Please enable JavaScript.

Coggle requires JavaScript to display documents.

Distributed systems, Cybersecurity - Coggle Diagram

- - - - Maekawa
- - - - SEDA
    - - C-FLAT
- - - - confidentiality
  - - - confidentiality
      - integrity
  - - - availability
  - - - authentication
  - - - authentication
      - integrity
      - availability
  - - - authentication
      - anonimity
- - - - Encryption in communication and storage
        
        public key infrastructure
        
        A public key infrastructure (PKI) provides all the components necessary for different types of users and entities to be able to communicate securely and in a predictable manner. Consists of: hardware, applications, policies, services, programming interfaces, cryptographic algorithms, protocols, users, and utilities. It should be used if you do not automatically trust individuals you do not know.
        
        encryption-decryption
        
        plaintext <--> cyphertext
        
        cryptographic hash functions
        
        A hash function H maps a plaintext M to a fixed-length value P = H(M), called hash value or digest of M
        
        For efficiency, the computation of the hash function should take time proportional to the length of the input plaintext
        
        Collision resistance (a.k.a. strong collision resistance): It is hard to find a pair of plaintexts M and N such that H(M) = H(N)
        
        Preimage resistance (a.k.a. one-way): Given a hash value P, it is hard to find a plaintext M such that H(M) = P
        
        Second preimage resistance (a.k.a. weak collision resistance): Given a plaintext M, it is hard to find a plaintext N such that H(M) = H(N)
        
        digital certificate
        
        A digital certificate binds an entity’s identity to a public key. It contains information a receiver needs to be assured of the identity of the public key owner.
        
        Registration Authority
        
        A registration authority (RA) is the PKI component that accepts a request for a digital certificate and performs the necessary steps of registering and authenticating the person requesting the certificate.
        
        Certificate Authority
        
        A certificate authority (CA) is trusted authority that certifies individuals’ identities and creates electronic documents (digital certificate) indicating that individuals are who they say they are.
        
        steps for obtaining
      - authentication
        
        The determination of the identity that someone has.
        
        something the person has (like a smart card or a radio key fob storing secret keys)
        
        something the person knows (like a password)
        
        something the person is (like a human with a fingerprint)
        
        classification of protocols
        
        Symmetric cryptography uses a single private key to both encrypt and decrypt data
        
        Asymmetric cryptography (a.k.a public-key cryptography) uses a secret key (private key) and a public key
        
        Data encrypted with the public key can be decrypted only by the corresponding private key
        
        Data signed with the private key can only be verified with the corresponding public key
      - Physical access restrictions
        
        The establishment of physical barriers to limit access to protected computational resources.
      - Access control
        
        Rules and policies that limit access to confidential information to those people and/or systems with a “need to know”
      - Bug-free programs
  - - - Backups: the periodic archiving of data
      - Checksums: the computation of a (hash) function that maps the contents of a file to a numerical value
      - Data correcting codes: methods for storing data in such a way that small changes can be easily detected and automatically corrected
  - - - Countermeasures against system overload
        
        Redundancy in server farms, or disks (scaling)
        
        Equipment that can detect and counter DOS attacks (i.e., AntibIoTic), rate limiting
      - Countermeasures against system crashing
        
        Check all user input for “out of bounds” values
        
        Switch of unused services and functions
        
        Follow and install supplier updates and patches
- - - - Proxies: trusted agents (example: The Onion Router) that engage in actions for an individual in a way that cannot be traced back to that person
      - Pseudonyms: fictional identities that can fill in for real identities in communications and transactions, but are otherwise known only to a trusted entity
      - Aggregation: the combining of data from many individuals so that disclosed sums or averages cannot be tied to any individual
      - Mixing: the intertwining of transactions, information, or communications in a way that cannot be traced to any individual
  - - - Policies: specify behavioral expectations that people or systems have for themselves and others
      - Permissions: describe the behaviors that are allowed by the agents that interact with a person or system
      - Protections: describe mechanisms put in place to enforce permissions and policies