terms
SHA-1
(was vulnerable to attacks) Produces a 160-bit hash value and is used in DSS
SAML (Security Assertion Markup Language)
* assertion & authorization (communicates between authentication and service) An XML-based data format used to exchange authentication information between a client and a service. 1. auth statement 2. attribute statement 3. authorization decision statement== subject S allowed to use R based on E (compatible w XACML)
Good Hash Function qualities:
1. Must be deterministic: -> Key must ALWAYS generate the same Hash Index (excluding rehashing). 2. Must achieve uniformity -> Keys should be distributed evenly across hash table. 3. FAST/EASY to compute -> only use parts of the key that DISTINGUISH THE ITEMS FROM EACH OTHER 4. Minimize collisions:
TLS Handshake
1. cryptographic negotiation (be ware of version rollback attack) 2. server shows certificate, check w CA 3. key negotiation--> client sends a nonce, hashes it to get a shared symmetric key
Product Life Cycle (PLC)
1. requirements & design- data requirements and risks 2. Engineering- is dev compliant w design?? 3. Maintenance- data subject requests 4. product phase out- data disposald
Advanced Encryption Standard (AES)
A block cipher created in the late 1990s that uses a 128-bit block size and a 128-, 192-, or 256-bit key size. Practically uncrackable.REPLACE DES
DevSecOps (Development, Security and Operations)
A combination of software development, security operations, and systems operations by integrating each discipline with the others
man-in-the-middle attack
A form of eavesdropping where the attacker makes an independent connection between two victims and steals information to use fraudulently.
Privacy Policy
A legal document that an app or website must provide and that describes what user information they collect and how they use it (INTERNAL, strict w employees)
Certificate Revocation List (CRL)
A list of certificate serial numbers that have been revoked not expired
dictionary attack
A password attack that creates encrypted versions of common dictionary words and compares them against those in a stolen password file.
Cipher Block Chaining (CBC)
A process in which each block of unencrypted text is XORed with the block of cipher text immediately preceding it before it is encrypted using the DES algorithm.
SSO (Single Sign-On)
A session/user authentication process that permits a user to enter one name and password in order to access multiple applications.
IPSec (Internet Protocol Security)
A set of open, non-proprietary standards that you can use to secure data as it travels across the network or the Internet through data authentication and encryption.
Message Authentication Code (MAC)
A small block of data that is generated using a secret key and then appended to the message.
Message Digest
A small representation of a larger message using HASH. Message digests are used to ensure the authentication and integrity of information, not the confidentiality. (without having to encrypt entire thing)
XACML (Extensible Access Control Markup Language)
A standard that defines a declarative fine-grained, attribute-based access control policy language; an architecture; and a processing model describing how to evaluate access requests according to the rules defined in policies. access for enterprise resource language (xml)
Data Leak Prevention (DLP)
A suite of technologies aimed at stemming the loss of sensitive information that occurs in the enterprise. ALERTS EMPLOYEES!!!
threat modeling
A way of prioritizing threats to an application.
Privacy Notice
A written explanation of how the company handles and shares your personal financial information.
VPN
Allows a secure private connection over a public network, using an encrypted 'tunnel'. For example, a remote computer can securely connect to a LAN, as though it were physically connected.
Data Link Layer
An OSI layer responsible for error-free transfer of data packets between nodes on the network.
pseudorandom number generator (PRNG)
An algorithm for creating a sequence of numbers whose properties approximate those of a random number.
Replay Attack
An attack where the data is captured and replayed. Attackers typically modify data before replaying it A type of network attack where an attacker captures network traffic and stores it for retransmission at a later time to gain unauthorized access to a network.
stream cipher
An encryption method that encrypts data as a stream of bits or bytes. Compare with block cipher.
Block Cipher
An encryption method that encrypts data in fixed-sized blocks. Compare with stream cipher.
certificate path
An enumeration of the chain of trust from one certificate to another tracing back to a trusted root. (trusted anchor ---> target user). back or forward traverses multiple CAs should be validated
Data Processor
An individual or organization, often a third-party outsourcing service, that processes data on behalf of the data controller.
OpenID
An open standard and decentralized protocol that is used to authenticate users in a federated identity management system
computer Trojan Horse
Any malicious computer program which misleads users of its true intent. The term is derived from the Ancient Greek story of the deceptive wooden horse that led to the fall of the city of Troy. (SEEMS LIKE LEGIT)
CCPA (California Consumer Privacy Act)
Articles outlined are largely inspired by GDPR, and also outline the legal action a consumer can take in the case of a breach of their private data. allows residents to know all their personal info being collected be able to access that info know if it is disclosed and to whom know if it is sold (right to say no), disclosure receive equal prices whether exercising privacy rights or not applies on all sectors takes effect 1/1/20 NOW CALLED CPRA
offline attack
Attacker is using password-cracking tools against a stolen password file; database stolen, bad guys have access to to passwords --> you should hash your passwords!
