Security in Fixed and Wireless Networks

Introduces aspects on security threats and their countermeasures in both fixed and wireless networks, advising on how countermeasures can provide secure communication infrastructures. Enables the reader to understand the risks of inappropriate network security, what mechanisms and protocols can be deployed to counter these risks, and how these mechanisms and protocols work.

Autorentext

Guenter Schaefer, Professor, Technische Universität Ilmenau, Germany. After obtaining his Ph.D. degree (1998) he worked at Ecole Nationale Supérieure des Télécommunications, Paris, France (1999 - 2000). Between 2000 and 2005, he was researcher at Technische Universitaet Berlin, Germany where he was leading the network security laboratory. Since 2005 he is at his current post leading the Telematics/Computer Networks research group. His research interests lie in the areas of network security, networking protocols, mobile communications, and innovative communication services/architectures, and he regularly gives courses on network security, networking subjects and basics of computer science.

Michael Rossberg, PostDoc Researcher, Technische Universität Ilmenau, Germany. In 2011 he obtained his Ph.D. in computer science with a thesis on peer-to-peer-based auto-configuration of large scale IPsec VPNs. His research interests lie in network security and performance evaluation/optimization. In 2010, Michael Rossberg and Guenter Schaefer were jointly awarded with the third prize of the German IT Security Award for their work on automatic configuration of large scale VPNs.

Translated by Herbert Eppel at HE Translations, Leicester, UK (https://HETranslations.uk) DISCLAIMER: By including the link to this site, this does not mean the site is endorsed by Wiley

Inhalt

About the authors xiii

Preface to the second edition xv

Preface to the first edition xvii

I Foundations of Data Security Technology 1

1 Introduction 3

1.1 Content and Structure of this Book 4

1.2 Threats and Security Goals 6

1.3 Network Security Analysis 9

1.4 Information Security Measures 13

1.5 Important Terms Relating to Communication Security 14

2 Fundamentals of Cryptology 17

2.1 Cryptology, Cryptography and Cryptanalysis 17

2.2 Classification of Cryptographic Algorithms 18

2.3 Cryptanalysis 19

2.4 Estimating the Effort Needed for Cryptographic Analysis 21

2.5 Characteristics and Classification of Encryption Algorithms 23

2.6 Key Management 25

2.7 Summary 27

2.8 Supplemental Reading 28

2.9 Questions 29

3 Symmetric Cryptography 31

3.1 Encryption Modes of Block Ciphers 31

3.2 Data Encryption Standard 37

3.3 Advanced Encryption Standard 43

3.4 RC4 Algorithm 48

3.5 The KASUMI algorithm 51

3.6 Summary 53

3.7 Supplemental Reading 54

3.8 Questions 55

4 Asymmetric Cryptography 57

4.1 Basic Idea of Asymmetric Cryptography 57

4.2 Mathematical Principles 60

4.3 The RSA Algorithm 69

4.4 The Problem of the Discrete Logarithm 71

4.5 The DiffieHellman Key Exchange Algorithm 75

4.6 The ElGamal Algorithm 77

4.7 Security of Conventional Asymmetric Cryptographic Schemes 80

4.8 Principles of Cryptography Based on Elliptic Curves 81

4.9 Summary 93

4.10 Supplemental Reading 94

4.11 Questions 95

5 Cryptographic Check Values 97

5.1 Requirements and Classification 97

5.2 Modification Detection Codes 99

5.3 Message Authentication Codes 112

5.4 Message Authentication Codes Based on MDCs 116

5.5 Authenticated Encryption 117

5.6 Summary 121

5.7 Supplemental Reading 122

5.8 Questions 123

6 Random Number Generation 125

6.1 Random Numbers and Pseudo-Random Numbers 125

6.2 Cryptographically Secure Random Numbers 126

6.3 Statistical Tests for Random Numbers 128

6.4 Generation of Random Numbers 129

6.5 Generating Secure Pseudo-Random Numbers 130

6.6 Implementation Security 133

6.7 Summary 134

6.8 Supplemental Reading 135

6.9 Questions 136

7 Cryptographic Protocols 137

7.1 Properties and Notation of Cryptographic Protocols 137

7.2 Data Origin and Entity Authentication 139

7.3 NeedhamSchroeder Protocol 143

7.4 Kerberos 147

7.5 International Standard X.509 155

7.6 Security of Negotiated Session Keys 160

7.7 Advanced Password Authentication Methods 161

7.8 Formal Validation of Cryptographic Protocols 166

7.9 Summary 176

7.10 Supplemental Reading 177

7.11 Questions 178

8 Secure Group Communication* 179

8.1 Specific Requirements for Secure Group Communication 179

8.2 Negotiation of Group Keys 181

8.3 Source Authentication 189

8.4 Summary 193

8.5 Supplemental Reading 194

8.6 Questions 194

9 Access Control 197

9.1 Definition of Terms and Concepts 197

9.2 Security Labels 199

9.3 Specification of Access Control Policies 201

9.4 Categories of Access Control Mechanisms 202

9.5 Summary 204

9.6 Supplemental Reading 204

9.7 Questions 205

II Network Security 207

10 Integration of Security Services in Communication Architectures 209 10.1 Motivation 209