Scribd
Upload
20 views

01 TERM-1 Notes

This document contains notes from a networking security course covering CIA triad, OSI security architecture, types of passive and active attacks, key distribution scenarios using symmetric encryption and a KDC, man-in-the-middle attacks, public key distribution methods, steps for mutual authentication using symmetric encryption, Kerberos version 4 authentication, and generic identity management architecture. The notes are broken into three chapters that cover these topics at a high level through definitions, explanations, lists, and brief scenarios.

Uploaded by

prajwol neupane
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
20 views

01 TERM-1 Notes

This document contains notes from a networking security course covering CIA triad, OSI security architecture, types of passive and active attacks, key distribution scenarios using symmetric encryption and a KDC, man-in-the-middle attacks, public key distribution methods, steps for mutual authentication using symmetric encryption, Kerberos version 4 authentication, and generic identity management architecture. The notes are broken into three chapters that cover these topics at a high level through definitions, explanations, lists, and brief scenarios.

Uploaded by

prajwol neupane
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 14

BSCIT

Network Security
Term 1

Term 1 1
Chapter 1
a) What is CIA triad ? Explain. (3)
b) What is OSI security architecture ? Explain (3)
c) List and explain 2 types of passive aCacks and acEve aCacks in
brief. (4)

Term 1 2
1 a) What is CIA triad ? Explain. (3)
It is a model designed to guide policies for informa3on security within an organiza3on.

Term 1 3
1 b) What is OSI security architecture ? Explain (3)
It defines a systema,c approach of providing security by defining
the following :
1. Security A?acks (2)
2. Security Services (5)
3. Security Mechanisms (8)

Term 1 4
1 c) List and explain 2 types of passive a5acks and ac7ve a5acks in brief. (4)

1. Passive A+acks
• Release of message Contents || Traffic Analysis

2. Ac>ve A+acks
• Masquerade || Replay || DOS || Modifica>on of messages

Term 1 5
Chapter 2
a) Explain a simple key distribu4on scenario where a symmetric key
is distributed using symmetric encryp4on under the presence of a
KDC. (4)
b) What is MITM aEack ? Explain a possible MITM aEack scenario.
(4)
c) List 4 different ways of distribu4on of public keys. (2)

Term 1 6
2 a) Explain a simple key distribu5on scenario where a symmetric key is distributed using symmetric
encryp5on under the presence of a KDC. (4)

Term 1 7
2 b) What is MITM a.ack ? Explain a possible MITM a.ack scenario.(4)

Term 1 8
2 c) List 4 different ways of distribu6on of public keys. (2)

• Public announcement
• Publicly available directory
• Public-key authority
• Public-key cer6ficates

Term 1 9
Chapter 3
a) List the steps involved in mutual authen2ca2on of a remote user
using symmetric encryp2on. (2)
b) Diagramma2cally explain how a user is authen2cated using a
kerberos version 4. (4)
c) Explain the generic iden2ty management architecture. (4)

Term 1 10
3 a) List the steps involved in mutual authen3ca3on of a remote user using symmetric encryp3on. (2)

[KEHN92]

Term 1 11
Term 1 12
3 b) Diagramma+cally explain how a user is authen+cated using a kerberos version 4. (4)

Term 1 13
3 c) Explain the generic iden2ty management architecture. (4)

Term 1 14

You might also like