深入探索网络安全性与工具体验

需积分: 48 9 浏览量更新于2024-07-26 收藏 7.98MB PDF 举报

"网络安全, 数据通信与计算机网络, TCP/IP协议套件, 网络安全的详细处理" 本文将探讨的是"网络安全"这一主题，它在IT领域中扮演着至关重要的角色。网络安全涉及到保护数据和信息免受未经授权的访问、修改或破坏，以及防止网络服务被滥用。在当今数字化社会，理解和掌握网络安全的原理对于任何IT专业人员来说都是必不可少的。数据通信和计算机网络是网络安全的基础。"DATAANDCOMPUTERCOMMUNICATIONS,EIGHTHEDITION"这本书深入浅出地介绍了这一领域，涵盖了传输技术、媒体类型、信号编码、链路控制、多路复用等内容。这些基础知识帮助我们理解数据在网络中的流动方式，从而更好地设计和实施安全策略。例如，了解信号编码和链路控制有助于识别潜在的传输层安全问题，而对媒体和多路复用的理解则有助于优化网络流量，减少被攻击的可能性。通信网络部分，包括电路交换和分组交换网络、帧中继、ATM（异步传输模式）以及局域网（LANs），这些都是构建和维护网络基础设施的关键。每种网络类型都有其特定的安全挑战，如LANs中的广播风暴可能被利用进行DoS（拒绝服务）攻击，而ATM和帧中继可能因不安全的配置而导致敏感信息泄露。 TCP/IP协议套件是互联网的核心，包括IPv6、TCP、MIME和HTTP等协议。了解这些协议的工作原理对于识别和防止网络攻击至关重要。例如，TCP的三次握手过程可以防止SYN洪泛攻击，而HTTP的安全性可以通过HTTPS（HTTP over SSL/TLS）来增强，MIME则在电子邮件安全中起着关键作用，防止了恶意附件的传播。 "COMPUTERORGANIZATIONANDARCHITECTURE,EIGHTHEDITION"和"OPERATINGSYSTEMS,SIXTHEDITION"这两本书则涉及了硬件层面和操作系统层面的安全问题。计算机组织和架构中，CPU、控制单元、微编程、指令集、I/O和内存等基础元素的安全性是确保整个系统安全的基础。先进的主题如RISC（精简指令集计算机）、超标量和并行组织则可能引入新的安全挑战，比如侧信道攻击和硬件级别的漏洞。操作系统作为软件和硬件之间的桥梁，其安全性直接影响到整个系统的稳定性。操作系统原理的最新发展，如虚拟化技术、进程管理、内存管理和权限控制，都是防止恶意软件和黑客入侵的关键。通过理解和实施操作系统级别的安全措施，可以有效地防御诸如权限提升、缓冲区溢出等常见攻击。网络安全不仅涉及到各种工具和技术的使用，更深层次的理解和掌握其背后的原理是保障网络安全的基石。无论是数据通信的细节、网络协议的运作，还是计算机硬件和操作系统的结构，都需要我们去深入探究，以构建更加坚固的网络安全防线。

NOTATION

Symbol Expression Meaning

D, K D1K, Y2

Symmetric decryption of ciphertext using secret key KY

D, PR

D1PR

, Y2 Asymmetric decryption of ciphertext using A’s private key PR

D, PU

D1PU

, Y2 Asymmetric decryption of ciphertext using A’s public key PU

E, K E1K, X2

Symmetric encryption of plaintext using secret key KX

E, PR

E( , )XPR

Asymmetric encryption of plaintext using A’s private key PR

E, PU

E( , )XPU

Asymmetric encryption of plaintext using A’s public key PU

Secret key

Private key of user A

Public key of user A

MAC,

MAC(K, X)

Message authentication code of message using secret key

GF(p)

The finite field of order , where is prime. The field is defined as

the set together with the arithmetic operations modulo .pZ

GF(2

)

The finite field of order 2

Set of nonnegative integers less than n

gcd

gcd( )i, j

Greatest common divisor; the largest positive integer that divides

both and with no remainder on division.ji

mod mod ma Remainder after division of by ma

mod, K

(mod )ma K b mod mod mm = ba

mod, [

(mod )ma [ b mod mod mm Z ba

dlog

a, p

(b) Discrete logarithm of the number for the base (mod )pab

f(n)

The number of positive integers less than and relatively prime to .