RBAC (decentralized trust)
Bank has to be able to specify who can issue these credentials (trust relationship/delegation) - e.g. HumanResources
Public Key Certificate
Consists of a public key plus a user ID of the key owner, CA, with the whole block signed by CA
PKI complexities (user requests service)
Decentralized Trust Mgmt: Complexity of PKI Steps involved in processing a request to access an application by a certificate holder, when using PKI: 1. Obtain requester certificate, verify signatures on certif and applic request, determine public key of original signer 2. Check that certificates are unrevoked 3. Look for trust path 4. Extract names from certificates 5. Lookup names in DB to check if allowed to perform requested action 6. Determine whether action is legal based on names and chain of policies 7. Execute requested action - if everything is OK Observation: Steps 5 and 6 are application-specific: PKI does not explicitly help with this * lack of interoperability
3D's
Detection (alerts, logs), Deterrence (policies, cameras, access control), Defense(firewalls, asset protect, backup) --> what's missing?
Elliptic Curve Cryptography (ECC)
ECC is considered more secure than RSA, because RSA is based on factoring large numbers, a problem that computers have solved. In contrast, elliptic curve cryptography is based on the discrete logarithm problem, which is much harder to solve. It's been proven that even with today's technology, it would take longer than the universe's age to reverse engineer a key that's been generated using ECC. Elliptic Curve Discrete Logarithm Problem (ECDLP), which states that it is hard to solve for x if we know y = g^x mod p where g is some known integer and p is prime.
Privacy engineering
Encompasses how privacy values and principles are applied in technology systems and programs while recognizing and maintaining security levels to mitigate risk. It brings the complementary perspectives and practices of software engineers and privacy professionals together. works with PM, requires the softwskilss
Decentralized Trust Management
FLEXIBLE (app independent) Use local trust management engines that can evaluate requests based on: Certificates and description of local policy both expressed in the same language Deferring/Delegating trust to third parties 1. Obtain certificates, verify signatures on certif andapplic request, determine public key of original signer 2. Check that certificates are unrevoked 3. Submit request, certificates and description of local policy to local "trust management engine"4. Proceed if approved
Data minimization
In data protection, the principle that only necessary and sufficient personal information can be collected and processed for the stated purpose. 1. featurization 2. sanitzation 3. pseudonympization 4. anonymizaiton 5. aggreagation 6. add noise
PII (Personally Identifiable Information)
Information about an individual that can be used to uniquely identify them (directly or indirectly), locate, or contact
Rainbow tables
Large pregenerated data sets of encrypted passwords used in password attacks.
web-of-trust model
Makes every one an authority. alternative to PKI.
ADFS (active directory federation services)
Manages authentication through a proxy service hosted between ad and the target application using a federated trust to provide an SSO solution. Local token to get access to all modules
RSA Encryption
Named after inventors Rivest, Shamir, and Adelman, RSA is a system for encrypting and decrypting a message using a pair of keys, both of which contain the product of two prime numbers. From Alice to Bob: 1. Looks up Bob's public key 2. Convert the message into an integer: m 3. Compute the ciphertext c as: c = m^e (mod n) 4. Send c to Bob
Data Encryption Standard (DES)
One of the first widely popular symmetric cryptography algorithms. No longer considered secure. A symmetric block cipher that uses a 56-bit key and encrypts data in 64-bit blocks.
Privacy by Design
Privacy by Design is a framework that emphasizes integrating privacy into technology and practices from the start. It comprises seven principles: Proactive, Not Reactive: Prevent privacy issues before they occur. Privacy as the Default Setting: Make privacy the automatic choice, requiring no action from individuals. Privacy Embedded into Design: Incorporate privacy as a core feature in product development. Full Functionality - Positive-Sum: Balance all interests without unnecessary trade-offs. End-to-End Security: Ensure strong security throughout the data lifecycle. Visibility and Transparency: Maintain transparency and verification of practices. User-Centric: Prioritize user interests with strong defaults and user-friendly options.
Key Replacement
Process of issuing new keys to valid users; if key expires; might be needed later so better to ARCHIVE
computer Worms
Programs that attack computer networks (or the Internet) by self-replicating and sending themselves to other users, generally via email without the aid of the operator.
Information Security
Protecting an organization's information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.
