Securing Connections with Digital Certificates in Router OS. By Ezugu Magnus PDS Nigeria
|
|
|
- Elfreda Bryan
- 6 years ago
- Views:
Transcription
1 Securing Connections with Digital Certificates in Router OS By Ezugu Magnus PDS Nigeria
2 About the Presenter MikroTik Certifications My Contact details: Mikrotik Certified Engineer (MTCNA,MTCRE,MTCWE,MTCTCE,MTCUME,MTCINE) Mikrotik Certified Consultant Mikrotik Certified Trainer Skype: ezugumc Whatsapp:
3 Introduction to Digital Certificate What is a Digital Certificate? It is an electronic file which enables a secure exchange of information over a network and used to prove the ownership of a public key and identify an entity. It contains the following information: Name of the certificate holder Serial Number Expiration date Name of the issuer Copy of the holders public key Digital signature of issuer
4 Introduction to Digital Certificate What is a Digital Certificate?
5 Introduction to Digital Certificate What is a Digital Certificate?
6 Introduction to Digital Certificate What is a Digital Certificate? In addition to the identification information, the digital certificate also has the following: A public key Digital signature
7 Introduction to Digital Certificate Why do we need certificate: 1. Encryption A way of hiding the data from public view 2. Identification & trust A way of identifying the recipient of data and confirming if it is trusted
8 Introduction to Digital Certificate Two types of Encryption: Larger key size (typically 2048 bits) Very slow encoding and decoding process Courtesy ssl2buy.com
9 Introduction to Digital Certificate Two types of Encryption: Symmetric encryption Small key size (typically 256bits) Fast encoding and decoding
10 Introduction to Digital Certificate Identification & trust There are various schemes for issuance of a digital certificate which helps to certify the identity and establish trust in the system. Public key infrastructure scheme: Here the certificate issuer is the Certificate Authority (CA). Web of trust scheme: In this scheme, individual certificate owners sign each others keys directly.
11 Introduction to Digital Certificate How does SSL work? Client Server 1. Client connects to a server secured with SSL. Client requests that the server identify itself. 2. Server sends a copy of its SSL Certificate, including the server s public key. 3. Client checks the certificate root against a list of trusted CAs and that the certificate is unexpired, unrevoked, and that its common name is valid for the server that it is connecting to. If the client trusts the certificate, it creates, encrypts, and sends back a symmetric session key using the server s public key. 4. Server decrypts the symmetric session key using its private key and sends back an acknowledgement encrypted with the session key to start the encrypted session. 5. Server and Client now encrypt all transmitted data with the session key.
12 Introduction to Digital Certificate SSL Client Certificate This is used to authenticate a client or device connecting to a server. Since authentication is managed by service provider, these certificates are usually issued by the provider for VPN tunnel and not a public CA SSL Server Certificate In SSL, when a client attempts to connect to a server, the server is required to present a certificate in a handshake process. Client checks the certificate and verifies if it is signed by a trusted CA.
13 Significance of connection security Data protection Raw digital data without encryption. In the absence of SSL or any form of encryption, data is sent as stream of 1s and 0s in a universal encoding format.
14 Significance of connection security Data protection Data go through various un-trusted networks while moving from source to destination Evil people can easily listen in and view the conversation in clear text. These are known as man in the middle. The man in the middle can read/store the data and possibly modify traffic between the source and destination Attacker can have access to sensitive information such as credit card details if sent through such communication medium.
15 Significance of connection security Attack mitigation With SSL, this will hardly happen, or practically will take a massive computational capacity to break the keys to decrypt the data. The use of digital certificates will eliminate the possibility of man in the middle attack as such attackers will have a tough time breaking the connection between a source and the destination devices. The use of certificates on CAP to CapsMan connections will eliminate the possibility of having a rogue Access Point on a network which in-turns reduces the possibility of an attacker eavesdropping or impersonating a wireless user.
