Warning:
JavaScript is turned OFF. None of the links on this page will work until it is reactivated.
If you need help turning JavaScript On, click here.
This Concept Map, created with IHMC CmapTools, has information related to: ch7 secu secu, Security Techniques contains cryptography: encryption is the process of encoding a message in such a way as to hide its contents shared keys- the sender must share a knowledge of the key public/private keys- public is a key that has already been published by the recipient to encrypt message, private is when recipient uses a corresponding key to decrypt the message, Security Techniques contains certificates: a digital certificate is a doc containing a statement signed by a principal, need two things- a standard format and agreement on the manner in which chains of certs are constructed, Security Techniques contains uses of cryptography: -secrecy and integrity- -authentication- using checksum, key exchanges are vunerable to man in the middle attacks -digital signatures- are based on an irreversible binding to the message or doc of a secret known only to the signer, digest is a fixed length value computed by applying a secure digest function, which is similar to a checksum, Security Techniques contains access control: -protection domains- is an execution environment shared by a collection of processes, capabilities are held by each process according to the domain in which it is located, access control lists is stored with each resource contains access for each domain, -implementation-digital signatures, credentials and public key certs provide crytographic basis for secure access control, Security Techniques contains credentials: are a set of evidence provided by a principal when requesting access to a resource -delegation- a useful form of credential is one that entitles a principal, or a process acting for a principal, to perform an action with the authority of another principal, Security Techniques contains Firewalls: protect intranets, performing filtering actions on incoming and outgoing communications.