GDPR (General Data Protection Regulation)
Provisions and requirements protecting the personal data of European Union (EU) citizens. Transfers of personal data outside the EU Single Market are restricted unless protected by like-for-like regulations, such as the US's Privacy Shield requirements. -always requires consent -not sectoral - SINGLE MARKET= any of 27 countries it works, helps do business - privacy by design= protect first, consent, informed
sim based authentication
SIM Card: Each mobile device is associated with a SIM card, which contains a unique International Mobile Subscriber Identity (IMSI) and a secret key (Ki). The SIM card stores this information securely. Authentication Request: When a mobile device attempts to connect to a mobile network, it sends an authentication request to the network. Challenge-Response: The network responds with a random challenge, often called RAND, and the mobile device uses its secret key (Ki) to compute a response (SRES). Authentication: The mobile device sends the computed SRES back to the network. Network Verification: The network, which also has access to the secret key (Ki) associated with the SIM card, computes its own SRES using the RAND and Ki. It compares its calculated SRES with the SRES received from the mobile device. Authentication Success or Failure: If the SRES values match, the network considers the mobile device authenticated and allows it to connect to the network. If there is a mismatch, the authentication fails, and network access is denied.
STRIDE Model
STRIDE is a threat model while DREAD is a risk assessment model. STRIDE stands for Spoofing, Tampering, Repudiation, Information Disclosure, Denial of service, Elevation of privilege.
3DES (Triple DES)
Symmetric Key Algorithm, Applies DES three times, 168-bit key (+24 for parity)
Public Key Infrastructure (PKI)
System ,tools, policy for creating public and private keys using a certificate authority (CA) and digital certificates for authentication.
Network Layer
The OSI layer that addresses data packets, routes the packets from a source to a destination through the network, and ensures the delivery of those packets.
Key Management
The generation, storage, distribution, deletion, archiving, and application of keys in accordance with a security policy.
Data Controller
The person in charge of the data in an organisation.
certificate management
The practice of issuing, updating, and revoking digital certificates.
Cryptoanalysis
The process of obtaining the plaintext message from a ciphertext message without knowing the keys used to perform the encryption. CAN LOOK AT A LOT OF CIPHERTEXT AND ANALYZE
De-identification
The process of removing identifying information from data sets in order to assure the anonymity of individuals. (identifiable ---> complete anonymous)
Needham-Schroeder Protocol
The protocol is a shared-key authentication protocol designed to generate and propagate a session key, i.e., a shared key for subsequent symmetrically encrypted communication. The protocol also uses nonces. If a nonce is generated and sent by A in one step and returned by B in a later step, A knows that B's message is fresh and not a replay from an earlier exchange. know steps! how is it susceptible to MiM how can it be fixed
Dark Patterns
Website design features intended to trick users into consenting things they might not want to do, but which benefit the business in question
differential privacy
a method of protecting data that adds enough statistical noise to a published table or statistic so that no individual can be recognized in the data, thus protecting the privacy of every respondent
Electronic Codebook (ECB) mode
a mode of operation that divides plaintext into blocks and then encrypt each block using the same key. SIMPLISTIC!!!!
Salt passwords
a random piece of data is added to the password before it runs through the hashing algorithm, making it unique and harder to crack. When using both hashing and salting, even if two users choose the same password, salting adds random characters to each password when the users enter them. diff salts per user
Diffie-Hellman key exchange
a security algorithm with only one private key that is used by both client and server i.e the key is shared by both client and user. Diffie- Hellman uses exponential methods for the generation of keys. x, y chosen private a^xmodp, a^ymodp NOW we get: a^xymodp as secret
computer Virus
a software program capable of reproducing itself and usually capable of causing great harm to files or other programs on the same computer (user)
PGP (Pretty Good Privacy)
an encryption program that provides cryptographic privacy and authentication for data communication. PGP is used for signing, encrypting, and decrypting texts, e-mails, files, directories, and whole disk partitions and to increase the security of e-mail communications
OAuth
an open-standard authorization protocol or framework that provides applications the ability for "secure designated access." For example, you can tell Facebook that it's OK for ESPN.com to access your profile or post updates to your timeline without having to give ESPN your Facebook password. Users hand out tokens for their data on their services (constraints are imposed)- can have some potential abuse with data mining
good crypto system
cannot get plaintext from ciphertext without decryption key
8 FIPP for GDPR
collection limitation, data quality, purpose specification, use limitation, security safeguard, oppenness, individual participation (challenge it), accountability
Security Layers
data link, network, transport, application
Anonymous information
demographic and behavioral information that does not include any personal identifiers
Digital signature requirement
different messages have different signatures
protect against replays
hash your passwords, generate OTP with a Nonce, use timestamp, OTP use it n times, digital signature (WITH time stamp/nonce)
augmented password login
identify picture after u get your id to validate that u are on the right sight, but not usable because ppl forget what if cookies get intercepted
Data Flow Diagram (DFD)
illustrates the movement of information between external entities and the processes and data stores within the system (entity, data store, data flow, process)
Perfect Cryptosystem
knowing protocol but cannot break system
LINDDUN
linkability, identifiability, non-repudiation, detectability (detect that u are part of some other system), disclosure of information (adversary), unawareness, non-compliance (not following lawS) USES DATA FLOW DIAGRAMS (DFD) , THEN CREATE LINDDUN TABLE FOR EACH COMPONENT IN DFD, then CREATE LINDDUN TREE non-repudiation--> subject not able to deny a claim ab a request (BUT THEY SHOULD BE ABLE TO !!)-- opposite than security
Ransomware
malware that threatens to publish the victim's personal data or permanently block access to it unless a ransom is paid // malware designed to deny a user or organization access to files on their computer. By encrypting these files and demanding a ransom payment for the decryption key, cyberattackers place organizations in a position where paying the ransom is the easiest and cheapest way to regain access to their files.
