R. Craig Collins >CPMT 2449 > Overview 4

Overview 4 © R. Craig Collins, 2005/6

•Items that should be accomplished before the beginning of the current time frame:
   •Chapter 3

•Read
   • Networking Basics
   • FAT vs. NTFS
   • Versions of Server 2008 Server 2008 System Requirements

•Review

Notes on Chapter 3: Security through authentication and encryption

Explain encryption methods and how they are used
Describe authentication methods and how they are used
Explain and configure IP security
Discuss attacks on encryption and authentication methods

• Sniffers: software to capture information sent across a network; often gain access to account then install
• (differentiate between legitimate sniffing for network analysis and troubleshooting traffic flow)
• Encryption: disguise data to make it unintelligible except for intended recipients
• Cryptography: coding messages
• Enigma vs. Colossus
• Coding
• Ciphers code either each bit, or a block, of data
• Keys and algorithm (recipe);
• secret key uses same key (symmetrical) to encrypting and decrypting;
  public key uses both a public and private key, (asymmetric) one to encrypt and one to decrypt PGP
• Hashing SSNàStudent ID (must verify uniqueness)
• MD5 in SNMP rehashes 4 times
• Checking the validity of data
• Checksum
• Windows
• MPPE RAS over PPP or VPN and PPTP
•             VPN telephone analogy
• Encrypting file system sits on NTFS, uses Public Key
•             Cipher command (Cipher /?)
• Linux
• CFS Cryptographic File System on ext2 and ext3
• ----------------------------------------------------------------
• Authentication Methods
• Session Authentication encrypt sequence to foil sniffers
• Digital Certificates (X.509)
• Kerberos
• SSL
• SSH

	Single computer	LAN	IP
basic		Challenge and Response	Transmission Layer-weak
better	challenge and response	Kerberos	SSL
	log in for adm rights	tickets, and time limits	browser and server agree
best	Security Token	EAP	SSH
	Thumb scan or smart card	valid phone or IP	log in

• IP Security: Autentication headers and ESP (encrytp packages)
• Attacks on encryption and authentication
• Brute force
• Steal password
• Guess password
• Weak keys 56 bit vs PGP and strong key
  “How difficult? Given all of today's computing power and available time — even a billion computers doing a billion checks a second — it is not possible to decipher the result of strong cryptography before the end of the universe.”

•Activities
   •Install Windows Server Lab 3

•Begin
   •Something

•Complete
   •Something

•Submit
   •MUD (My Understanding, Details) respond as directed to the following:
      What topics, if any, during this time frame do you feel very comfortable with? Why?
      What topics, if any, during this time frame do you not feel comfortable with?
   •Class Discussion/BFO (Blinding Flash of the Obvious): respond as directed to the following:
      TBA

•For the next time frame, read:
   •Chapter 4

•Each test has a review; you may wish to write out pertinent information from the readings and activities

•After completing this overview, you may wish to start on the next Overview material, and preview Lab 4