16 Creating certificates in RouterOs 1. Make certificate templates 2. Sign the certificates and add CRL url 3. Export client certificates with keys and CA certificates and import to client routers Network Topology:
17 Creating certificates in RouterOs Make certificate templates: CA Template
18 Creating certificates in RouterOs Make certificate templates: Site1 Template
19 Creating certificates in RouterOs Sign the CA certificate and add CRL url
20 Creating certificates in RouterOs Make certificate templates: Server Template
21 Creating certificates in RouterOs Sign certificate templates: Server Template
22 Creating certificates in RouterOs Sign certificate templates: Site1 Template
23 Creating certificates in RouterOs Sign certificate templates: Site2 Template
24 Creating certificates in RouterOs The results after creating and signing certificate
25 Creating certificates in RouterOs Set all certificates as Trusted
26 Creating certificates in RouterOs Export client certificates with keys and CA certificates and import to client routers
27 Creating certificates in RouterOs Import client certificates with keys and CA certificates on site1 and site
28 Deploying digital certificates Using Digital Certificates on SSTP tunnels Enable SSTP Server to use Certificate
29 Deploying digital certificates Using Digital Certificates on SSTP tunnels Create credentials for site1 and site2 on SSTP Server
30 Deploying digital certificates Using Digital Certificates on SSTP tunnels Add SSTP client on site1 as below
31 Deploying digital certificates Using Digital Certificates on SSTP tunnels Add SSTP client on site2 as below
32 Deploying digital certificates Using Digital Certificates on OpenVPN tunnels Enable OpenVPN Server to use Certificate
33 Deploying digital certificates Using Digital Certificates on OpenVPN tunnels Add OpenVPN client on site1 and site2 as below Repeat the setup for site2
34 Deploying digital certificates Deploying digital certificates for CAP to CapsMan connections Enable CapsManager with certificate
35 Deploying digital certificates Deploying digital certificates for CAP to CapsMan connections Enable CAP with certificate:
36 Deploying digital certificates Deploying digital certificates for CAP to CapsMan connections Enable CAP with certificate
37 Deploying digital certificates Deploying digital certificates on Hotspots for enhanced security using Public CA issued certificates. Create a certificate template:
38 Deploying digital certificates Deploying digital certificates on Hotspots Create a certificate Signing request:
39 Deploying digital certificates Deploying digital certificates on Hotspots Export the certificate-request.pem and open to get CSR code: -----BEGIN CERTIFICATE REQUEST----- MIIDKDCCAhACAQIwgYcxCzAJBgNVBAYTAk5HMQ4wDAYDVQQIDAVMYWdvczEYMBYG A1UEBwwPVmljdG9yaWEgSXNsYW5kMSQwIgYDVQQKDBtQYW5vcmFtYSBEYXRhIFNv bhv0aw9ucybmdgqxddakbgnvbasma05pqzeambgga1ueawwrag90c3bvdc5wzhnu Zy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMiohfqTfCNqR lw2wujfn60ikkalbfzayxfkjvnn51ydy3f+l2jmqbaviibnjpppwmtoxvgzn4tz1 NHbPYWR32aMrVkjpmzVNjOhWoFfQ81FJnvucr3Ug7sSAcoeAwCfWY7WAwDjJCY/w kf6p648sck8wja9ldt+mnmpla56kp7ccmzj316qkbooygg/l4xf0qh4haqhjhnur xfg4lyfmlrc10qx/bahm2dtrs12bohbqheunrgtuf59do5ofuw3s5hhqozyhgw+s rc/qxv+servi16xk/hdvafbje0m1mulsasw7gcnic+zcoic9eolacgnbfdl6o67z 8itHKdgRAgMBAAGgWzAXBgkqhkiG9w0BCQcxCgwIcGRzbmcxMjMwHwYJKoZIhvcN AQkCMRIMEG1hZ251c0BwZHNuZy5jb20wHwYJKoZIhvcNAQkOMRIwEDAOBgNVHQ8B Af8EBAMCAbYwDQYJKoZIhvcNAQELBQADggEBAKB8R6aVFBBfZMJz8frB+YUGyxmI gquw5lgcnjblqejyumszqkozunfk3kdh5jrbfqtnnzied8kktze82+kcw4trc8p8 1H7FU8pdRlUHFThxFe/hH5zYKwAjRb4UtCiryjoK1mq62wvK9QJ7fPceWtj46GY7 n/vkr2bbhrqmvdmhnx0f5v3f/pvwn4c5kvzeupo80vldgbx/jxb/k7lau5nos4ro I/6O8ep03Ry246VSuc+g64tbGYaB6jzSLy5MIt31kg8n/18Wv6uBQIApvwQI6xbb hs/b01g8eiwseatscrmwxyh6thtcwzmejlgp2f7guy/ifamybam1f3sazws= -----END CERTIFICATE REQUEST----- Your Certificate Issuer will require this code
40 Deploying digital certificates Deploying digital certificates on Hotspots Setup hotspot to use the certificate:
41 Deploying digital certificates Deploying digital certificates on Hotspots Setup www-ssl on IP services with the certificate:
42 Conclusion Digital certificates have been shown to be effective in securing different types of data over various kinds of connections. It also allows us to trust online entities when properly deployed. The presentation has shown a step by step procedure to deploy it over some VPN tunnels and for CAP to CapsMan connection in RouterOS.
