Lexicon Iconographicum Mythologiae Classicae (LIMC). Supplementum 2009. Vol. 2- Abellio - Zeus

Stallings’ Cryptography and Network Security, Seventh Edition, introduces the reader to the compelling and evolving field of cryptography and network security. In an age of viruses and hackers, electronic eavesdropping, and electronic fraud on a global scale, security is paramount. The purpose of this book is to provide a practical survey of both the principles and practice of cryptography and network security. In the first part of the book, the basic issues to be addressed by a network security capability are explored by providing a tutorial and survey of cryptography and network security technology. The latter part of the book deals with the practice of network security: practical applications that have been implemented and are in use to provide network security. The Seventh Edition streamlines subject matter with new and updated material — including Sage, one of the most important features of the book. Sage is an open-source, multiplatform, freeware package that implements a very powerful, flexible, and easily learned mathematics and computer algebra system. It provides hands-on experience with cryptographic algorithms and supporting homework assignments. With Sage, the reader learns a powerful tool that can be used for virtually any mathematical application. The book also provides an unparalleled degree of support for the reader to ensure a successful learning experience. Cover 1 Contents 4 Notation 11 Preface 13 About the Author 19 Part One: Background 20 Chapter 1 Computer and Network Security Concepts 20 1.1 Computer Security Concepts 22 1.2 The OSI Security Architecture 27 1.3 Security Attacks 28 1.4 Security Services 30 1.5 Security Mechanisms 33 1.6 Fundamental Security Design Principles 35 1.7 Attack Surfaces and Attack Trees 38 1.8 A Model for Network Security 42 1.9 Standards 44 1.10 Key Terms, Review Questions, and Problems 45 Chapter 2 Introduction to Number Theory 47 2.1 Divisibility and the Division Algorithm 48 2.2 The Euclidean Algorithm 50 2.3 Modular Arithmetic 54 2.4 Prime Numbers 62 2.5 Fermat's and Euler's Theorems 65 2.6 Testing for Primality 69 2.7 The Chinese Remainder Theorem 72 2.8 Discrete Logarithms 74 2.9 Key Terms, Review Questions, and Problems 79 Appendix 2A The Meaning of Mod 83 Part Two: Symmetric Ciphers 86 Chapter 3 Classical Encryption Techniques 86 3.1 Symmetric Cipher Model 87 3.2 Substitution Techniques 93 3.3 Transposition Techniques 108 3.4 Rotor Machines 109 3.5 Steganography 111 3.6 Key Terms, Review Questions, and Problems 113 Chapter 4 Block Ciphers and the Data Encryption Standard 119 4.1 Traditional Block Cipher Structure 120 4.2 The Data Encryption Standard 130 4.3 A DES Example 132 4.4 The Strength of DES 135 4.5 Block Cipher Design Principles 136 4.6 Key Terms, Review Questions, and Problems 138 Chapter 5 Finite Fields 142 5.1 Groups 144 5.2 Rings 146 5.3 Fields 147 5.4 Finite Fields of the Form GF(p) 148 5.5 Polynomial Arithmetic 152 5.6 Finite Fields of the Form GF(2n) 158 5.7 Key Terms, Review Questions, and Problems 170 Chapter 6 Advanced Encryption Standard 172 6.1 Finite Field Arithmetic 173 6.2 AES Structure 175 6.3 AES Transformation Functions 180 6.4 AES Key Expansion 191 6.5 An AES Example 194 6.6 AES Implementation 198 6.7 Key Terms, Review Questions, and Problems 203 Appendix 6A Polynomials with Coefficients in GF(28) 204 Chapter 7 Block Cipher Operation 208 7.1 Multiple Encryption and Triple DES 209 7.2 Electronic Codebook 214 7.3 Cipher Block Chaining Mode 217 7.4 Cipher Feedback Mode 219 7.5 Output Feedback Mode 221 7.6 Counter Mode 223 7.7 XTS-AES Mode for Block-Oriented Storage Devices 225 7.8 Format-Preserving Encryption 232 7.9 Key Terms, Review Questions, and Problems 246 Chapter 8 Random Bit Generation and Stream