Security in Fixed and Wireless Networks

619 Pages·2016·9.093 MB·English

by  Guenter Schaefer, Michael Rossberg

Security in Fixed and Wireless Networks
(2nd Edition)

Security in Fixed and Wireless Networks
(2nd Edition)
Guenter Schaefer and Michael Rossberg
TechnischeUniversitaetIlmenau,Germany
TranslationbyHETranslations,Leicester,UK
www.HETranslations.uk
Copyright(cid:2)c 2014bydpunkt.verlagGmbH,Heidelberg,Germany.
TitleoftheGermanoriginal:NetzsicherheitISBN978-3-86490-115-7
TranslationCopyright(cid:2)c 2016byJohnWiley&SonsLtd,Allrightsreserved.
Registeredoffice
JohnWiley&SonsLtd,TheAtrium,SouthernGate,Chichester,WestSussex,PO198SQ,
UnitedKingdom
Fordetailsofourglobaleditorialoffices,forcustomerservicesandforinformationabout
howtoapplyforpermissiontoreusethecopyrightmaterialinthisbookpleaseseeour
websiteatwww.wiley.com.
Therightoftheauthorstobeidentifiedastheauthorsofthisworkhasbeenassertedin
accordancewiththeCopyright,DesignsandPatentsAct1988.
Allrightsreserved.Nopartofthispublicationmaybereproduced,storedinaretrieval
system,ortransmitted,inanyformorbyanymeans,electronic,mechanical,photocopying,
recordingorotherwise,exceptaspermittedbytheUKCopyright,DesignsandPatentsAct
1988,withoutthepriorpermissionofthepublisher.
Wileyalsopublishesitsbooksinavarietyofelectronicformats.Somecontentthatappears
inprintmaynotbeavailableinelectronicbooks.
Designationsusedbycompaniestodistinguishtheirproductsareoftenclaimedas
trademarks.Allbrandnamesandproductnamesusedinthisbookaretradenames,
servicemarks,trademarksorregisteredtrademarksoftheirrespectiveowners.The
publisherisnotassociatedwithanyproductorvendormentionedinthisbook.
LimitofLiability/DisclaimerofWarranty:Whilethepublisherandauthorhaveusedtheir
besteffortsinpreparingthisbook,theymakenorepresentationsorwarrantieswith
respecttotheaccuracyorcompletenessofthecontentsofthisbookandspecifically
disclaimanyimpliedwarrantiesofmerchantabilityorfitnessforaparticularpurpose.Itis
soldontheunderstandingthatthepublisherisnotengagedinrenderingprofessional
servicesandneitherthepublishernortheauthorshallbeliablefordamagesarising
herefrom.Ifprofessionaladviceorotherexpertassistanceisrequired,theservicesofa
competentprofessionalshouldbesought
LibraryofCongressCataloging-in-PublicationData
Schaefer,Guenter(Telecommunicationsengineer),author.
[Netzsicherheit,AlgorithmischeGrundlagenundProtokolle.English]
Securityinfixedandwirelessnetworks/DrGuenterSchaefer,TechnischeUniversitaet
Ilmenau,MichaelRossberg,TechnischeUniversitaetIlmenau.
pages cm
Includesbibliographicalreferencesandindex.
ISBN978-1-119-04074-3(cloth:alk.paper)1.Computernetworks–Securitymeasures.
2.Wirelesscommunicationsystems–Securitymeasures.3.Computersecurity.I.Rossberg,
Michael,author.II.Title.
TK5105.59.S3313 2003
005.8—dc23
2015034626
AcataloguerecordforthisbookisavailablefromtheBritishLibrary.
Setin10/13pt,NewCenturySchlbkLTStdbySPiGlobal,Chennai,India.
