April 18th Topics

Stuff you should know

Paul Krzyzanowski

April 18, 2011

Introduction

This is a list of the key concepts that we will cover in April 18th lecture.

Security

  • Trojan horse
  • Phishing
  • Buffer overflow
  • Executable space protection
  • Address Space Layout Randomization
  • Stack canaries
  • Denial of Service, DDoS
  • Worm
  • Virus
  • Key logger
  • Rootkit
  • Tripwire

Cryptography

  • Plaintext, encryption, decryption, ciphertext, key
  • Symmetric & public key algorithms
  • hash functions
  • stream vs. block cipher
  • Key explosion
  • Diffie-Hellman Key Exchange: common key
  • Public key cryptography
  • Secure communication with symmetric cryptography
  • Secure communication with public key cryptography
  • Session key
  • Digital signatures
  • Authenticated messaging with public key cryptography

Authentication

  • PAP (Password Authentication Protocol)
  • PAP with stored hashes
  • S/key one-time passwords
  • CHAP: Challenge-Handshake Authentication Protocol
  • SecurID
  • Kerberos
  • Public Key authentication
  • Digital certificates
  • SSL/TLS (Secure Sockets Layer; Transport Layer Security)

Other security mechanisms

  • Signed Software
  • Sandboxing