MIS e-Security

1. e-security
Yıldırım TAM

2. WHAT WILL WE SEE IN THIS LECTURE

3. Structure of Network System
Threats and Type of Attacks
Cryptography
Analysis of e-security

5. OSI
(OPEN SYSTEMS INTERCONNECTION)
LAYERS

6. Physical
Media,Signal and Binary Transmission
Data Link
Mac and LLC (Phyiscal addressing)
Network
Path Determination and TCP/IP (Logical
addressing)
Transport
End to End Connections and Reliability
Session
Interhost Communication
Presentation
Data Representation
and Encryption
Application
Network Process to Application

8. TCP VS UDP

10. FINALLY PROCESS

11. FIREWALL

13. FIREWALL - HARDWARE

14. FIREWALL - SOFTWARE

15. TYPE OF ATTACKS

16. Passive Attack
Active Attack
Insider Attack
Close-in Attack
Phishing Attack
Buffer overflow
Exploit attack
Password attack

17. PASSIVE ATTACK

18. USER PCs
HACKER
UNWITTING
HOST
“ZOMBIE”
OTHER
NETWORK
COMPUTERS
VICTIM’S
SERVER
ACTIVE ATTACK (EXAMPLE: DOS ATTACK)

19. INSIDER ATTACK

20. CLOSE – IN – ATTACK (EXAMPLE :SOCIAL ENGINEERING ATTACK)

21. PHISHING ATTACK

22. BUFFER ATTACK

23. EXPLOID ATTACK

24. PASSWORD ATTACK (EXAMPLE:SQL INJECTION)

25. CRYPTOLOGY

26. WHAT IS THE CRYPTOLOGY?

27. Cryptography
Cryptanalysis

28. HISTORY OF CRYPTOLOGY

29. ENIGMA

30. BASIC ELEMENTS OF CRYPTOGRAPHY

31. WHAT PROVIDES CRYPTOGRAPHY?
Confidentiality
Message Integrity
Authentication
Non-repudiation

32. ALGORITHM OF CRYPTOLOGY

33. Known Symmetrical Algorithms
Data Encryption Standard (DES)
56 bit key
Triple DES, DESX, GDES, RDES
168 bit key
RC2, RC4, RC5
variable length up to 2048 bits
IDEA - basis of PGP
128 bit key
Blowfish
variable length up to 448 bits

34. CRYPTOGRAPHIC SERVICES ALLOW
Digital Signatures
Certificates (Digital Ids)
Secure Channels

35. DIGITAL SIGNATURES

36. SECURE SOCKETS LAYER

37. TYPES OF MALWARE
root@root:~# Exploit
root@root:~# WORM
root@root:~# Rootkit
root@root:~# Trojan
root@root:~# Adware
root@root:~# Spyware

38. EXPLOİT
exp@root:~# Vulnerability
exp@root :~# System
exp@root :~# Unauthorized
exp@root :~# Spread Out Spam
exp@root :~# Java,Html,Js

39. EXPLOİT

40. WORM
wrm@root:~# Auto Clone
wrm@root :~# Spread
wrm@root :~# Not need attach
wrm@root :~# Consume
wrm@root :~# Any action user
wrm@root :~# Backdoor P2P

41. WORM

42. WORM
#STORM
wrm@root :~# 2007
wrm@root :~# attach mail
wrm@root :~# wincom32.exe
wrm@root :~# services.exe
wrm@root :~# P2P
#CONFİCKER
wrm@root :~# 2008
wrm@root :~# Windows
wrm@root :~# Buffer
wrm@root :~# 9 billion
wrm@root :~# Services
#CODERED
wrm@root :~# Servers
wrm@root :~# 2001
wrm@root :~# IIS
wrm@root :~# 359,000
wrm@root :~# Whitehouse

43. ROOTKİT
root@root:~# System -Hide
root@root:~# Response
root@root:~# Not -alone
root@root:~# Remote
root@root:~# Crack -Keygen
root@root:~# Use you -Pri

44. ROOTKİT
#SONY CD
root@root:~# 2005
root@root:~# copy -protect
root@root:~# Access
root@root:~# ‘$sys$’
root@root:~# Lawsuit
#Greek Wiretapping
root@root:~# 2004
root@root:~# Govern tapping
root@root:~# Ericsson
root@root:~# Tel Central
root@root:~# deActive log

45. SPAM
wrm@root:~# junk email
wrm@root :~# Phishing
wrm@root :~# script or.exe
wrm@root :~# Botnets
wrm@root :~# Collect
wrm@root :~# Pharmacy %81

46. TROJAN
trj@root:~# Backdoor-exploit-rk
trj@root :~# left data
trj@root :~# Unauthorized
trj@root :~# carries out

47. ADWARE
adw@root :~# Freeware
adw@root :~# keylogger
adw@root :~# Pop -up
adw@root :~# Tracks
adw@root :~# Related
adw@root :~# Consume

48. SPYWARE
spy@root :~# system monitors,
trojans, adware, and tracking
cookies
spy@root :~# not knowledge
spy@root :~# not spread-itself
spy@root :~# ie ,Windows
spy@root :~# usage -commercial
spy@root :~# identity theft

49. SPYWARE
spy@root :~# -CoolWebSearch
spy@root :~# -huntbar
spy@root :~# -movieland
spy@root :~# -kazaa

51. THREAT INTELLIGENCE
SECURITY CAPABILITIES
GEOPOLITICAL AND
INDUSTRY
USER AND CORPORATE