43 Thanks for your attention! Questions?
Grandstream Networks, Inc. GWN7000 OpenVPN Site-to-Site VPN Guide
Grandstream Networks, Inc. GWN7000 OpenVPN Site-to-Site VPN Guide Table of Contents INTRODUCTION... 4 SCENARIO OVERVIEW... 5 CONFIGURATION STEPS... 6 Core Site Configuration... 6 Generate Self-Issued Certificate
PPP Tunneling. Step by step explanation and configuration for creating PPP Tunnel
PPP Tunneling Step by step explanation and configuration for creating PPP Tunnel 1 Point-to-Point Protocol Point-to-Point Protocol (PPP) is used to establish a tunnel (direct connection) between two nodes.
Overview. SSL Cryptography Overview CHAPTER 1
CHAPTER 1 Secure Sockets Layer (SSL) is an application-level protocol that provides encryption technology for the Internet. SSL ensures the secure transmission of data between a client and a server through
Digital Certificates Demystified
Digital Certificates Demystified Ross Cooper, CISSP IBM Corporation RACF/PKI Development Poughkeepsie, NY Email: rdc@us.ibm.com August 9 th, 2012 Session 11622 Agenda Cryptography What are Digital Certificates
X.509. CPSC 457/557 10/17/13 Jeffrey Zhu
X.509 CPSC 457/557 10/17/13 Jeffrey Zhu 2 3 X.509 Outline X.509 Overview Certificate Lifecycle Alternative Certification Models 4 What is X.509? The most commonly used Public Key Infrastructure (PKI) on
Public-Key Infrastructure NETS E2008
Public-Key Infrastructure NETS E2008 Many slides from Vitaly Shmatikov, UT Austin slide 1 Authenticity of Public Keys? private key Alice Bob public key Problem: How does Alice know that the public key
Configuring SSL Security
CHAPTER9 This chapter describes how to configure SSL on the Cisco 4700 Series Application Control Engine (ACE) appliance. This chapter contains the following sections: Overview Configuring SSL Termination
Configuring SSL. SSL Overview CHAPTER
7 CHAPTER This topic describes the steps required to configure your ACE appliance as a virtual Secure Sockets Layer (SSL) server for SSL initiation or termination. The topics included in this section are:
Grandstream Networks, Inc. GWN7000 PPTP Site-to-Site VPN Guide
Grandstream Networks, Inc. GWN7000 PPTP Site-to-Site VPN Guide Table of Contents INTRODUCTION... 4 SCENARIO OVERVIEW... 5 CONFIGURATION STEPS... 6 Core Site Configuration... 6 Creating PPTP Users... 6
Configuring SSL CHAPTER
7 CHAPTER This chapter describes the steps required to configure your ACE appliance as a virtual Secure Sockets Layer (SSL) server for SSL initiation or termination. The topics included in this section
Configuring SSL. SSL Overview CHAPTER
CHAPTER 8 Date: 4/23/09 This topic describes the steps required to configure your ACE (both the ACE module and the ACE appliance) as a virtual Secure Sockets Layer (SSL) server for SSL initiation or termination.
Crypto meets Web Security: Certificates and SSL/TLS
CSE 484 / CSE M 584: Computer Security and Privacy Crypto meets Web Security: Certificates and SSL/TLS Spring 2016 Franziska (Franzi) Roesner franzi@cs.washington.edu Thanks to Dan Boneh, Dieter Gollmann,
But where'd that extra "s" come from, and what does it mean?
SSL/TLS While browsing Internet, some URLs start with "http://" while others start with "https://"? Perhaps the extra "s" when browsing websites that require giving over sensitive information, like paying
Certificates, Certification Authorities and Public-Key Infrastructures
(Digital) Certificates Certificates, Certification Authorities and Public-Key Infrastructures We need to be sure that the public key used to encrypt a message indeed belongs to the destination of the message
Authentication, Encryption, Transport, IP Version and VPN Routing
Authentication, Encryption, Transport, IP Version and VPN Routing VPN clients must authenticate themselves to the VPN server. A valid certificate is required for the client to verify the identity of the
Cristina Nita-Rotaru. CS355: Cryptography. Lecture 17: X509. PGP. Authentication protocols. Key establishment.
