当前位置：文档之家 › Security Networks

Security Networks

  • 格式：pdf
  • 大小：179.30 KB
  • 文档页数：10

DuD•DatenschutzundDatensicherheit25(2001)X1SecurityMechanismsinUMTSStefanPütz,RolandSchmitz,TobiasMartinThiscontributionpresentsanoverviewofthesecurityofthe3rdgenerationmobileradiosystemUMTSascurrentlystandardisedbythe3rdGenerationPartnershipProject3GPP.Wediscusstheunderlyingprinciplesandshowtowhichextentthesecurityof2ndgenera-tionsystemsasGSMisimprovedandenhancedbyUMTS.TheUMTSAuthenticationandKeyAgreementprotocol,thesecurityalgorithmsde-ployedforUMTSandtheinterworkingmechanismsbetween2ndand3rdgen-erationsystemsaredescribedindetail.1Dr.StefanPützPromotioninITSecurity,LeiterITSecurityNetworksbeiT-Mobil,Vice-chairmander3GPPSecurityGroup.Arbeitsgebiete:ITSecurity,insb.UMTSSecurity,Standardisierung.E-Mail:stefan.puetz@t-mobil.deDr.RolandSchmitzPromotioninMa-thematik,seit1995beiT-Nova,Arbeits-gebiete:SicherheitmobilerKommuni-kation,Standardisie-rungdigitalerSi-gnaturen.E-Mail:roland.schmitz@t-systems.deDipl.Math.TobiasMartinMitarbeiterimBe-reichInforma-tionssicherheitvonT-Nova,MitgliedvonETSISAGEE-Mail:tobias.martin@t-systems.de1Thiscontributionisbasedon[VIS2001].1IntroductionDuring1998aworldwideharmonisationandglobalisationprocessforthe3G(3rdgeneration)mobileradiosystemshastakenplace.Therefore,thestandardisationproc-essforUMTS(UniversalMobileTelecom-municationsSystem)hasmovedfromETSI(EuropeanTelecommunicationsStandardsInstitute)to3GPP(3rdGenerationPartner-shipProject).3GPPwassetupbyvariousregionalstandardsorganisationsandotherrelatedbodiesfromdifferentcontinentsandcountries,e.g.Europe(ETSI),Japan(ARIB,TTC),Korea(TTA),China(CWTS)andNorthAmerica(T1),thathaveagreedtoco-operatefortheproductionofacompletesetofgloballyapplicabletechni-calspecificationsfora3GmobileradiosystembasedonevolutionoftheGSM(GlobalSystemforMobileCommunica-tions)corenetwork.3Gmobileradiosystemswillinvolvemoreplayers,e.g.contentandserviceproviders,andmoreoperators,whichwillresultincomplexsystemandroamingscenarios.3Gsystemswillexistofandinteractwithalotofdifferentnetworktypes.Also3GPPwillpromotewirelessaspreferredmeansofcommunication.ToensurethatUMTSwillworksecurelyandreliablyunderthiscondition,the3GPPsecuritygroupwasestablishedinearly1999todefinetheUMTSsecurity.ThestandardisationofUMTSsecuritywithin3GPPhasnowreachedareasonablystablestate.2Itisattemptedinthispapertopro-videafairlycompleteoverviewoftheUMTSsecuritybyhighlightingitsnewsecurityfeaturesanddescribingthemostessentialmechanisms(incl.protocolsandalgorithms)deployedtoprovidethesefeatures.23GPPfocusedonthefirstreleasetobefro-zenendofyear1999(calledRelease99).Duringtheyear2000alotofcorrectionsandfunctionalmodificationsbecamenecessary.23GSecurityPrinciplesThescopeof3Gsecurityisformedbyafewprinciples.Theseprinciplesstatewhatistobeprovidedby3Gsecurityascom-paredtothesecurityof2G(2ndgeneration)systems[TS33.120].♦ Buildonthesecurityof2GsystemsSecurityelementswithinGSMandother2Gsystemsthathaveprovedtobeneededandrobustshallbeadopted.FurthermorecompatibilitywithGSMinordertoeaseinterworkingandhandovershallbeensured.♦ Improveonthesecurityof2Gsystems3GsecuritywilladdressandcorrectrealandperceivedweaknessesinGSMandother2Gsystems.♦ Offernewsecurityfeatures3Gsecuritywillsecurenewservicesof-feredby3Gsystemsandtakeaccountofchangesinnetworkarchitecture.2.1BuildingonGSMSecurityThewellknownsecurityfeaturesofGSMaredescribedintheETSIstandards[GSM02.09,GSM03.20].Furthermore,theGSMsecurityarchitectureandmechanismsareexplainedin[DuD1996].Inthetenyearsofbeinginoperation,thesecurityarchitectureofGSMhasproventoprovidetheGSMsubscribersasufficientlevelofsecurity.ThebigcommercialsuccessofGSMisatleastpartlyowedtoitsrobustsecurityarchitecture,whichhasstruckagoodbal-ancebetweensubscriber’sneedsandcom-mercialinterests.Itwasthereforeaquitenaturaldecisionforthe3GPPsecuritygroup,toretainbasicsecurityfeaturesofGSMfor3G,namely:♦ Subscriberidentityconfidentiality♦ Subscribertonetworkauthentication♦ Radiointerfaceencryption♦ UseofaSIM(SubscriberIdentityMod-ule)cardasaterminalindependentsecu-