12016
v
Contents
Abouttheauthors......................................... xiii
Prefacetothesecondedition ............................... xv
Prefacetothefirstedition.................................. xvii
I Foundations of Data Security Technology 1
1 Introduction ....................................... 3
1.1 ContentandStructureofthisBook.................. 4
1.2 ThreatsandSecurityGoals ......................... 6
1.3 NetworkSecurityAnalysis ......................... 9
1.4 InformationSecurityMeasures ..................... 13
1.5 ImportantTermsRelatingtoCommunicationSecurity 14
2 FundamentalsofCryptology.......................... 17
2.1 Cryptology,CryptographyandCryptanalysis ......... 17
2.2 ClassificationofCryptographicAlgorithms........... 18
2.3 Cryptanalysis ..................................... 19
2.4 EstimatingtheEffortNeededforCryptographic
Analysis .......................................... 21
2.5 CharacteristicsandClassificationofEncryption
Algorithms........................................ 23
2.6 KeyManagement.................................. 25
2.7 Summary ......................................... 27
2.8 SupplementalReading ............................. 28
2.9 Questions ......................................... 29
3 SymmetricCryptography............................. 31
3.1 EncryptionModesofBlockCiphers.................. 31
3.2 DataEncryptionStandard.......................... 37
3.3 AdvancedEncryptionStandard ..................... 43
3.4 RC4Algorithm .................................... 48
vi Contents
3.5 TheKASUMIalgorithm ............................ 51
3.6 Summary ......................................... 53
3.7 SupplementalReading ............................. 54
3.8 Questions ......................................... 55
4 AsymmetricCryptography ........................... 57
4.1 BasicIdeaofAsymmetricCryptography ............. 57
4.2 MathematicalPrinciples ........................... 60
4.3 TheRSAAlgorithm ................................ 69
4.4 TheProblemoftheDiscreteLogarithm .............. 71
4.5 TheDiffie–HellmanKeyExchangeAlgorithm ........ 75
4.6 TheElGamalAlgorithm ............................ 77
4.7 Security of Conventional Asymmetric Cryptographic
Schemes .......................................... 80
4.8 PrinciplesofCryptographyBasedonEllipticCurves .. 81
4.9 Summary ......................................... 93
4.10 SupplementalReading ............................. 94
4.11 Questions ......................................... 95
5 CryptographicCheckValues.......................... 97
5.1 RequirementsandClassification .................... 97
5.2 ModificationDetectionCodes ....................... 99
5.3 MessageAuthenticationCodes...................... 112
5.4 MessageAuthenticationCodesBasedonMDCs ...... 116
5.5 AuthenticatedEncryption .......................... 117
5.6 Summary ......................................... 121
5.7 SupplementalReading ............................. 122
5.8 Questions ......................................... 123
6 RandomNumberGeneration......................... 125
6.1 RandomNumbersandPseudo-RandomNumbers..... 125
6.2 CryptographicallySecureRandomNumbers ......... 126
6.3 StatisticalTestsforRandomNumbers............... 128
6.4 GenerationofRandomNumbers .................... 129
6.5 GeneratingSecurePseudo-RandomNumbers ........ 130
6.6 ImplementationSecurity ........................... 133
6.7 Summary ......................................... 134
6.8 SupplementalReading ............................. 135
6.9 Questions ......................................... 136
Contents vii
7 CryptographicProtocols ............................. 137
7.1 PropertiesandNotationofCryptographicProtocols... 137
7.2 DataOriginandEntityAuthentication .............. 139
7.3 Needham–SchroederProtocol ....................... 143
7.4 Kerberos.......................................... 147
7.5 InternationalStandardX.509....................... 155
7.6 SecurityofNegotiatedSessionKeys ................. 160
7.7 AdvancedPasswordAuthenticationMethods......... 161
7.8 FormalValidationofCryptographicProtocols ........ 166
7.9 Summary ......................................... 176
7.10 SupplementalReading ............................. 177
7.11 Questions ......................................... 178
8 SecureGroupCommunication*....................... 179
8.1 SpecificRequirementsforSecureGroup
Communication.................................... 179
8.2 NegotiationofGroupKeys.......................... 181
8.3 SourceAuthentication.............................. 189
8.4 Summary ......................................... 193
8.5 SupplementalReading ............................. 194
8.6 Questions ......................................... 194
9 AccessControl ..................................... 197