CS355: Cryptography Lecture 17: X509. PGP. Authentication protocols. Key establishment. Public Keys and Trust Public Key:P A Secret key: S A Public Key:P B Secret key: S B How are public keys stored How
Grandstream Networks, Inc. GWN7000 Multi-WAN Gigabit VPN Router VPN Configuration Guide
Grandstream Networks, Inc. GWN7000 Multi-WAN Gigabit VPN Router VPN Configuration Guide Table of Contents SUPPORTED DEVICES... 5 INTRODUCTION... 6 GWN7000 VPN FEATURE... 7 OPENVPN CONFIGURATION... 8 OpenVPN
Blue Coat ProxySG First Steps Solution for Controlling HTTPS SGOS 6.7
Blue Coat ProxySG First Steps Solution for Controlling HTTPS SGOS 6.7 Legal Notice Copyright 2018 Symantec Corp. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, Blue Coat, and the
Managing Certificates
CHAPTER 12 The Cisco Identity Services Engine (Cisco ISE) relies on public key infrastructure (PKI) to provide secure communication for the following: Client and server authentication for Transport Layer
Introduction to SSL. Copyright 2005 by Sericon Technology Inc.
Introduction to SSL The cornerstone of e-commerce is a Web site s ability to prevent eavesdropping on data transmitted to and from its site. Without this, consumers would justifiably be afraid to enter
Configuring Certificate Authorities and Digital Certificates
CHAPTER 43 Configuring Certificate Authorities and Digital Certificates Public Key Infrastructure (PKI) support provides the means for the Cisco MDS 9000 Family switches to obtain and use digital certificates
MUM Ho Chi Minh, Vietnam April Sao Thiên Vương - 1
MUM Ho Chi Minh, Vietnam April 2017 Sao Thiên Vương - http://switch-router.com 1 My name: Binh Nguyen Dang Thai Email: binhndt@uranus.com.vn Cellphone: +84 909006026 Website: http://uranus.com.vn Support
Send documentation comments to
CHAPTER 6 Configuring Certificate Authorities and Digital Certificates This chapter includes the following topics: Information About Certificate Authorities and Digital Certificates, page 6-1 Default Settings,
How to Set Up External CA VPN Certificates
To configure a client-to-site, or site-to-site VPN using s created by External CA, you must create the following VPN s for the VPN service to be able to authenticate Before you begin Use an external CA
CTS2134 Introduction to Networking. Module 08: Network Security
CTS2134 Introduction to Networking Module 08: Network Security Denial of Service (DoS) DoS (Denial of Service) attack impacts system availability by flooding the target system with traffic or by exploiting
Viewing System Status, page 404. Backing Up and Restoring a Configuration, page 416. Managing Certificates for Authentication, page 418
This chapter describes how to maintain the configuration and firmware, reboot or reset the security appliance, manage the security license and digital certificates, and configure other features to help
ISACA CISA. ISACA CISA ( Certified Information Systems Auditor ) Download Full Version :
ISACA CISA ISACA CISA ( Certified Information Systems Auditor ) Download Full Version : http://killexams.com/pass4sure/exam-detail/cisa QUESTION: 390 Applying a digital signature to data traveling in a
Security Digital Certificate Manager
System i Security Digital Certificate Manager Version 6 Release 1 System i Security Digital Certificate Manager Version 6 Release 1 Note Before using this information and the product it supports, be sure
SITE-TO-SITE LAYER 2 VPN WITH PPP BCP
SITE-TO-SITE LAYER 2 VPN WITH PPP BCP Lay Minh (Makito) CCIE # 47682, MikroTik Certified Trainer, MikroTik Consultant May 5 th, 2017 MikroTik User Meeting, Yangon, Myanmar ABOUT ME Lay Minh (Makito) MikroTik
Blue Coat Security First Steps Solution for Controlling HTTPS
Solution for Controlling HTTPS SGOS 6.5 Legal Notice Copyright 2017 Symantec Corp. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, Blue Coat, and the Blue Coat logo are trademarks
Ten Risks of PKI : What You re not Being Told about Public Key Infrastructure By Carl Ellison and Bruce Schneier
Presented by Joshua Schiffman & Archana Viswanath Ten Risks of PKI : What You re not Being Told about Public Key Infrastructure By Carl Ellison and Bruce Schneier Trust Models Rooted Trust Model! In a
How to Configure SSL Interception in the Firewall
Most applications encrypt outgoing connections with SSL or TLS. SSL Interception decrypts SSL-encrypted traffic to allow Application Control features (such as the Virus Scanner, ATD, URL Filter, Safe Search,
