Exam 1: Introduction to Security Concepts

A digital certificate is standardized as ____ under IETF RFC 2459.

____ is defined as the exchange of information over an unsecured medium that allows each of two parties, the sender and the recipient, to compute a value that will be used to construct a secret key for a symmetric cipher during the rest of the communication.

____ is a set of computer networking standards developed by the International Standard Organization (ISO) and covering electronic directory services.

What are the prerequisites for a hash function to be classified as a secure cryptographic hash function?

In ____, the source IP address in a packet is faked to make recipients suppose that packets are coming from trustworthy IP addresses.

____________________ is the assurance that an entity is who it claims to be.

____________________ means the assurance of data privacy-ensuring that no one can read the data except for the specific entity or entities intended.

What information does a certificate contain?

The two primary types of symmetric ciphers are stream ciphers and ____ ciphers.

What are the main advantages and disadvantages of Electronic Codebook (ECB)?

A software system is only as secure as its weakest link.

____ was designed by IBM in the 1970s and is the most widely used symmetric cipher.

Describe the CBC rollover problem.

____ ensure(s) the integrity of a message sent between two parties who are unknown to each other.

A ____ is a piece of structured data that uses a digital signature to bind a public key with an identity.

Encryption always ensures data integrity.

For communication among former unknown parties, ____________________ refers to any method for distributing a secret amongst a group of participants in cryptography.

A(n) ____ is the unique string of numbers that identifies a computer or server on the Internet.

____ was originally designed as part of the International Telecommunication Union's Open Standards Interconnect (OSI) effort as a general description language for the OSI protocol.

____ is the process of performing a comprehensive search on the possible solution space by throwing all computational power an attacker can gather at breaking the system.