Transport Level Security

Provides security services between TCP and applications that use TCP

Transport Layer Services

Protocol mechanisms to enable 2 TCP users to determine the security mechanisms and services they will use

<p>Change in user data, trojan horse browser and modification of memory</p> Signup and view all the answers

<p>Information being lost, machine is compromised, become vulnerable to threats</p> Signup and view all the answers

<p>Crytographic checksums</p> Signup and view all the answers

<p>Network being eavesdropped, info from server being stolen, data from client being stolen, info about network configuration</p> Signup and view all the answers

<p>Information and privacy being lost</p> Signup and view all the answers

<p>Encryption and web proxies</p> Signup and view all the answers

<p>Machine is filled with ridiculous requests, filling up disk or memory, isolating machine by DNS attacks</p> Signup and view all the answers

<p>Annoying, could not get work done, disruptive</p> Signup and view all the answers

<p>Difficult to prevent</p> Signup and view all the answers

<p>Impersonation of legitimate users, data forgery</p> Signup and view all the answers

<p>Misrepresantation of user, believing false info</p> Signup and view all the answers

<p>Cryptographic techniques</p> Signup and view all the answers

<p>It is transparent to end users and applications and provides a general purpose solution</p> Signup and view all the answers

<p>Transparent to applications or embedded in specific packages</p> Signup and view all the answers

<p>Kerberos, S/MIME, PGP, SET. They are embedded within an application. Service can be tailored to specific needs of a given application</p> Signup and view all the answers

<p>SSL is designed to make use of the TCP to provide a reliable end to end secure service. It is a two layer protocol</p> Signup and view all the answers

<p>Management of SSL exchanges</p> Signup and view all the answers

<p>Provides basic security to various higher layered protocols</p> Signup and view all the answers

<p>Negotiation of security algorithm and parameters, key exchange, server authentication and optionally client authentication</p> Signup and view all the answers

<p>Fragmentation, compression, message authentication and integrity protection, encryption</p> Signup and view all the answers

<p>Error messages</p> Signup and view all the answers

<p>A single message that indicates the end of a SSL handshake</p> Signup and view all the answers

<p>A session created between the server and the client using the handshake protocol. A session defines a set of cryptographic security parameters which can be shared among multiple connections.</p> Signup and view all the answers

<p>A connection is transport that provides a suitable type of service</p> Signup and view all the answers

<p>Session identifier, peer ceritificate, compression method, cipher spec, master secret, is resumable</p> Signup and view all the answers

<p>Server and client random, server write MAC secret, client write MAC secret, server write key, client write key, initialisation vectors, sequence numbers</p> Signup and view all the answers

<p>Defines a shared secret key that is used for conventional encryption of SSL payloads.</p> Signup and view all the answers

<p>Defines a shared key that is used to form a message authentication code(MAC)</p> Signup and view all the answers

<p>Derived from secure sockets layer and used to provide security at the transport layer</p> Signup and view all the answers

<p>Eavesdropping, tampering and message forgery. Protecting communicating applications and their users on the internet</p> Signup and view all the answers

<p>Allows the server and client to authenticate each other. Negotiation of encryption, MAC algorithm and cryptographic keys. Used before any application data is transmitted.</p> Signup and view all the answers