Scribd
Upload
591 views

A Model For Network Security

A model for network security involves establishing a logical information channel between two principals for message transmission across a network. Security aspects, like encryption and digital signatures, transform the information and rely on secret information shared between the principals but unknown to opponents. A trusted third party may be needed to distribute secrets or arbitrate disputes regarding message authenticity. Designing a secure service requires algorithms for security transformations, generating secrets, distributing secrets, and protocols specifying how principals use the algorithms and secrets.

Uploaded by

Mukul Soni
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
591 views

A Model For Network Security

A model for network security involves establishing a logical information channel between two principals for message transmission across a network. Security aspects, like encryption and digital signatures, transform the information and rely on secret information shared between the principals but unknown to opponents. A trusted third party may be needed to distribute secrets or arbitrate disputes regarding message authenticity. Designing a secure service requires algorithms for security transformations, generating secrets, distributing secrets, and protocols specifying how principals use the algorithms and secrets.

Uploaded by

Mukul Soni
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 1

A Model for Network Security

A model for much of what we will be discussing is captured, in very general terms, in Figure 1.5. A message
is to be transferred from one party to another across some sort of internet. The two parties, who are the
principals in this transaction, must cooperate for the exchange to take place. A logical information channel is
established by defining a route through the internet from source to destination and by the cooperative use of
communication protocols (e.g., TCP/IP) by the two principals.


Security aspects come into play when it is necessary or desirable to protect the information transmission
from an opponent who may present a threat to confidentiality, authenticity, and so on. All the techniques for
providing security have two components:
A security-related transformation on the information to be sent. Examples include the encryption of
the message, which scrambles the message so that it is unreadable by the opponent, and the addition
of a code based on the contents of the message, which can be used to verify the identity of the sender
Some secret information shared by the two principals and, it is hoped, unknown to the opponent. An
example is an encryption key used in conjunction with the transformation to scramble the message
before transmission and unscramble it on reception.
A trusted third party may be needed to achieve secure transmission. For example, a third party may be
responsible for distributing the secret information to the two principals while keeping it from any opponent.
Or a third party may be needed to arbitrate disputes between the two principals concerning the authenticity
of a message transmission.
This general model shows that there are four basic tasks in designing a particular security service:
1. Design an algorithm for performing the security-related transformation. The algorithm should be such
that an opponent cannot defeat its purpose.
2. Generate the secret information to be used with the algorithm.
3. Develop methods for the distribution and sharing of the secret information.
4. Specify a protocol to be used by the two principals that makes use of the security algorithm and the
secret information to achieve a particular security service.

You might also like