9.1 DefinitionofTermsandConcepts ................... 197
9.2 SecurityLabels.................................... 199
9.3 SpecificationofAccessControlPolicies............... 201
9.4 CategoriesofAccessControlMechanisms ............ 202
9.5 Summary ......................................... 204
9.6 SupplementalReading ............................. 204
9.7 Questions ......................................... 205
II Network Security 207
10 IntegrationofSecurityServicesinCommunication
Architectures....................................... 209
10.1 Motivation ........................................ 209
10.2 APragmaticModel ................................ 211
10.3 General Considerations for the Placement of Security
Services........................................... 213
10.4 IntegrationinLowerProtocolLayersvsApplications . 216
10.5 IntegrationintoEndSystemsorIntermediateSystems 217
10.6 Summary ......................................... 219
viii Contents
10.7 SupplementalReading ............................. 219
10.8 Questions ......................................... 219
11 LinkLayerSecurityProtocols ......................... 221
11.1 VirtualSeparationofDataTrafficwithIEEE802.1Q . 222
11.2 Securing a Local Network Infrastructure Using IEEE
802.1X............................................ 224
11.3 EncryptionofDataTrafficwithIEEE802.1AE ....... 226
11.4 Point-to-PointProtocol ............................. 228
11.5 Point-to-PointTunnelingProtocol ................... 236
11.6 VirtualPrivateNetworks........................... 242
11.7 Summary ......................................... 243
11.8 SupplementalReading ............................. 245
11.9 Questions ......................................... 246
12 IPsecSecurityArchitecture........................... 249
12.1 ShortIntroductiontotheInternetProtocolSuite ..... 249
12.2 OverviewoftheIPsecArchitecture .................. 253
12.3 UseofTransportandTunnelModes ................. 261
12.4 IPsecProtocolProcessing........................... 263
12.5 TheESPProtocol .................................. 267
12.6 TheAHProtocol ................................... 273
12.7 TheISAKMPProtocol.............................. 279
12.8 InternetKeyExchangeVersion1.................... 286
12.9 InternetKeyExchangeVersion2.................... 293
12.10 OtherAspectsofIPsec ............................. 297
12.11 Summary ......................................... 299
12.12 SupplementalReading ............................. 300
12.13 Questions ......................................... 301
13 TransportLayerSecurityProtocols .................... 303
13.1 SecureSocketLayer ............................... 303
13.2 TransportLayerSecurity........................... 315
13.3 DatagramTransportLayerSecurity................. 322
13.4 SecureShell....................................... 323
13.5 Summary ......................................... 332
13.6 SupplementalReading ............................. 333
13.7 Questions ......................................... 334
Contents ix
III Secure Wireless and Mobile
Communications 335
14 SecurityAspectsofMobileCommunication ............ 337
14.1 ThreatsinMobileCommunicationNetworks ......... 337
14.2 ProtectingLocationConfidentiality.................. 338
14.3 Summary ......................................... 343
14.4 SupplementalReading ............................. 343
14.5 Questions ......................................... 343
15 SecurityinWirelessLocalAreaNetworks .............. 345
15.1 TheIEEE802.11StandardforWLANs .............. 345
15.2 EntityAuthentication.............................. 347
15.3 WiredEquivalentPrivacy .......................... 353
15.4 RobustSecureNetworks ........................... 358
15.5 SecurityinPublicWLANs .......................... 365
15.6 Summary ......................................... 367
15.7 SupplementalReading ............................. 368
15.8 Questions ......................................... 369
16 SecurityinMobileWide-AreaNetworks ............... 371
16.1 GlobalSystemforMobileCommunication............ 371
16.2 UniversalMobileTelecommunicationsSystem ....... 378
16.3 Long-TermEvolution............................... 385
16.4 Summary ......................................... 389
16.5 SupplementalReading ............................. 390
16.6 Questions ......................................... 391
IV Protecting Communications
Infrastructures 393
17 Protecting Communications and Infrastructure in Open
Networks.......................................... 395
17.1 SystematicThreatAnalysis......................... 396
17.2 SecurityofEndSystems............................ 399
17.3 Summary ......................................... 411
17.4 SupplementalReading ............................. 411
17.5 Questions ......................................... 412