2DuD•DatenschutzundDatensicherheit25(2001)Xritymodule,consistingofremovablehardware♦ AuthenticationofsubscribertowardstheSIM♦ Securityoperationwithoutuserassis-tance♦ Anauthenticationprocedure,thatisperformedbytheServingNetwork(SN),butneverthelessrequiresminimaltrustintheSN,becausenopermanentuser-individualkeysaretransferredfromtheuser’sHomeEnvironment(HE)totheSN.♦ Thepossibilitytouseoperator-individualauthenticationalgorithms3AdditionalUMTSSecurityFeaturesInadditiontothewell-knownGSMsecu-rityfeaturesgivenin2.1,UMTSprovidesthefollowingsecurityfeatures[DuD2001]:

EnhancedUMTSAuthenticationandKeyAgreementMechanismTheUMTSauthenticationandkeyagree-mentmechanismprovidesthefollowingfeaturesontopofthecorrespondingGSMmechanism:♦ HEtoUSIM(UMTSSubscriberIdentityModule)3authentication(cf.4.3)♦ Sequencenumbermanagementinordertopreventresp.ensurecontrolledre-useofauthenticationvectors(cf.4.4)♦ AMF(AuthenticatedManagementField)providingasecuredchannelfromHEtoUSIMfordefiningoperator-specificop-tionsintheauthenticationprocess(cf.4.2)♦ AgreementonanIntegrityKey(IK)usedforintegrityprotectionofsignal-linginformation(cf.4.2)IntegrityProtectionofSignallingInfor-mationIntegrityprotectionofsignallinginforma-tionservestosecureconnectionestablish-mentandprovidesin-call(orlocal)authen-ticationindependentofciphering.Therebythisisonemeantoeffectivelypreventsocalledfalse-base-station-attacks.

合集下载

网络安全的重要性英语作文

网络安全的重要性英语作文

网络安全的重要性英语作文

The Importance of Cybersecurity

In today's digital age, the internet has become an integral part of our

daily lives. From online banking and social media to remote work

and e-commerce, we rely on the internet for a wide range of

activities. However, this increased reliance on technology also brings

with it a growing concern for cybersecurity. Cybersecurity is the

practice of protecting systems, networks, and data from

unauthorized access, misuse, and disruption. It is a critical issue that

affects individuals, businesses, and governments alike.

One of the primary reasons why cybersecurity is so important is the

increasing frequency and sophistication of cyber threats. Hackers,

cybercriminals, and even state-sponsored actors are constantly

developing new ways to breach security systems and steal sensitive

网络安全法 英语

网络安全法 英语

网络安全法 英语

The Cybersecurity Law - Ensuring Online Security and Stability

With the rapid development of the internet and the increasing

reliance on digital technology, it has become imperative to

establish effective measures to safeguard online security.

Recognizing this need, the Chinese government has implemented

the Cybersecurity Law to protect the interests of individuals and

organizations, as well as to maintain a stable online environment.

The Cybersecurity Law aims to tackle various cyber threats, such

as hacking, data breaches, and online fraud. It emphasizes the

protection of critical information infrastructure, including

telecommunications and internet systems, as well as government

networks. This ensures the smooth operation of essential services

and prevents potential disruptions that could have far-reaching

信息安全术语

信息安全术语

信息安全技术术语（中英文）

1。0 Network Security 网络安全

1。1 Implementsecurity configuration parameters on network devices and

othertechnologies. 在网络设备和其他设备上实施安全配置参数

Firewalls 防火墙

Routers 路由器

Switches 交换机

Load Balancers 负载均衡

Proxies 代理

Web security gateways Web安全网关

VPN concentrators VPN网关

NIDS and NIPS 网络入侵检测与网络入侵防范

* Behavior based 基于行为

＊ Signature based 基于特征

＊ Anomaly based 基于异常

* Heuristic 启发式

Protocol analyzers 协议分析仪

Spam filter 垃圾邮件过滤

UTM security appliances 统一威胁管理

* URL filter URL过滤

* Content inspection 内容检查

* Malware inspection 恶意软件检查

Web application firewall vs. network firewallWeb应用防火墙与网络防火墙

Application aware devices 应用端设备

＊ Firewalls 防火墙

＊ IPS 入侵防御

* IDS 入侵检测

* Proxies 代理

1.2 Given a scenario，use secure network administration principles.

给定一个场景，应用安全网络管理原则

Rule-based management 基于规则的管理

Firewallrules 防火墙规则

VLAN management VLAN管理

网络安全演讲稿英语作文(3篇)

网络安全演讲稿英语作文(3篇)

第1篇

Ladies and Gentlemen,

Good morning/afternoon. It is my great honor to stand before you today

to discuss a topic that is increasingly becoming a matter of paramount

importance in our lives – cybersecurity in the digital age. As we

become more reliant on technology, the threats to our digital lives are

also multiplying. Therefore, it is crucial that we understand the

importance of cybersecurity and take the necessary steps to protect

ourselves and our data.

Let us begin by defining what cybersecurity is. Cybersecurity, also

known as information technology security, is the practice of protecting

computers, servers, mobile devices, electronic systems, networks, and

data from malicious attacks. In today's interconnected world,

cybersecurity has become a critical component of our daily lives,

affecting everything from personal banking to international trade.