Opleiding: Cybersecurity & Cloud
Samenvatting
Security
Samengevat door: Qamar
Qamar
20-12-2019
,Inhoud
Inleiding ................................................................................................................................................... 2
Virtual Private Network ........................................................................................................................... 2
IP Tunneling ............................................................................................................................................. 3
Twee soorten IP-tunneling ...................................................................................................................... 4
Een overzicht van hoe TLS / SSL VPN werkt ............................................................................................ 4
Secret-Key Encryption ............................................................................................................................. 5
Substitution Cipher (Substitudieversleuteling) ....................................................................................... 5
Monoalphabetic Substitution Cipher .................................................................................................. 5
Breaking Monoalphabetic Substitution Cipher ................................................................................... 6
Data Encryption Standard (DES) .............................................................................................................. 7
Advanced Encryption Standard (AES)...................................................................................................... 7
One-Way Hash Functions ........................................................................................................................ 7
MD (Message Digest) .......................................................................................................................... 7
SHA (Secure Hash Algorithm) .............................................................................................................. 7
Public Key Cryptography ......................................................................................................................... 8
Diffie-Hellman Key Exchange .................................................................................................................. 8
Turn DH Key Exchange into a Public-Key Encryption Algorithm ............................................................. 9
RSA Algorithm.......................................................................................................................................... 9
Modulo Operation ............................................................................................................................... 9
Euler’s Theorem ................................................................................................................................ 10
RSA: Key Generation.............................................................................................................................. 10
RSA: Encryption and Decryption ....................................................................................................... 10
RSA Exercise: Small Numbers ............................................................................................................ 11
Hybrid Encryption .............................................................................................................................. 11
Public Key Infrastructure ....................................................................................................................... 11
Public Key Cryptography ................................................................................................................... 11
Man-in-the-Middle (MITM) Attack.................................................................................................... 11
Public Key Certificates ........................................................................................................................... 12
Root and Intermediate Certificate Authorities ................................................................................. 12
Root CAs and Self-Signed Certificate ................................................................................................. 12
Intermediate CAs and Chain of Trust ................................................................................................ 13
Creating Certificates for Intermediate CA ......................................................................................... 13
Cross Site Request Forgery (CSRF)......................................................................................................... 13
Cross-Site Requests and Its Problems ............................................................................................... 14
CSRF Attacks on HTTP Get Services ................................................................................................... 14
1
, Cross-Site Scripting (XSS) Attack ........................................................................................................... 15
............................................................................................................................................................... 15
SQL Injection Attack .............................................................................................................................. 16
Inleiding
Dit is een samenvatting van het vak ‘Security’ van de opleiding ‘Cybersecurity en Cloud’ van jaar 2.
Het boek dat wordt behandeld is geschreven door Wenliang Du met als titel: “Internet Security - A
hands-on Approach.” (Second Editon). De volgende hoofdstukken zijn samengevat:
• 5.1 & 5.2
• 8.1, 8.2 & 8.3
• 9.1 & 9.3
• 10.1, 10.2, 10.3
• 11.2, 11.3, 11.4 t/m 11.4.3
• 14
• 15
• 16
Let op: De hoofdstukken uit CCNA security zijn hier niet in meegenomen:
• Chapter 2
• Chapter 3
• Chapter 4
• Chapter 5
• Chapter 6
• Chapter 8
2
Samenvatting
Security
Samengevat door: Qamar
Qamar
20-12-2019
,Inhoud
Inleiding ................................................................................................................................................... 2
Virtual Private Network ........................................................................................................................... 2
IP Tunneling ............................................................................................................................................. 3
Twee soorten IP-tunneling ...................................................................................................................... 4
Een overzicht van hoe TLS / SSL VPN werkt ............................................................................................ 4
Secret-Key Encryption ............................................................................................................................. 5
Substitution Cipher (Substitudieversleuteling) ....................................................................................... 5
Monoalphabetic Substitution Cipher .................................................................................................. 5
Breaking Monoalphabetic Substitution Cipher ................................................................................... 6
Data Encryption Standard (DES) .............................................................................................................. 7
Advanced Encryption Standard (AES)...................................................................................................... 7
One-Way Hash Functions ........................................................................................................................ 7
MD (Message Digest) .......................................................................................................................... 7
SHA (Secure Hash Algorithm) .............................................................................................................. 7
Public Key Cryptography ......................................................................................................................... 8
Diffie-Hellman Key Exchange .................................................................................................................. 8
Turn DH Key Exchange into a Public-Key Encryption Algorithm ............................................................. 9
RSA Algorithm.......................................................................................................................................... 9
Modulo Operation ............................................................................................................................... 9
Euler’s Theorem ................................................................................................................................ 10
RSA: Key Generation.............................................................................................................................. 10
RSA: Encryption and Decryption ....................................................................................................... 10
RSA Exercise: Small Numbers ............................................................................................................ 11
Hybrid Encryption .............................................................................................................................. 11
Public Key Infrastructure ....................................................................................................................... 11
Public Key Cryptography ................................................................................................................... 11
Man-in-the-Middle (MITM) Attack.................................................................................................... 11
Public Key Certificates ........................................................................................................................... 12
Root and Intermediate Certificate Authorities ................................................................................. 12
Root CAs and Self-Signed Certificate ................................................................................................. 12
Intermediate CAs and Chain of Trust ................................................................................................ 13
Creating Certificates for Intermediate CA ......................................................................................... 13
Cross Site Request Forgery (CSRF)......................................................................................................... 13
Cross-Site Requests and Its Problems ............................................................................................... 14
CSRF Attacks on HTTP Get Services ................................................................................................... 14
1
, Cross-Site Scripting (XSS) Attack ........................................................................................................... 15
............................................................................................................................................................... 15
SQL Injection Attack .............................................................................................................................. 16
Inleiding
Dit is een samenvatting van het vak ‘Security’ van de opleiding ‘Cybersecurity en Cloud’ van jaar 2.
Het boek dat wordt behandeld is geschreven door Wenliang Du met als titel: “Internet Security - A
hands-on Approach.” (Second Editon). De volgende hoofdstukken zijn samengevat:
• 5.1 & 5.2
• 8.1, 8.2 & 8.3
• 9.1 & 9.3
• 10.1, 10.2, 10.3
• 11.2, 11.3, 11.4 t/m 11.4.3
• 14
• 15
• 16
Let op: De hoofdstukken uit CCNA security zijn hier niet in meegenomen:
• Chapter 2
• Chapter 3
• Chapter 4
• Chapter 5
• Chapter 6
• Chapter 8
2
