网络安全技术英文习题集_网络安全技术 .pdf

网络安全技术英文习题集_网络安全技术

《网络安全技术》英文习题集Chapter1Introduction

ANSWERSNSWERSTOQUESTIONS

1.1WhatistheOSIsecurityarchitecture?

TheOSISecurityArchitectureisaframeworkthatprovidesa

systematicwayofdefiningtherequirementsforsecurityand

characterizingtheapproachestosatisfyingthoserequirements.

Thedocumentdefinessecurityattacks,mechanisms,andservices,

andtherelationshipsamongthesecategories.

1.2Whatisthedifferencebetweenpassiveandactive

securitythreats?

Passiveattackshavetodowitheavesdroppingon,or

monitoring,transmissions.Electronicmail,filetransfers,and

client/serverexchangesareexamplesoftransmissionsthatcan

bemonitored.Activeattacksincludethemodificationof

transmitteddataandattemptstogainunauthorizedaccessto

computersystems.

1.3Listsandbrieflydefinecategoriesofpassiveandactive

securityattacks?Passiveattacks:releaseofmessagecontents

andtrafficanalysis.Activeattacks:masquerade,replay,

modificationofmessages,anddenialofservice.

1.4Listsandbrieflydefinecategoriesofsecurityservice?

Authentication:Theassurancethatthecommunicating

entityistheonethatitclaimstobe.

Accesscontrol:Thepreventionofunauthorizeduseofa

resource(i.e.,thisservicecontrolswhocanhaveaccesstoa

resource,underwhatconditionsaccesscanoccur,andwhat

thoseaccessingtheresourceareallowedtodo).

Dataconfidentiality:Theprotectionofdatafrom

unauthorizeddisclosure.

Dataintegrity:Theassurancethatdatareceivedareexactly

assentbyanauthorizedentity(i.e.,containnomodification,

insertion,deletion,orreplay).Nonrepudiation:Provides

protectionagainstdenialbyoneoftheentitiesinvolvedina

communicationofhavingparticipated