Cryptography SSL/TLS. Network Security Workshop. 3-5 October 2017 Port Moresby, Papua New Guinea
Cryptography SSL/TLS Network Security Workshop 3-5 October 2017 Port Moresby, Papua New Guinea 1 History Secure Sockets Layer was developed by Netscape in 1994 as a protocol which permitted persistent
Cryptographic Protocols 1
Cryptographic Protocols 1 Luke Anderson luke@lukeanderson.com.au 5 th May 2017 University Of Sydney Overview 1. Crypto-Bulletin 2. Problem with Diffie-Hellman 2.1 Session Hijacking 2.2 Encrypted Key Exchange
CAPsMAN Quick Setup Guide, Latest version new features, How to maintain a failover controller(capsman) Georgios Argyrides
CAPsMAN Quick Setup Guide, Latest version new features, How to maintain a failover controller(capsman) Georgios Argyrides MUM Central America - Guatemala 20 th January 2017 1 About Me My Name: Georgios
Replace the Default Self-Signed Certificate with a 3rd Party SSL Certificate on the RV34x Series Router
Replace the Default Self-Signed Certificate with a 3rd Party SSL Certificate on the RV34x Series Router Introduction A digital certificate certifies the ownership of a public key by the named subject of
Total points: 71. Total time: 75 minutes. 9 problems over 7 pages. No book, notes, or calculator
CMSC 414 F08 Exam 1 Page 1 of 10 Name: Total points: 71. Total time: 75 minutes. 9 problems over 7 pages. No book, notes, or calculator 1. [14 points] a. Are n=221 and e=3 valid numbers for RSA. Explain.
SEEM4540 Open Systems for E-Commerce Lecture 03 Internet Security
SEEM4540 Open Systems for E-Commerce Lecture 03 Internet Security Consider 2. Based on DNS, identified the IP address of www.cuhk.edu.hk is 137.189.11.73. 1. Go to http://www.cuhk.edu.hk 3. Forward the
Service Managed Gateway TM. Configuring IPSec VPN
Service Managed Gateway TM Configuring IPSec VPN Issue 1.2 Date 12 November 2010 1: Introduction 1 Introduction... 3 1.1 What is a VPN?... 3 1.2 The benefits of an Internet-based VPN... 3 1.3 Tunnelling
Public-Key Infrastructure (PKI) Lab
SEED Labs PKI Lab 1 Public-Key Infrastructure (PKI) Lab Copyright 2018 Wenliang Du, Syracuse University. The development of this document was partially funded by the National Science Foundation under Award
Most Common Security Threats (cont.)
Most Common Security Threats (cont.) Denial of service (DoS) attack Distributed denial of service (DDoS) attack Insider attacks. Any examples? Poorly designed software What is a zero-day vulnerability?
Using the Terminal Services Gateway Lesson 10
Using the Terminal Services Gateway Lesson 10 Skills Matrix Technology Skill Objective Domain Objective # Deploying a TS Gateway Server Configure Terminal Services Gateway 2.2 Terminal Services (TS) Web
Key Management and Distribution
Key Management and Distribution Raj Jain Washington University in Saint Louis Saint Louis, MO 63130 Jain@cse.wustl.edu Audio/Video recordings of this lecture are available at: http://www.cse.wustl.edu/~jain/cse571-14/
Network Security and Cryptography. 2 September Marking Scheme
Network Security and Cryptography 2 September 2015 Marking Scheme This marking scheme has been prepared as a guide only to markers. This is not a set of model answers, or the exclusive answers to the questions,
IBM. Security Digital Certificate Manager. IBM i 7.1
IBM IBM i Security Digital Certificate Manager 7.1 IBM IBM i Security Digital Certificate Manager 7.1 Note Before using this information and the product it supports, be sure to read the information in
Cloud Hosted Network Monitoring and Authentication. Simple Solution using MikroTik RouterOS
Cloud Hosted Network Monitoring and Authentication. Simple Solution using MikroTik RouterOS Bamidele Richard Amire NISTech Ltd. Nigeria http://www.nistechltd.net info@nistechltd.net +2348080933986 NISTech
WAP Security. Helsinki University of Technology S Security of Communication Protocols
WAP Security Helsinki University of Technology S-38.153 Security of Communication Protocols Mikko.Kerava@iki.fi 15.4.2003 Contents 1. Introduction to WAP 2. Wireless Transport Layer Security 3. Other WAP
Authentication, Encryption, Transport, and VPN Routing
Authentication, Encryption, Transport, and VPN Routing VPN clients must authenticate themselves to the VPN server. A valid certificate is required for the client to verify the identity of the VPN server.
