Wireless Security Mechanisms - Lecture 5

Security of Wireless and Mobile Systems

• Topics covered include security mechanisms, secure communication protocols, VPN implementation, authentication, AAA protocols, access control, and firewalls.

Lecture 5

• Lecture 5 focuses on fundamental security mechanisms.

Tentative Lecture Content

• The lecture content includes an introduction, basics on security, secure communication protocols & VPNs, authentication, AAA protocols, access control, and firewalls.
• The lecture is scheduled for November 23rd.

Ch3: Fundamental Security Mechanisms - Introduction

• This chapter presents fundamental mechanisms of network security.
• It covers security service concepts, two cryptographic families, electronic certificates and PKI, SSL and IPsec security protocols.
• The chapter also discusses VPN technologies, authentication techniques, and access control solutions like firewalls and intrusion detection systems.

Ch3: Fundamental Security Mechanisms - Basics on Security

• Security services are contrary to security mechanisms, which are sets of cryptographic tools used for implementing security services.
• The X.800 standard defines security services, including availability (accessible and useable by authorized entities), and access control (preventing unauthorized resource use).
• Other services include data integrity (data not altered or destroyed), data origin authentication (verifying the source of data), peer entity authentication (verifying the peer entity), confidentiality (information not disclosed to unauthorized entities/processes), and replay detection (detecting duplicated data).

Ch3: Fundamental Security Mechanisms - Secure communication protocols and VPN implementation

• Several security protocols are designed to protect network communications.
• Protocols typically involve initialization and data protection phases.
• The initialization phase includes peer authentication, establishing symmetric keys, and negotiating services.
• The data protection phase activates agreed services and keys.
• Two popular protocols, IPsec and SSL, are presented, along with their phases of operation and supported security services.
• A comparison of these protocols and their usage in VPN tunnel protection is described.

Ch3: Fundamental Security Mechanisms - Secure Socket Layer (SSL) and Transport Layer Security (TLS)

• SSL/TLS is a protocol layer between application and transport layers that protects TCP applications.
• SSL was designed to protect e-commerce applications, integrated with browsers like Internet Explorer and Netscape Navigator.
• Version 3.0 of SSL was standardized in 1999 and renamed TLS.
• The protocol provides protection for data exchange, using symmetric keys and a master key.
• It supports services like server authentication, optional client authentication, replay detection, negotiation of security mechanisms, and data integrity.

Ch3: Fundamental Security Mechanisms - IPsec VPN & SSL VPN

• IPsec is a secure network suite that authenticates and encrypts packets for secure communication between computers over an internet protocol network.
• Includes negotiation of cryptographic keys during a session.
• VPNs are often used to connect remote sites in a company.
• VPNs provide communication like they're on the same private network.
• VPN implementation is facilitated using tunneling techniques (encapsulation of traffic).
• VPN technology allows for remote connection to private network resources and services.

Ch3: Fundamental Security Mechanisms - Authentication

• Authentication verifies a user/computer's identity.
• Common methods include usernames and passwords, cards, retina scans, voice recognition, and fingerprints.
• Authentication mechanisms are becoming more sophisticated, offering ease of use, minimal administration, robustness, and high reliability to prevent errors.
• Various authentication methods include password-based (static or dynamic), certificate-based (using PKI), Kerberos ticket-based (using KDS and TGS), smart card-based, and biometry-based.

Ch3: Fundamental Security Mechanisms - AAA Protocols

• AAA (Authentication, Authorization, Accounting) protocols are used for managing network access in a structured way.
• Authentication verifies user requests, authorization restricts access to permitted services only, and accounting counts resources consumed.
• Multiple domain scenarios are addressed in protocols.

Ch3: Fundamental Security Mechanisms - Access Control

• Access control determines who can access applications, data or resources, and what conditions they must meet for access.
• Attacks against security systems can take advantage of vulnerabilities to gain unauthorized access, often exploiting weaknesses in authentication systems.

Ch3: Fundamental Security Mechanisms - Firewall

• Firewalls separate networks, protecting insecure computers.
• The main task of a firewall is controlling inter-network communications to prevent attacks.
• Firewall behavior must be incorruptible and include failsafe in case of failure.
• It controls all communications and blocks unauthorized communications without hindering lawful flow.
• Filtering policies determine whether data is authorized to pass.
• Firewalls are categorized by protocol level analysis (network, circuit, or application).

Conclusion

• Vulnerabilities exist that weaken networks and compromise user perceptions of security.
• Security mechanisms are developed to counter these vulnerabilities and meet business and individual needs.

Bibliography

• Includes various research papers, conventions, and standards regarding cybersecurity.

Q&A

• A session for answering audience questions.
• The session concludes the lecture series and provides a chance for clarifying doubts surrounding concepts.

This quiz covers the fundamental security mechanisms discussed in Lecture 5, focusing on secure communication protocols, VPN implementation, and authentication methods. It includes key topics such as AAA protocols and firewalls, essential for understanding wireless and mobile system security. Test your knowledge on these critical areas of network security.