key technical process

key management processes

NIST SP 800-14

NIST SP 800-27

Security development life cycle framework

ISO/IEC 21827:2008

Common architecture (Enterprise architecture, IT architecture, security architecture)

Security Architecture Development Methods

Common system components

Information system security capabilities

security model

Three service models

Four deployment modes

five basic characteristics

Cloud security Pay attention to data isolation

System weaknesses

TEMPEST

status attack (race condition)

covert passage

middleware

Mainframe and thin client systems

Server weaknesses

single point of failure

Client Weaknesses

Software and system vulnerabilities and threats

Mobile system weaknesses

Embedded and cyber-physical device vulnerabilities

CC

ISO27001 (ISMS-Information Security Management System)

COBIT

PCI-DSS

Cryptography (cryptography; cryptography)

Cryptanalysis(Cryptoanalysis/Cryptodecryption)

atbash

password stick

Caesar cipher

Quantum cryptography

substitute

Transposition (Permutation)

other

block encryption

stream encryption

Symmetric cryptography

Asymmetric cryptography

hybrid encryption

Simple hash function

MD5

SHA-1

sha-2/sha-3

Attacks on hashing algorithms

Hash verification integrity

HMAC

CBC-MAC

CMAC

Four ways to compare

digital signature

1. Store and manage BIOS power-on password and hard disk password

2. TPM security chip can perform a wide range of encryption

3. Encrypt any partition of the hard disk

Confidentiality

Authenticity (Certificate)

Integrity (hash value)

Non-repudiation (asymmetric encryption)

Authorization (providing an individual with a key to access a resource - a session key)

Encrypt all information, including user information, packet headers, trailers, addresses and routing information

Only user information is encrypted, packet headers, trailers, addresses and routing information are not encrypted.

Two protocols

Two working modes

Security Association (SA)

digital water mark

strong

weak

lack of resistance

The difference from goal strengthening

natural access control

natural surveillance

Reinforcement of natural areas

place

put up

other

electricity

environment

Facility access control

Personnel access control

External border access protection mechanism (non-entry protection)

intrusion detection system