How to Set Up VPN Certificates
For the VPN service, you can use either self-signed certificates or certificates that are generated by an external CA. In this article: Before You Begin Before you set up VPN certificates, verify that
CT30A8800 Secured communications
CT30A8800 Secured communications Pekka Jäppinen October 31, 2007 Pekka Jäppinen, Lappeenranta University of Technology: October 31, 2007 Secured Communications: Key exchange Schneier, Applied Cryptography:
The most common type of certificates are public key certificates. Such server has a certificate is a common shorthand for: there exists a certificate
1 2 The most common type of certificates are public key certificates. Such server has a certificate is a common shorthand for: there exists a certificate signed by some certification authority, which certifies
Networking interview questions
Networking interview questions What is LAN? LAN is a computer network that spans a relatively small area. Most LANs are confined to a single building or group of buildings. However, one LAN can be connected
Network Security and Cryptography. December Sample Exam Marking Scheme
Network Security and Cryptography December 2015 Sample Exam Marking Scheme This marking scheme has been prepared as a guide only to markers. This is not a set of model answers, or the exclusive answers
Implementing Security in Windows 2003 Network (70-299)
Implementing Security in Windows 2003 Network (70-299) Level 1 Authorization & Authentication 2h 20m 20s 1.1 Group Strategy 1.2 Group Scopes 1.3 Built-in Groups 1.4 System or Special Groups 1.5 Administrating
Lecture Nov. 21 st 2006 Dan Wendlandt ISP D ISP B ISP C ISP A. Bob. Alice. Denial-of-Service. Password Cracking. Traffic.
15-441 Lecture Nov. 21 st 2006 Dan Wendlandt Worms & Viruses Phishing End-host impersonation Denial-of-Service Route Hijacks Traffic modification Spyware Trojan Horse Password Cracking IP Spoofing DNS
Secure Sockets Layer (SSL) / Transport Layer Security (TLS)
Secure Sockets Layer (SSL) / Transport Layer Security (TLS) Brad Karp UCL Computer Science CS GZ03 / M030 20 th November 2017 What Problems Do SSL/TLS Solve? Two parties, client and server, not previously
Lecture 9a: Secure Sockets Layer (SSL) March, 2004
Internet and Intranet Protocols and Applications Lecture 9a: Secure Sockets Layer (SSL) March, 2004 Arthur Goldberg Computer Science Department New York University artg@cs.nyu.edu Security Achieved by
Introduction to Network Security Missouri S&T University CPE 5420 Key Management and Distribution
Introduction to Network Security Missouri S&T University CPE 5420 Key Management and Distribution Egemen K. Çetinkaya Egemen K. Çetinkaya Department of Electrical & Computer Engineering Missouri University
CSE 565 Computer Security Fall 2018
CSE 565 Computer Security Fall 2018 Lecture 11: Public Key Infrastructure Department of Computer Science and Engineering University at Buffalo 1 Lecture Outline Public key infrastructure Certificates Trust
Chapter 8 Web Security
Chapter 8 Web Security Web security includes three parts: security of server, security of client, and network traffic security between a browser and a server. Security of server and security of client
Create Decryption Policies to Control HTTPS Traffic
Create Decryption Policies to Control HTTPS Traffic This chapter contains the following sections: Overview of Create Decryption Policies to Control HTTPS Traffic, page 1 Managing HTTPS Traffic through
Managing the SSL Certificate for the ESRS HTTPS Listener Service Technical Notes P/N Rev 01 July, 2012
Managing the SSL Certificate for the ESRS HTTPS Listener Service Technical Notes P/N 300-013-818 Rev 01 July, 2012 This document contains information on these topics: Introduction... 2 Terminology... 2
Cryptography and Network Security Chapter 14
Cryptography and Network Security Chapter 14 Fifth Edition by William Stallings Lecture slides by Lawrie Brown Chapter 14 Key Management and Distribution No Singhalese, whether man or woman, would venture
06/02/ Local & Metropolitan Area Networks. 0. Overview. Terminology ACOE322. Lecture 8 Network Security
1 Local & Metropolitan Area Networks ACOE322 Lecture 8 Network Security Dr. L. Christofi 1 0. Overview As the knowledge of computer networking and protocols has become more widespread, so the threat of
Plug and play solution for managing lan users with MikroTik RouterOS
Plug and play solution for managing lan users with MikroTik RouterOS Presented By Mohammad Javad Sabri About me Mohammad Javad Sabri MikroTik Certified Trainer MikroTik Academy Trainer MikroTik Certified
Trust Infrastructure of SSL
Trust Infrastructure of SSL CS 470 Introduction to Applied Cryptography Ali Aydın Selçuk CS470, A.A.Selçuk SSL Trust 1 SSL/TLS The main workhorse of secure Internet communication. Everyday, billions of
Chapter 9: Key Management
Chapter 9: Key Management Session and Interchange Keys Key Exchange Cryptographic Key Infrastructure Storing and Revoking Keys Digital Signatures Slide #9-1 Overview Key exchange Session vs. interchange
Key management. Pretty Good Privacy
ECE 646 - Lecture 4 Key management Pretty Good Privacy Using the same key for multiple messages M 1 M 2 M 3 M 4 M 5 time E K time C 1 C 2 C 3 C 4 C 5 1 Using Session Keys & Key Encryption Keys K 1 K 2
Content and Purpose of This Guide... 1 User Management... 2
Contents Introduction--1 Content and Purpose of This Guide........................... 1 User Management........................................ 2 Security--3 Security Features.........................................
