paul

Securing Internet Communication: TLS CS 161: Computer Security Prof. Vern Paxson TAs: Paul Bramsen, Apoorva Dornadula, David Fifield, Mia Gil Epner, David Hahn, Warren He, Grant Ho, Frank Li, Nathan Malkin, Mitar Milutinovic, Rishabh Poddar,

873 views • 56 slides
Securing Internet Communication: TLS & DNSSEC CS 161: Computer Security Prof. Vern Paxson

Securing Internet Communication: TLS & DNSSEC CS 161: Computer Security Prof. Vern Paxson

Securing Internet Communication: TLS & DNSSEC CS 161: Computer Security Prof. Vern Paxson TAs: Paul Bramsen, Apoorva Dornadula, David Fifield, Mia Gil Epner, David Hahn, Warren He, Grant Ho, Frank Li, Nathan Malkin, Mitar Milutinovic,

1.51k views • 92 slides
The Internet Security Alliance The Internet Security Alliance is a collaborative effort with

The Internet Security Alliance The Internet Security Alliance is a collaborative effort with

The Internet Security Alliance The Internet Security Alliance is a collaborative effort with Carnegie Mellon University. It is a cross-sector, internationally- based trade association devoted to cyber security. ISA has individual corporate

349 views • 30 slides
Usable Security of Named Data Networking Yingdi Yu 1 Traditional communication model of

Usable Security of Named Data Networking Yingdi Yu 1 Traditional communication model of

Usable Security of Named Data Networking Yingdi Yu 1 Traditional communication model of Internet Speaking to a host end-to-end channel Communication security container-based authenticity: X.509, Certificate

678 views • 57 slides
Networking & Security Networking & Security each packet is routed individually (internet,

Networking & Security Networking & Security each packet is routed individually (internet,

One-Slide Summary Bandwidth is the throughput of a communication resource, measured in bits per second. Latency is the time delay between the moment when communication is initiated and the moment the first bit arrives, measured in seconds.

359 views • 10 slides
Networking & Security Networking & Security each packet is routed individually (internet,

Networking & Security Networking & Security each packet is routed individually (internet,

One-Slide Summary Bandwidth is the throughput of a communication resource, measured in bits per second. Latency is the time delay between the moment when communication is initiated and the moment the first bit arrives, measured in seconds.

482 views • 11 slides
1 <Insert Picture Here> C++, Java and .NET: Lessons learned from the Internet Age, and

1 <Insert Picture Here> C++, Java and .NET: Lessons learned from the Internet Age, and

1 <Insert Picture Here> C++, Java and .NET: Lessons learned from the Internet Age, and What it Means for the Cloud and Emerging Languages Cameron Purdy Vice President, Development Overview <Insert Picture Here> A retrospective of

656 views • 41 slides
Network Security Architecture 1 Additional Reading Firewalls and Internet Security:

Network Security Architecture 1 Additional Reading Firewalls and Internet Security:

Network Security Architecture 1 Additional Reading Firewalls and Internet Security: Repelling the Wily Hacker, Cheswick, Bellovin, and Rubin. New second edition Firewall and Internet Security, the Second Hundred (Internet)

801 views • 78 slides
Internet Security Summary ITS335: IT Security Sirindhorn International Institute of Technology

Internet Security Summary ITS335: IT Security Sirindhorn International Institute of Technology

ITS335 Internet Security Internet Security Secure Email Internet Security Summary ITS335: IT Security Sirindhorn International Institute of Technology Thammasat University Prepared by Steven Gordon on 20 December 2015 its335y15s2l10,

450 views • 25 slides
The Internet Security Alliance The Internet Security Alliance is a collaborative effort between

The Internet Security Alliance The Internet Security Alliance is a collaborative effort between

The Internet Security Alliance The Internet Security Alliance is a collaborative effort between Carnegie Mellon Universitys Software Engineering Institute (SEI) and its CERT Coordination Center (CERT/CC) and the Electronic Industries Alliance

294 views • 10 slides
A Stochastic Model for Intrusions Robert P. Goldman rpgoldman@sift.info Interface 2003 1 Topic

A Stochastic Model for Intrusions Robert P. Goldman rpgoldman@sift.info Interface 2003 1 Topic

A Stochastic Model for Intrusions Robert P. Goldman rpgoldman@sift.info Interface 2003 1 Topic Topic area: Computer and Network Intrusion Detection Subject: A technique for stochastic modeling of goal-directed computer network intruders

433 views • 31 slides
Security & Compliance Thursday, September 4 2014 What is a security breach/attack? A

Security & Compliance Thursday, September 4 2014 What is a security breach/attack? A

Security & Compliance Thursday, September 4 2014 What is a security breach/attack? A security breach/attack is defined as an event in which a corporations network is compromised or an individuals name plus Social Security Name (SSN),

890 views • 12 slides
Protect Yourself While Conducting Business Virtually In The Time Of COVID-19 What you can do to

Protect Yourself While Conducting Business Virtually In The Time Of COVID-19 What you can do to

Protect Yourself While Conducting Business Virtually In The Time Of COVID-19 What you can do to protect your business and experience uninterrupted productivity during a new work-from-home reality . Agenda da Who is vulnerable Whats

266 views • 13 slides
Secure Passwords Through Enhanced Hashing Benjamin Strahs, Chuan Yue, and Haining Wang The

Secure Passwords Through Enhanced Hashing Benjamin Strahs, Chuan Yue, and Haining Wang The

Secure Passwords Through Enhanced Hashing Benjamin Strahs, Chuan Yue, and Haining Wang The College of William and Mary Passwords The most common online authentication method Something you know instead of something you have (hardware

559 views • 29 slides
Navigating the New Section 2704 Discount Valuation and Transfer Regulations: What Estate Planners

Navigating the New Section 2704 Discount Valuation and Transfer Regulations: What Estate Planners

Presenting a live 90-minute webinar with interactive Q&A Navigating the New Section 2704 Discount Valuation and Transfer Regulations: What Estate Planners Must Do Now TUESDAY, OCTOBER 11, 2016 1pm Eastern | 12pm Central | 11am

1.02k views • 91 slides
Requirements, IRC 2704 Discounting Regulations Ensuring Current and Future Estate Plans and Trusts

Requirements, IRC 2704 Discounting Regulations Ensuring Current and Future Estate Plans and Trusts

Presenting a live 90-minute webinar with interactive Q&A Massive Estate Planning Changes for 2016 and Beyond: Meeting New IRS Basis Consistency Requirements, IRC 2704 Discounting Regulations Ensuring Current and Future Estate Plans and

717 views • 69 slides
SUSE Manager 174 174 SUSE Manager HEALTH MONITORING Best-in-class open source infrastructure

SUSE Manager 174 174 SUSE Manager HEALTH MONITORING Best-in-class open source infrastructure

SUSE Manager 174 174 SUSE Manager HEALTH MONITORING Best-in-class open source infrastructure management solution designed to help your enterprise DevOps and IT Operations teams to: Asset Management Optimize operations while reducing

260 views • 22 slides
Path to Greatness Program Overview Path to Greatness follows a positive behavioral approach to

Path to Greatness Program Overview Path to Greatness follows a positive behavioral approach to

Path to Greatness Program Overview Path to Greatness follows a positive behavioral approach to learning by establishing behavioral supports and a social culture needed for all students at Michael A. Maroun Elementary School to achieve social,

76 views • 5 slides

More recommend