uestion 1: (25 marks) During your study of T215B, you have been introduced to a set of concepts, protocols and threats to network security. Using your own words, write a summary about network security explaining the following factors: a. Explain the basic idea about IPsec protocol, its aim and disadvantages.(9 marks) b. Do a comparison between Caesar cipher using diagraph coding and Vigenère Cipher in terms of their operation and level of security (8 marks). c. Explain the Message Digest Algorithm 5 (MD5) and describe briefly its operation. (8 marks) 11:36 P

uestion 1: (25 marks) During your study of T215B, you have been introduced to a set of concepts, protocols and threats to network security. Using your own words, write a summary about network security explaining the following factors: a. Explain the basic idea about IPsec protocol, its aim and disadvantages.(9 marks) b. Do a comparison between Caesar cipher using diagraph coding and Vigenère Cipher in terms of their operation and level of security (8 marks). c. Explain the Message Digest Algorithm 5 (MD5) and describe briefly its operation. (8 marks) 11:36 P

MIS

9th Edition

ISBN:9781337681919

Author:BIDGOLI

Publisher:BIDGOLI

Chapter7: The Internet, Intranets, And Extranets

Section: Chapter Questions

Problem 3AYRM

See similar textbooks

Similar questions

Question 1: During your study of T215B, you have been introduced to a set of concepts, protocols and threats to network security. Using your own words, write a summary about network security explaining the following factors: a. Explain the basic idea about IPsec protocol, its aim and disadvantages. b. Do a comparison between Caesar cipher using diagraph coding and Vigenère Cipher in terms of their operation and level of security. c. Explain the Message Digest Algorithm 5 (MD5) and describe briefly its operation.
In IPsec, each incoming and outgoing packet will be checked with the Security Policy Database (SPD) and the Security Association Database (SAD). (a) What is the checking done with the SPD: (b) What is the checking done with the SAD? (c) Each security association stored in SAD is identified by an integer. What is this integer called?
Design a security protocol that will allow a Mutually Agreed Session key (Kabc) to be established between three entities A, B and C. This key can then be used to secure a chat between the three entities. I want you to develop your own design based on the conditions below.Note: The session key should NOT be known to the Chat Server (S) and the Chat Server (S) can only forward the encrypted messages to A, B and C and S cannot read the messages. The secure chat between entities A, B and C must use the Chat Server (S) and session key Kabc as below: (refer image)i.e. A, B and C Do NOT communicate directly. The following conditions apply to your protocol design.1. A, B and C Never communicate directly. 2. Each entity (A, B, C and S) have a Public Key Certificate, ie. CA<<A>>, CA<<B>>, CA<<C>> and CA<<S>>. 3. The Chat Server, S, has access to all Entity Certificates that use its service and can provide these Certificate to its service users if…
Design a security protocol that will allow a Mutually Agreed Session key (Kabc) to be established between three entities A, B and C. This key can then be used to secure a chat between the three entities. I want you to develop your own design based on the conditions below. Note: The session key should NOT be known to the Chat Server (S) and the Chat Server (S) can only forward the encrypted messages to A, B and C and S cannot read the messages. The secure chat between entities A, B and C must use the Chat Server (S) and session key Kabc as below: i.e. A, B and C Do NOT communicate directly. The following conditions apply to your protocol design. 1. A, B and C Never communicate directly. 2. Each entity (A, B, C and S) have a Public Key Certificate, ie. CA<>, CA<>, CA<> and CA<>. 3. The Chat Server, S, has access to all Entity Certificates that use its service and can provide these Certificate to its service users if requested to do so. 4. Challenge – Response…
The IPsec architecture document states that when two transport mode SAs are bundled to allow both AH and ESP protocols on the same end-to- end flow, only one ordering of security protocols seems appropriate: performing the ESP protocol before performing the AH protocol. Why is this approach recommended rather than authentication before encryption?
It is important to keep in mind that the TCP/IP protocol suite's transport phase is where packet reassembly and reordering occurs. A firewall may function at the Internet or data layer level of abstraction. Whether the traffic stream is in the correct sequence or has been erased, a stateful inspection barrier cannot learn anything about it.
Keep in mind that the TCP/IP protocol suite's reassembly and reordering of packets happens during the transport phase. Some firewalls are designed to function just at the Internet or data layer level of abstraction. Without the proper sequence or the absence of a deleted packet, a stateful inspection firewall cannot make any inferences about the traffic being inspected.
It is important to keep in mind that the TCP/IP protocol suite's transport phase is where packet reassembly and reordering occurs. A firewall may function at the Internet or data layer level of abstraction. If a traffic stream is missing or out of order, a stateful inspection firewall will be unable to learn anything about it.
Have you kept up with the most recent changes to the protocols used for network security? In the following paragraphs, there are four different kinds of inquiries.
Which circumstances call for the use of SSH? Could SSHs be added to the list of acceptable protocols?
The security scheme for IEEE 802.11, prior to 11i, was Wired Equivalent Privacy (WEP). WEP assumed all devices on the network share a security key. The purpose of the authentication scenario is for the STA to prove that it possesses the security key. Authentication proceeds as shown in Figure 24.13 What are the benefits of the authentication scheme? The authentication scheme is incomplete. What is missing and why is it important? What is a cryptographic weakness of this scheme?
Keep in mind that the TCP/IP protocol suite's transport phase involves reordering and reassembly of packets. A firewall may function at the Internet or data layer level of abstraction. If a traffic stream is corrupted or removed, a stateful inspection firewall will be unable to learn anything about it.