Data Security

The course is concerned with the methods, algorithms, techniques, and tools of data security and cryptography. After studying the theoretical aspects of cryptographic algorithms and protocols, these techniques are integrated to solve data security problems in information systems. The most important
areas are: security risk and sources of risk. Pillars of data security: algorithmic, physical, procedural approaches.
Cryptographic primitives: Basic notions of encryption, symmetric and asymmetric (public key) encryption, one-time pad. Substitution-permutation type encryption algorithms (DES, AES). Standard block cipher modes. Public key encryption: RSA, discrete exponentiation and ElGamal encryption. Cryptographic hash functions. Cryptographic protocols: User authentication: password based authentication, one way function, challenge response principle, user authentication protocols. Integrity protection: MAC, keyed hash protocols.
Digital signature. Key management: classification, protocols based on symmetric key -, public key technology, public key certificate. Provable security: an introduction. Applications: Kerberos, IPSEC, SSL/TLS, electronic payment, PKI technology, VPN. Principle and practice of computer and network security: access control, intrusion detection, firewalls, denial of service, malicious codes on Internet, security management.