IBM i Version 7.2. Security Digital Certificate Manager IBM
IBM i Version 7.2 Security Digital Certificate Manager IBM IBM i Version 7.2 Security Digital Certificate Manager IBM Note Before using this information and the product it supports, read the information
Securing ArcGIS Services
Federal GIS Conference 2014 February 10 11, 2014 Washington DC Securing ArcGIS Services James Cardona Agenda Security in the context of ArcGIS for Server Background concepts Access Securing web services
VPN Tracker for Mac OS X
VPN Tracker for Mac OS X How-to: Interoperability with Novell Border Manager 3.8 Rev. 1.0 Copyright 2003-2004 equinux USA Inc. All rights reserved. 1. Introduction 1. Introduction This document describes
Digital Certificates. About Digital Certificates
This chapter describes how to configure digital certificates. About, on page 1 Guidelines for, on page 9 Configure, on page 12 How to Set Up Specific Certificate Types, on page 12 Set a Certificate Expiration
Key Management and Distribution
2 and Distribution : Security and Cryptography Sirindhorn International Institute of Technology Thammasat University Prepared by Steven Gordon on 20 December 2015 css441y15s2l10, Steve/Courses/2015/s2/css441/lectures/key-management-and-distribution.tex,
HP Instant Support Enterprise Edition (ISEE) Security overview
HP Instant Support Enterprise Edition (ISEE) Security overview Advanced Configuration A.03.50 Mike Brandon Interex 03 / 30, 2004 2003 Hewlett-Packard Development Company, L.P. The information contained
CND Exam Blueprint v2.0
EC-Council C ND Certified Network Defende r CND Exam Blueprint v2.0 CND Exam Blueprint v2.0 1 Domains Objectives Weightage Number of Questions 1. Computer Network and Defense Fundamentals Understanding
FIREWALLS & NETWORK SECURITY with Intrusion Detection and VPNs, 2
FIREWALLS & NETWORK SECURITY with Intrusion Detection and VPNs, 2 nd ed. 9 Encryption and Firewalls By Whitman, Mattord & Austin 2008 Course Technology Learning Objectives Describe the role encryption
1. CyberCIEGE Advanced VPNs
1. CyberCIEGE Advanced VPNs CyberCIEGE is an information assurance (IA) training tool that illustrates computer and network security principles through simulation and resource management trade-offs. CyberCIEGE
UNIT - IV Cryptographic Hash Function 31.1
UNIT - IV Cryptographic Hash Function 31.1 31-11 SECURITY SERVICES Network security can provide five services. Four of these services are related to the message exchanged using the network. The fifth service
ECE 646 Lecture 3. Key management. Required Reading. Using the same key for multiple messages
ECE 646 Lecture 3 Key management Required Reading Stallings, Cryptography and Network Security: Principles and Practice, 5/E or 6/E Chapter 14 Key Management and Distribution Using the same key for multiple
Security and Certificates
Encryption, page 1 Voice and Video Encryption, page 6 Federal Information Processing Standards, page 6 Certificate Validation, page 6 Required Certificates for On-Premises Servers, page 7 Certificate Requirements
Security and Anonymity
Security and Anonymity Distributed Systems need a network to send messages. Any message you send in a network can be looked at by any router or machine it goes through. Further if your machine is on the
IBM Presentations: Implementing SSL Security in WebSphere Partner Gateway
IBM Software Group IBM Presentations: Implementing SSL Security in WebSphere Partner Gateway Presenter: Max Terpolilli WPG L2 Support WebSphere Support Technical Exchange Agenda IBM Software Group Digital
Authentication & Authorization
Authentication & Authorization Anuj Gupta 1, 1 M.Tech Scholar, Department of C.F.I.S, G.I.T.A.M, Kablana, Jhajjar Ashish Kumar Sharma 2 2 Assistant Professor, Department of C.F.I.S & C.S.E, G.I.T.A.M,
Configuring F5 for SSL Intercept
Configuring F5 for Welcome to the F5 deployment guide for configuring the BIG-IP system for SSL intercept (formerly called with Air Gap Egress Inspection). This document contains guidance on configuring
Lecture 15 Public Key Distribution (certification)
0 < i < 2 n = N X i,y i random secret keys index i = random (secret) value Merkle s Puzzles (1974) Puzzle P i = {index i,x i,s} Y i S fixed string, e.g., " Alice to Bob" { P 0 < i < 2 i n } Pick random
Chapter 5. Security Components and Considerations.
