Chapter Vocabulary 8 cryptography- the process of making and using codes to secure the transmission of information encryption- the process of converting an original message into a form that is unreadable to unauthorized individuals decryption- the process of converting the ciphertext message back into plaintext so that it can be readily understood substitution cipher- substituting one value for another mono-alphabetic substitution- only uses one alphabet poly-alphabetic substitution- uses two or more alphabets
Types of Ciphers: -substitution cipher -transposition cipher (permutation) - exclusive OR operation (XOR) - Vernam cipher - Running Key cipher - has function- mathematical algorithms that generate a message summary to confirm identity message authentication code (MAC)- a key-dependent, one-way hash function time-memory tradeoff attack- using a rainbow table to look up hashed passwords symmetric encryption- encryption methodologies that require the same secret key to encipher and decipher a message asymmetric encryption- uses 2 different related keys public-key infrastructure (PKI)- an integrated system of software, encryption methodologies, protocols, legal agreements, and 3rd-party services that enable used to communicate securely digital certificates- public-key container files that allow computer programs to validate the key and identify to whom it belongs steganography- the art of secret writing Bluetooth- short range wireless communications between devices Types of Attacks on Cryptosystems
man-in-the-middle attack- attempts to intercept a public key or even to insert a known key structure in place of the requested public key correlation attacks- a collection of brute-force methods that attempts to deduce statistical relationships between the structure of the unknown key and the ciphertext generated by the cryptosystem dictionary attacks- the attacker encrypts every world in a dictionary using the same cryptosystem as used by the target locate to match between the target ciphertext and list of encrypted words timing attack- attack eavesdrops on the victims session and uses statistical analysis of patterns and inter-keystroke timings to discern sensitive session information
Chapter 9 physical security- requires the design, implementation, and maintenance of countermeasures that protect the physical resources of an organization tailgating- when an authorized person presents a key to open a door and other individuals, who may or may not be authorized, also enter types of locks: mechanical lock- metal electromagnetic lock- magnetic strips on ID cards, radio signals, or PIN number manual locks- padlocks electronic locks- numbers biometric locks- finger, palm, or hand readers, iris/retina scanners, and voice and signature readers mantrap- a small enclosure that has a separate entry and exit point other types of security: electronic monitoring- closed circuit television alarms and alarm systems- motion detectors, thermal detectors, contact and weight sensors, vibration sensors computer rooms and wiring closets interior walls and doors dogs walls and fencing guards fire suppression systems- devices installed and maintained to detect and respond to a fire, potential fire, or combustion danger situation types of fire detection:
-
manual fire detection systems- human responses thermal detection systems- fixed temp. and rate-of-rise smoke detection- photoelectric sense, ionization sensor, or air-aspirating detectors flame detector
types of sprinkler systems: wet-pipe dry-pipe deluge system pre-action system water mist system gaseous emission system
-electrostatic discharge (ESD)- one of the leading causes of damage to sensitive circuitry types of uninterruptible power supplies: standby or offline UPS- detects the interruption of power to the power equipment ferroresonant standby UPSline-interactive true online UPS- power feed is constantly recharging the battery