清华大学：《网络安全 Network Security》课程教学资源（PPT课件讲稿）Lecture 01 Introduction

Network security Dan li CS Department, Tsinghua University 2021/2/3

Network Security 2021/2/3 1 Dan LI CS Department, Tsinghua University

Today's Lecture Overview of Network Security Cryptographic hash functions User authentication SSl IPSec IKE Distributed Denial of Service(DDos * Firewa‖l Reading List 2021/2/3

Today’s Lecture  Overview of Network Security  Cryptographic hash functions  User authentication  SSL  IPSec & IKE  Distributed Denial of Service (DDoS)  Firewall  Reading List 2021/2/3 2

Motivation https:// a wells fargo Account Sum, tary-Mlicre wge.com/imnl_aal_on/cg-bin/session.cgipSessargs-coan76ax52lTpxbuocterbfmmdmdK-egoLinksa0vahoomapsamapbLstadctIonary" Hone I Help Center I Cordnct Us I Locating I Ste Map I Aply siun on 构 Account Summary aet Log on January 06, 2004 Wells Forno Accounts ook Accounts lip: Select an account's balance to access the Account History Account Servces Enrollfor online statement: My Message center My Message Center cash Accounts Account Available Balance rld pILPaY access to end your session, be sure to sign om ign up for the rogram and get 91995-2003Wells Fago. All rohe reserved 2, 500 points. 2021/2/3 3

Motivation 2021/2/3 3 https://

EXcerpt From“ General Terms of use” File Edit View Favcriters Tools Help Bnk·回的心品 ahttp://www.wellsfargo.com/privacy_security/terms_of_use,jhtml v aGo ire General Terms of uae 二二二二,的 二二二二:二二 DN BFRVICE OF MERCHNDEE PROMOED THRouC THE AE RVICE 靠o片 PURCHATED VLINHTD ETTES oEu NOT ATTCT ANY MANuFAC TUFFRT Na了 o Inte 山2904 2021/2/3 4

Excerpt From “General Terms of Use” 2021/2/3 4

Privacy and Security File Edt view. Favorits Tools Heo Bak·的品 shrahttp://www.wellfargo.com/privacy_security/indexjhtml Gou“e Privacy and security a Emend huw Buen awDcalaan custine salwN and petachiah anu uur fm wson renan wa storag 二二二二二二二能计二二 Uadarnd how w uan an nrel thema i图 已 tar Is s EIs w hans wur satai has peen comgtonisea 20049于注DHA加 2021/2/3

Privacy and Security 2021/2/3 5

What do you think What do you think should be included in privacy and security"for an e-commerce Website? 2021/2/3

What Do You Think  What do you think should be included in “privacy and security” for an e-commerce website? 2021/2/3 6

Desirable Security Properties Authenticity Confidentiality Integrity Availability Accountability and non-repudiation Freshness Access control Privacy of collected information Integrity of routing and dNS infrastructure 2021/2/3

Desirable Security Properties  Authenticity  Confidentiality  Integrity  Availability  Accountability and non-repudiation  Freshness  Access control  Privacy of collected information  Integrity of routing and DNS infrastructure 2021/2/3 7

Peek at the dark side SCULT OF THE DEAD COW PARAMED|A·est1984v0 Blackhato usA· EUROPE·A5IA Trainin 2021/2/3

Peek at the Dark Side 2021/2/3 8

What drives the attackers? Put up a fake financial website collect users logins and passwords, empty out their accounts Insert a hidden program into unsuspecting users' computers, use them to spread spam Subvert copy protection, gain access to music and video files 2021/2/3

What Drives the Attackers?  Put up a fake financial website, collect users’ logins and passwords, empty out their accounts  Insert a hidden program into unsuspecting users’ computers, use them to spread spam  Subvert copy protection, gain access to music and video files 2021/2/3 9

What drives the attackers? Stage denial of service attacks on websites extort money Wreak havoc, achieve fame and glory in the blackhat community 2021/2/3

What Drives the Attackers?  Stage denial of service attacks on websites, extort money  Wreak havoc, achieve fame and glory in the blackhat community 2021/2/3 10