Please enable JavaScript.

Coggle requires JavaScript to display documents.

CSF (Key Principles (Effectiveness (Controls must be used, Appropriate…

- - - - ensure an asset is precise, accurate, unmodifiable and consistent
    - - be able to detect acts that compromise integrity
    - - hash functions, message digests
      - Message Authentication Codes
  - - - Public Key Encryption
      - Block Ciphers
      - Stream Ciphers
- - - - accidental
      - deliberate
      - environmental
    - - Interception
      - Interruption
      - Modification
      - Fabrication
    - - Reduced/Removed
        
        protective measures
        
        Preventative
        
        Detective
        
        Reactive
        
        Corrective
      - Accepted - i.e. not a bug, but a feature
      - Avoided
      - Transferred - not our problem
  - - - Hardware
        
        wear and tear
      - Software
        
        well known flaws
        
        insufficient testing
      - Network
        
        single point of failure
        
        unprotected communications
      - Personnel
        
        inadequete training
        
        lack of staff
      - Site
        
        flood plain
        
        power grid
      - Organisational
        
        lack of continutiy plans
        
        lack of policy
- - - - hard to find m given hash(m)
    - - Givem m1, hard to find a different m2 that makes hash(m1) == hash(m2)
    - - hard to find m1, m2 that have the same hash
  - - - use the same key to encrypt and decrypt
      - AES, TripleDES, Blowfish
      - Efficient for large messages
    - - Key Pairs
        
        One used to decrypt, the other to encrypt
      - Two modes of use
        
        Encrypting
        
        Signing
      - DSA, ECDSA, ECC, RSA
        
        RSA - security in hardness of factorizing large numbers
        
        DiffieHellman / DSA - hardness of taking discrete logarithms over finite fields
  - - - Used to provide Confidentiality
      - Public Key Infrastructure - PKI
        
        How do I know Bob's public key is actually his?
        
        Trusted Third Party
        
        Certificate Authority
        
        bind public keys to identities
        
        when registering public key
        
        when authority generates keypair
        
        achieved through digital signatures
        
        Declares: this belongs to Bob
        
        x509
        
        Tasks
        
        Certificate Issuiung
        
        Certificate Revocation
        
        Key Pair Generation
        
        Private Key Escrow, Backup, Archive, Recovery
        
        Public Key Archiving
        
        Update
        
        Logging of Actions / Audit
    - - Assymmetric Crypto + Message Digests
      - Provide
        
        Autehticity of message origin
        
        Non-Repudiation of message origin
        
        Message integrity
    - - Hybrid encryption scheme
      - Symmetric encryption to encrypt the data
      - Asymmetric encryption to encrypt the symmetric key
      - Key Encapsulation / Data Encapsulation Mechanism