This is Euler’s totient function.

i = 1

+ a

i = 1

* a

Even the natives have difficulty mastering this peculiar vocabulary.

—The Golden Bough, Sir James George Frazer

xiii

PREFACE

“The tie, if I might suggest it, sir, a shade more tightly knotted. One aims at the

perfect butterfly effect. If you will permit me —”

“What does it matter, Jeeves, at a time like this? Do you realize that

Mr. Little’s domestic happiness is hanging in the scale?”

“There is no time, sir, at which ties do not matter.”

—Very Good, Jeeves! P. G.Wodehouse

In this age of universal electronic connectivity, of viruses and hackers, of electronic eaves-

dropping and electronic fraud, there is indeed no time at which security does not matter.Two

trends have come together to make the topic of this book of vital interest. First, the explosive

growth in computer systems and their interconnections via networks has increased the

dependence of both organizations and individuals on the information stored and communi-

cated using these systems. This, in turn, has led to a heightened awareness of the need to

protect data and resources from disclosure, to guarantee the authenticity of data and

messages, and to protect systems from network-based attacks. Second, the disciplines of

cryptography and network security have matured, leading to the development of practical,

readily available applications to enforce network security.

OBJECTIVES

It is the purpose of this book to provide a practical survey of both the principles and practice

of cryptography and network security. In the first part of the book, the basic issues to be

addressed by a network security capability are explored by providing a tutorial and survey of

cryptography and network security technology. The latter part of the book deals with the

practice of network security: practical applications that have been implemented and are in

use to provide network security.

The subject, and therefore this book, draws on a variety of disciplines. In particular, it is

impossible to appreciate the significance of some of the techniques discussed in this book

without a basic understanding of number theory and some results from probability theory.

Nevertheless, an attempt has been made to make the book self-contained.The book presents

not only the basic mathematical results that are needed but provides the reader with an

intuitive understanding of those results. Such background material is introduced as needed.

This approach helps to motivate the material that is introduced, and the author considers

this preferable to simply presenting all of the mathematical material in a lump at the begin-

ning of the book.

INTENDED AUDIENCE

The book is intended for both academic and a professional audiences. As a textbook, it is

intended as a one-semester undergraduate course in cryptography and network security for

computer science, computer engineering, and electrical engineering majors. It covers the

xvi PREFACE

material in IAS2 Security Mechanisms, a core area in the Information Technology body of

knowledge; NET4 Security, another core area in the Information Technology body of knowl-

edge; and IT311, Cryptography, an advanced course; these subject areas are part of the

ACM/IEEE Computer Society Computing Curricula 2005.

The book also serves as a basic reference volume and is suitable for self-study.

PLAN OF THE BOOK

The book is divided into seven parts (see Chapter 0 for an overview):

• Symmetric Ciphers

• Asymmetric Ciphers

• Cryptographic Data Integrity Algorithms

• Mutual Trust

• Network and Internet Security

• System Security

• Legal and Ethical Issues

The book includes a number of pedagogic features, including the use of the computer

algebra system Sage and numerous figures and tables to clarify the discussions. Each chapter

includes a list of key words, review questions, homework problems, suggestions for further

reading, and recommended Web sites. The book also includes an extensive glossary, a list

of frequently used acronyms, and a bibliography. In addition, a test bank is available to

instructors.

ONLINE DOCUMENTS FOR STUDENTS

For this new edition, a tremendous amount of original supporting material has been made

available online, in the following categories.

• Online chapters: To limit the size and cost of the book, four chapters of the book

are provided in PDF format. This includes three chapters on computer security and

one on legal and ethical issues. The chapters are listed in this book’s table of

contents.

