part2 信息技术基础2011.ppt

Radio frequency bands are easy to scan The service set identifiers (SSID) identifying the access points broadcast multiple times SYSTEM VULNERABILITY AND ABUSE Wireless Security Challenges: 4 安全和控制 SYSTEM VULNERABILITY AND ABUSE Wi-Fi Security Challenges Figure 10-2 4 安全和控制 Computer viruses, worms, trojan horses Spyware Spoofing and Sniffers Denial of Service (DoS) Attacks Identity theft Cyberterrorism and Cyberwarfare Vulnerabilities from internal threats (employees); software flaws SYSTEM VULNERABILITY AND ABUSE Malicious Software: Viruses, Worms, Trojan Horses, and Spyware Hackers and Cybervandalism 4 安全和控制 SYSTEM VULNERABILITY AND ABUSE Worldwide Damage from Digital Attacks Figure 10-3 4 安全和控制 Inadequate security and control may create serious legal liability. Businesses must protect not only their own information assets but also those of customers, employees, and business partners. Failure to do so can lead to costly litigation for data exposure or theft. A sound security and control framework that protects business information assets can thus produce a high return on investment. BUSINESS VALUE OF SECURITY AND CONTROL 4 安全和控制 Security Incidents Continue to Rise BUSINESS VALUE OF SECURITY AND CONTROL Figure 10-4 Source: CERT Coordination Center, , accessed July 6, 2004. 4 安全和控制 TECHNOLOGIES AND TOOLS FOR SECURITY AND CONTROL A Corporate Firewall Figure 10-7 4 安全和控制 Public key encryption: Uses two different keys, one private and one public. The keys are mathematically related so that data encrypted with one key can be decrypted using only the other key Message integrity: The ability to be certain that the message being sent arrives at the proper destination without being copied or changed TECHNOLOGIES AND TOOLS FOR SECURITY AND CONTROL Encryption and Public Key Infrastructure 4 安全和控制 Digital signature: A digital code attached to an electronically transmitted message that is used to verify the origin and contents of a message Digital