Crypto Hash Function
map large messages to smaller # bits
Types of threats
masquerade, system penetration, ransomware, planting (trojan horse, virus, worms)
Fair Information Practice Principles (FIPP)
notice/awareness, choice/consent, access/participation, security, enforcement/redress
Limits of notice and consent
ppl dont read it, understand it, underspecified, dark patterns
zero knowledge proof
prove knowledge of a fact to a third party without revealing the fact itself; ask you to prove it MANY times to ensure reliability eg: using graph isomorphism-- one to one mapping between graphs in practice: have G1 & G2, ALICE permute G1 as H, ask BOB to prove H is isomorphic to G1 or G2 , repeat n times
Application Layer
provides a wide variety of applications with the ability to access the services of the lower layers
two-factor authentication
requires the user to provide two means of authentication, what the user knows (password) and what the user has (security /personal token)
Chief Privacy Officer (CPO) / data protection officer
responsible for ensuring that the company complies with existing data privacy laws; governance, data inventory, privacy policies, trainings, security, contracts, breaches
Transport Layer
responsible for providing communication with the application by acknowledging and sequencing the packets to and from the application
TLS/SSL (Transport Layer Security and Secure Sockets Layer)
secure channel that aims to authenticate the SERVER primarily, record=how data transmits handshake=crypto parameters, algorithms, MAC alert=manage exception
RSA Symmetric Key Transport
sender chose symmetric key and encrypts w receivers priv, encrypts message w symmetric, sends both now, receiver decrypts symmetric key first then the message
TCP/IP (Transmission Control Protocol/Internet Protocol)
suite of communication protocols used to interconnect network devices on the internet. how data is exchanged over the internet by providing end-to-end communications that identify how it should be broken into packets, addressed, transmitted, routed and received at the destination. TCP/IP requires little central management and is designed to make networks reliable with the ability to recover automatically from the failure of any device on the network. originally not designed for security; Now standard is IPSec
Authenticated Key Exchange
the exchange of session key in a key exchange protocol which also authenticates the identities of parties involved in key exchange. Transport Layer Security integral to securing HTTP connections is perhaps the most widely deployed AKE protocol
Biometrics
the identification of a user based on a physical characteristic, such as a fingerprint, iris, face, voice, or handwriting very usable, ppl dont like setting it up tho, but some downsides is that it is compromisable?, not entirely unique
Kerberos
uses symmetric key encryption to validate an individual user to various network resources. a computer-network authentication protocol that works on the basis of tickets to allow nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed it primarily at a client-server model, and it provides mutual authentication—both the user and the server verify each other's identity. Kerberos protocol messages are protected against eavesdropping and replay attacks.
public key cryptography
uses two keys: A public key the sender uses to create encrypted messages, and a mathematically-related private key that the receiver can use to decrypt messages encrypted by that public key.
assymetric vs symmetric
•Asymmetric Cryptography is slower than Symmetric BUT MORE SCALABLE • Asymmetric crypto often isn't suitable for encrypting large amounts of data or even multiple blocks • Asymmetric crypto is often used together with Symmetric crypto as a way of exchanging a joint secret key Secret key SK • CipherText := Encrypt(SK, message) • message := Decrypt(SK, CipherText ) • PublicKey, PrivateKey • CipherText := Encrypt(PublicKey, message) • message := Decrypt(PrivateKey, CipherText )
