Introduction to security

Motivation, course structure, security history, description of IS from the viewpoint of security, security view of data, terms such as threat, attack, vulnerability, information assets, impact, risk and counter-measure, introduction to data issues, CIA triad.

Identifying vulnerabilities

The structure of information systems and related processes (data storage, data transfer, communication, authorisation, identity administration), the issue of identifying vulnerabilities of IS, penetration tests, parts necessary for protection – logging to systems, IS agent communication and the use of SSL/TLS, the importance of HTTPS, identity administration systems (Kerberos), the digital signature, the time stamp, verification of network elements, data archiving and backup

Communication and its security

Description of information transfer, terms such as information content and entropy, necessary terms from the probability theory, information from the viewpoint of security, definition of individual terms from coding and the importance for network communication. Description of coding and its classification and the Hufman Code, the term absolutely safe cypher.

Mathematical basis of cryptography

Modulo arithmetic and related algebraic terms, including algebraic qualities of a body and the issue of inverse element, the issue of divisibility and the Extended Euler Algorithm, the issue of factorisation and the complexity of its solution.

Introduction to cryptography and classic cryptography

The basic principles of encryption, the basic pattern and division of cyphers, description of classic cyphers and attacks against them, potentially relevant defence.

Symmetric cryptography

Principles of symmetric cryptography, block cyphers and various regimes of implementing block encryption, padding function, the main representatives of symmetric cyphers and their qualities – DES, 3DES and AES. Possibilities of attacks against symmetric cyphers.

The hash function

The principles of hash cryptographic functions, the conditions of forming a quality hash cryptographic function, the use of has functions, the description of the MD5 and SHA cyphers. Individual attacks against hashes.

Asymmetric cryptography

General principles of asymmetric cryptography, description of the RSA cypher, creating keys and encryption, the security of encrypting the whole procedure, individual possibilities of an attack.

Digital signatures

Asymmetric cryptography and the issue of attacks by means of the Man-in-the-Middle, solutions by means of a digital certificate, other uses of digital signatures and their security, the PKI diagram, the diagram of implementing mutual certification

Introduction to extended topics

Introduction to extended topics of cryptography, the description of an algorithm of elliptic curves and its power. The issue of quantum calculation and its use and risk for cryptography – quantum cryptography.