Chapter 5. Security Components and Considerations. Technology Brief Virtualization and Cloud Security Virtualization concept is taking major portion in current Data Center environments in order to reduce
Certification Authority
Certification Authority Overview Identifying CA Hierarchy Design Requirements Common CA Hierarchy Designs Documenting Legal Requirements Analyzing Design Requirements Designing a Hierarchy Structure Identifying
Key management. Required Reading. Stallings, Cryptography and Network Security: Principles and Practice, 5/E or 6/E
ECE 646 Lecture 3 Key management Required Reading Stallings, Cryptography and Network Security: Principles and Practice, 5/E or 6/E Chapter 14 Key Management and Distribution 1 Using the same key for multiple
This document describes the configuration of Secure Sockets Layer (SSL) decryption on the FirePOWER Module using ASDM (On-Box Management).
Contents Introduction Prerequisites Requirements Components Used Background Information Outbound SSL Decryption Inbound SSL Decryption Configuration for SSL Decryption Outbound SSL decryption (Decrypt
Network Security Essentials
Network Security Essentials Fifth Edition by William Stallings Chapter 4 Key Distribution and User Authentication No Singhalese, whether man or woman, would venture out of the house without a bunch of
Virtual Dispersive Networking Spread Spectrum IP
Virtual Dispersive Networking Spread Spectrum IP DSI Proprietary 1 DSI Proprietary 2 Problem Lies Outside of Existing Security: On the Internet Internet Routers Virus Software Phishing Software etc POLICY
Some Lessons Learned from Designing the Resource PKI
Some Lessons Learned from Designing the Resource PKI Geoff Huston Chief Scientist, APNIC May 2007 Address and Routing Security The basic security questions that need to be answered are: Is this a valid
Lecture 30. Cryptography. Symmetric Key Cryptography. Key Exchange. Advanced Encryption Standard (AES) DES. Security April 11, 2005
Lecture 30 Security April 11, 2005 Cryptography K A ciphertext Figure 7.3 goes here K B symmetric-key crypto: sender, receiver keys identical public-key crypto: encrypt key public, decrypt key secret Symmetric
ECE 646 Lecture 3. Key management
ECE 646 Lecture 3 Key management Required Reading Stallings, Cryptography and Network Security: Principles and Practice, 5/E or 6/E Chapter 14 Key Management and Distribution Using the same key for multiple
MIKROTIK ROUTEROS BURMESE VERSION ONLINE TRAINING CLASS CHAPTER 1
MIKROTIK ROUTEROS ONLINE TRAINING CLASS CHAPTER 1 BURMESE VERSION Phyo Phyo Hein B. C. Tech (hons) MTCNA, MTCRE, MTCWE, MTCTCE, MTCUME, MTCINE CCNA R&S, CCNP R&S, CCIP, JNCIA-Junos September 13, 2016 INSTRUCTOR
The Most Important Facts in a Nutshell Content Security User Interface Security Infrastructure Security In Detail...
Data security is the highest priority at Brosix, enabling us to continue achieving the goal of providing efficient and secure online realtime communication services. Table of Contents The Most Important
(2½ hours) Total Marks: 75
(2½ hours) Total Marks: 75 N. B.: (1) All questions are compulsory. (2) Makesuitable assumptions wherever necessary and state the assumptions made. (3) Answers to the same question must be written together.
Verteilte Systeme (Distributed Systems)
Verteilte Systeme (Distributed Systems) Lorenz Froihofer l.froihofer@infosys.tuwien.ac.at http://www.infosys.tuwien.ac.at/teaching/courses/ VerteilteSysteme/ Security Threats, mechanisms, design issues
Information Security. message M. fingerprint f = H(M) one-way hash. 4/19/2006 Information Security 1
Information Security message M one-way hash fingerprint f = H(M) 4/19/2006 Information Security 1 Outline and Reading Digital signatures Definition RSA signature and verification One-way hash functions