Network security Dan li CS Department, Tsinghua University 2021/2/3
Network Security 2021/2/3 1 Dan LI CS Department, Tsinghua University
Today's Lecture Overview of Network Security Cryptographic hash functions User authentication SSl IPSec IKE Distributed Denial of Service(DDos * Firewa‖l Reading List 2021/2/3
Today’s Lecture Overview of Network Security Cryptographic hash functions User authentication SSL IPSec & IKE Distributed Denial of Service (DDoS) Firewall Reading List 2021/2/3 2
Motivation https:// a wells fargo Account Sum, tary-Mlicre wge.com/imnl_aal_on/cg-bin/session.cgipSessargs-coan76ax52lTpxbuocterbfmmdmdK-egoLinksa0vahoomapsamapbLstadctIonary" Hone I Help Center I Cordnct Us I Locating I Ste Map I Aply siun on 构 Account Summary aet Log on January 06, 2004 Wells Forno Accounts ook Accounts lip: Select an account's balance to access the Account History Account Servces Enrollfor online statement: My Message center My Message Center cash Accounts Account Available Balance rld pILPaY access to end your session, be sure to sign om ign up for the rogram and get 91995-2003Wells Fago. All rohe reserved 2, 500 points. 2021/2/3 3
Motivation 2021/2/3 3 https://
EXcerpt From“ General Terms of use” File Edit View Favcriters Tools Help Bnk·回的心品 ahttp://www.wellsfargo.com/privacy_security/terms_of_use,jhtml v aGo ire General Terms of uae 二二二二,的 二二二二:二二 DN BFRVICE OF MERCHNDEE PROMOED THRouC THE AE RVICE 靠o片 PURCHATED VLINHTD ETTES oEu NOT ATTCT ANY MANuFAC TUFFRT Na了 o Inte 山2904 2021/2/3 4
Excerpt From “General Terms of Use” 2021/2/3 4
Privacy and Security File Edt view. Favorits Tools Heo Bak·的品 shrahttp://www.wellfargo.com/privacy_security/indexjhtml Gou“e Privacy and security a Emend huw Buen awDcalaan custine salwN and petachiah anu uur fm wson renan wa storag 二二二二二二二能计二二 Uadarnd how w uan an nrel thema i图 已 tar Is s EIs w hans wur satai has peen comgtonisea 20049于注DHA加 2021/2/3
Privacy and Security 2021/2/3 5
What do you think What do you think should be included in privacy and security"for an e-commerce Website? 2021/2/3
What Do You Think What do you think should be included in “privacy and security” for an e-commerce website? 2021/2/3 6
Desirable Security Properties Authenticity Confidentiality Integrity Availability Accountability and non-repudiation Freshness Access control Privacy of collected information Integrity of routing and dNS infrastructure 2021/2/3
Desirable Security Properties Authenticity Confidentiality Integrity Availability Accountability and non-repudiation Freshness Access control Privacy of collected information Integrity of routing and DNS infrastructure 2021/2/3 7
Peek at the dark side SCULT OF THE DEAD COW PARAMED|A·est1984v0 Blackhato usA· EUROPE·A5IA Trainin 2021/2/3
Peek at the Dark Side 2021/2/3 8
What drives the attackers? Put up a fake financial website collect users logins and passwords, empty out their accounts Insert a hidden program into unsuspecting users' computers, use them to spread spam Subvert copy protection, gain access to music and video files 2021/2/3
What Drives the Attackers? Put up a fake financial website, collect users’ logins and passwords, empty out their accounts Insert a hidden program into unsuspecting users’ computers, use them to spread spam Subvert copy protection, gain access to music and video files 2021/2/3 9
What drives the attackers? Stage denial of service attacks on websites extort money Wreak havoc, achieve fame and glory in the blackhat community 2021/2/3
What Drives the Attackers? Stage denial of service attacks on websites, extort money Wreak havoc, achieve fame and glory in the blackhat community 2021/2/3 10