Ciphers 251 8.1 Principles of Pseudorandom Number Generation 253 8.2 Pseudorandom Number Generators 259 8.3 Pseudorandom Number Generation Using a Block Cipher 262 8.4 Stream Ciphers 268 8.5 RC4 270 8.6 True Random Number Generators 272 8.7 Key Terms, Review Questions, and Problems 281 Part Three: Asymmetric Ciphers 283 284 Chapter 9 Public-Key Cryptography and RSA 284 9.1 Principles of Public-Key Cryptosystems 286 9.2 The RSA Algorithm 295 9.3 Key Terms, Review Questions, and Problems 309 Chapter 10 Other Public-Key Cryptosystems 314 10.1 Diffie-Hellman Key Exchange 315 10.2 Elgamal Cryptographic System 319 10.3 Elliptic Curve Arithmetic 322 10.4 Elliptic Curve Cryptography 331 10.5 Pseudorandom Number Generation Based on an Asymmetric Cipher 335 10.6 Key Terms, Review Questions, and Problems 337 Part Four: Cryptographic Data Integrity Algorithms 340 Chapter 11 Cryptographic Hash Functions 340 11.1 Applications of Cryptographic Hash Functions 342 11.2 Two Simple Hash Functions 347 11.3 Requirements and Security 349 11.4 Hash Functions Based on Cipher Block Chaining 355 11.5 Secure Hash Algorithm (SHA) 356 11.6 SHA-3 366 11.7 Key Terms, Review Questions, and Problems 378 Chapter 12 Message Authentication Codes 382 12.1 Message Authentication Requirements 383 12.2 Message Authentication Functions 384 12.3 Requirements for Message Authentication Codes 392 12.4 Security of MACs 394 12.5 MACs Based on Hash Functions: HMAC 395 12.6 MACs Based on Block Ciphers: DAA and CMAC 400 12.7 Authenticated Encryption: CCM and GCM 403 12.8 Key Wrapping 409 12.9 Pseudorandom Number Generation Using Hash Functions and MACs 414 12.10 Key Terms, Review Questions, and Problems 417 Chapter 13 Digital Signatures 420 13.1 Digital Signatures 422 13.2 Elgamal Digital Signature Scheme 425 13.3 Schnorr Digital Signature Scheme 426 13.4 NIST Digital Signature Algorithm 427 13.5 Elliptic Curve Digital Signature Algorithm 431 13.6 RSA-PSS Digital Signature Algorithm 434 13.7 Key Terms, Review Questions, and Problems 439 Part Five: Mutual Trust 442 Chapter 14 Key Management and Distribution 442 14.1 Symmetric Key Distribution Using Symmetric Encryption 443 14.2 Symmetric Key Distribution Using Asymmetric Encryption 452 14.3 Distribution of Public Keys 455 14.4 X.509 Certificates 460 14.5 Public-Key Infrastructure 468 14.6 Key Terms, Review Questions, and Problems 470 Chapter 15 User Authentication 474 15.1 Remote User-Authentication Principles 475 15.2 Remote User-Authentication Using Symmetric Encryption 479 15.3 Kerberos 483 15.4 Remote User-Authentication Using Asymmetric Encryption 501 15.5 Federated Identity Management 503 15.6 Personal Identity Verification 509 15.7 Key Terms, Review Questions, and Problems 516 Part Six: Network And Internet Security 520 Chapter 16 Network Access Control and Cloud Security 520 16.1 Network Access Control 521 16.2 Extensible Authentication Protocol 524 16.3 IEEE 802.1X Port-Based Network Access Control 528 16.4 Cloud Computing 530 16.5 Cloud Security Risks and Countermeasures 536 16.6 Data Protection in the Cloud 538 16.7 Cloud Security as a Service 542 16.8 Addressing Cloud Computing Security Concerns 545 16.9 Key Terms, Review Questions, and Problems 546 Chapter 17 Transport-Level Security 547 17.1 Web Security Considerations 548 17.2 Transport Layer Security 550 17.3 HTTPS 567 17.4 Secure Shell (SSH) 568 17.5 Key Terms, Review Questions, and Problems 580 Chapter 18 Wireless Network Security 582 18.1 Wireless Security 583 18.2 Mobile Device Security 586 18.3 IEEE 802.11 Wireless LAN Overview 590 18.4 IEEE 802.11i Wireless LAN Security 596 18.5 Key Terms, Review Questions, and Problems 611 Chapter 19 Electronic Mail Security 613 19.1 Internet Mail Architecture 614 19.2 Email Formats 618 19.3 Email Threats and Comprehensive Email Security 626 19.4 S/MIME 628 19.5 Pretty