• Online appendices: There are numerous interesting topics that support material

found in the text but whose inclusion is not warranted in the printed text. A total of

fifteen online appendices cover these topics for the interested student. The appen-

dices are listed in this book’s table of contents.

• Homework problems and solutions: To aid the student in understanding the material,

a separate set of homework problems with solutions are available. These enable the

students to test their understanding of the text.

• Key papers: Twenty-four papers from the professional literature, many hard to find,

are provided for further reading.

• Supporting documents: A variety of other useful documents are referenced in the text

and provided online.

• Sage code: The Sage code from the examples in Appendix B in case the student wants

to play around with the examples.

PREFACE xvii

Purchasing this textbook now grants the reader six months of access to this online

material. See the access card bound into the front of this book for details.

INSTRUCTIONAL SUPPORT MATERIALS

To support instructors, the following materials are provided:

• Solutions Manual: Solutions to end-of-chapter Review Questions and Problems.

• Projects Manual: Suggested project assignments for all of the project categories listed

below.

• PowerPoint Slides: A set of slides covering all chapters, suitable for use in lecturing.

• PDF Files: Reproductions of all figures and tables from the book.

• Test Bank: A chapter-by-chapter set of questions.

All of these support materials are available at the Instructor Resource Center

(IRC) for this textbook, which can be reached via personhighered.com/stallings or by

clicking on the button labeled “Book Info and More Instructor Resources” at this book’s

Web Site WilliamStallings.com/Crypto/Crypto5e.html. To gain access to the IRC,

please contact your local Prentice Hall sales representative via pearsonhighered.com/

educator/replocator/requestSalesRep.page or call Prentice Hall Faculty Services at

1-800-526-0485.

INTERNET SERVICES FOR INSTRUCTORS AND STUDENTS

There is a Web site for this book that provides support for students and instructors. The site

includes links to other relevant sites, transparency masters of figures and tables in the book

in PDF (Adobe Acrobat) format, and PowerPoint slides. The Web page is at

WilliamStallings.com/Crypto/Crypto5e.html. For more information, see Chapter 0.

New to this edition is a set of homework problems with solutions available at this Web

site. Students can enhance their understanding of the material by working out the solutions

to these problems and then checking their answers.

An Internet mailing list has been set up so that instructors using this book can

exchange information, suggestions, and questions with each other and with the author. As

soon as typos or other errors are discovered, an errata list for this book will be available at

WilliamStallings.com. In addition, the Computer Science Student Resource site at

WilliamStallings.com/StudentSupport.html provides documents, information, and useful

links for computer science students and professionals.

PROJECTS AND OTHER STUDENT EXERCISES

For many instructors, an important component of a cryptography or security course is a pro-

ject or set of projects by which the student gets hands-on experience to reinforce concepts

from the text. This book provides an unparalleled degree of support, including a projects

component in the course. The IRC not only includes guidance on how to assign and structure

剩余899页未读，继续阅读

g12312323

粉丝: 0
资源: 1

深入探索网络安全性与工具体验

Network Security：Private Communication in a Public World

Cryptography and Network Security Principles and Practice, Edition(6th) 无水印原版pdf

The Tao of Network Security Monitoring Beyond Intrusion Detection

NetworkSecurityConfig: No Network Security Config specified, using platform default

Attribute networkSecurityConfig is only used in API level 24 and higher (current min is 21)

我用beeware打包的安卓应用报了如下错误： NetworkSecurityConfig: No Network Security Config specified, using platform default，Access denied finding property "ro.vendor.df.effect.conflict"

如何解决java.net.UnknownServiceException: CLEARTEXT communication to testfile.iot.evideocloud.com.cn not permitted by network security policy

CLEARTEXT communication to visit.fengshuoxinxi.cn not permitted by network security policy是什么原因

1) 给出置换Π的逆置换. (2) 应用置换对明文消息a model for network security进

android:networksecurityconfig

最新资源