Good Privacy 639 19.6 DNSSEC 640 19.7 DNS-Based Authentication of Named Entities 644 19.8 Sender Policy Framework 646 19.9 DomainKeys Identified Mail 649 19.10 Domain-Based Message Authentication, Reporting, and Conformance 655 19.11 Key Terms, Review Questions, and Problems 660 Chapter 20 IP Security 662 20.1 IP Security Overview 663 20.2 IP Security Policy 669 20.3 Encapsulating Security Payload 674 20.4 Combining Security Associations 682 20.5 Internet Key Exchange 685 20.6 Cryptographic Suites 693 20.7 Key Terms, Review Questions, and Problems 695 APPENDICES 696 697 Appendix A Projects for Teaching Cryptography and Network Security 697 A.1 Sage Computer Algebra Projects 698 A.2 Hacking Project 699 A.3 Block Cipher Projects 700 A.4 Laboratory Exercises 700 A.5 Research Projects 700 A.6 Programming Projects 701 A.7 Practical Security Assessments 701 A.8 Firewall Projects 702 A.9 Case Studies 702 A.10 Writing Assignments 702 A.11 Reading/Report Assignments 703 A.12 Discussion Topics 703 Appendix B Sage Examples 704 B.1 Linear Algebra and Matrix Functionality 705 B.2 Chapter 2: Number Theory 706 B.3 Chapter 3: Classical Encryption 711 B.4 Chapter 4: Block Ciphers and the Data Encryption Standard 714 B.5 Chapter 5: Basic Concepts in Number Theory and Finite Fields 718 B.6 Chapter 6: Advanced Encryption Standard 725 B.7 Chapter 8: Pseudorandom Number Generation and Stream Ciphers 730 B.8 Chapter 9: Public-Key Cryptography and RSA 732 B.9 Chapter 10: Other Public-Key Cryptosystems 735 B.10 Chapter 11: Cryptographic Hash Functions 740 B.11 Chapter 13: Digital Signatures 742 References 745 Credits 754 Index 755 For courses in Cryptography, Computer Security, and Network Security The Principles and Practice of Cryptography and Network Security Stallings' Cryptography and Network Security, Seventh Edition, introduces students to the compelling and evolving field of cryptography and network security. In an age of viruses and hackers, electronic eavesdropping, and electronic fraud on a global scale, security is paramount. The purpose of this book is to provide a practical survey of both the principles and practice of cryptography and network security. In the first part of the book, the basic issues to be addressed by a network security capability are explored by providing a tutorial and survey of cryptography and network security technology. The latter part of the book deals with the practice of network security: practical applications that have been implemented and are in use to provide network security. The Seventh Edition streamlines subject matter with new and updated material - including Sage, one of the most important features of the book. Sage is an open-source, multiplatform, freeware package that implements a very powerful, flexible, and easily learned mathematics and computer algebra system. It provides hands-on experience with cryptographic algorithms and supporting homework assignments. With Sage, students learn a powerful tool that can be used for virtually any mathematical application. The book also provides an unparalleled degree of support for instructors and students to ensure a successful teaching and learning experience "The Seventh Edition streamlines subject matter with new and updated material -- including Sage, one of the most important features of the book. Sage is an open-source, multiplatform, freeware package that implements a very powerful, flexible, and easily learned mathematics and computer algebra system. It provides hands-on experience with cryptographic algorithms and supporting homework assignments. With Sage, students learn a powerful tool that can be used for virtually any mathematical application. The book also provides an unparalleled degree of support for instructors and students to ensure a successful teaching and learning experience."--From Publisher