Triple DES Model

Public key and private is a type of encryption technique that can be used ensuring that the communication on the network is secured. When you sending a message to someone through the network, will need to use the public key of the receiver and the receiver will use the private key to decrypt the message. This encryption will avoid unauthorised access to the message such as reading

Assets are things that a company owns that have value. This typically means they can either be sold or used by the company to make products or provide services that can be sold. Assets include physical property, such as plants, trucks, equipment and inventory. It also includes things that can’t be touched but nevertheless exist and have value, such as

Generally speaking, modern encryption techniques fall into one of two categories - symmetric (homogeneous) and asymmetric (heterogeneous). Symmetric encryption is a system of communication whereby both parties share the same key to encode and decode a message. The Spartan generals used this method with their scytales.

Access control refers to the mechanisms that identify who can and cannot access a network, resource, application, specific action.

Due in Week Seven: Outline the Access Control Policy. Describe how access control methodologies work to secure information systems

C2 - Controlled Access Protection: In this sub division similarity protect like C1 but following are the extra protected by this C2: Object protection can be on a single-user basis, Authorization for access may only be assigned by authorized users, Object reuse protection, Mandatory identification and authorization procedures for users, Full auditing of security events, Protected system mode of operation and Added protection for authorization and audit

Data, often referred to as plaintext, is encrypted using an encryption algorithm and an encryption key. This process generates ciphertext that can only be viewed in its original form if decrypted with the correct key. Decryption is simply the inverse of encryption, following the same steps but reversing the order in which the keys are applied (Rouse, 2014).

a) A PKI (public key infrastructure) enables users of a basically unsecure public network such as the Internet to securely and privately exchange data and money through the use of a public and a private cryptographic key pair that is obtained and shared through a trusted authority.

The key can be changes and unique to each sender and receiver. ("Symmetric encryption,”) states, “There are two types of symmetric algorithms. Stream algorithms (Stream ciphers) and Block algorithms (Block ciphers).” Stream ciphers only encrypt one bit at a time. This can make this cipher faster than block ciphers, but stream ciphers have a security gap that can be harmful for specific types of attacks. These specific attacks can cause information to be compromised. Block ciphers encrypts information in blocks instead of doing it bit by bit. The size of the blocks is usually 64 bits. Triple DES and AES are the most popular symmetric algorithms that use block ciphers.

3.p16 The purpose of access control is to regulate interactions between a subject and an object, such as data, a network or device

mandatory and discretionary access control policies. ACM Transactions on Information and System Security, Vol. 3, No. 2.

RSA cryptography is vastly used to encrypt and decrypt message while communicating through internet and in the field of digital signature. This encryption system is used regularly in web browsers, chat applications email, vpn and any other types of communications that require securely sending data to severs or the other people.[8] RSA cryptography is an asymmetrical cryptography system. Because it have two keys. One is public another is private. The encryption key is public while the decryption key is private. So only the person with the correct decryption key can decipher the encrypted message. Everyone have their own encryption and decryption keys. The keys must be made in such a way that the decryption key may not easily

It is important to comprehend the underlying terminology, in order to gain a deeper understanding of the different types of encryption algorithms that is a “component for electronic data security.” 5 Cryptology deals with the science and mathematics that is behind the procedures and methods of secret communication. This is not to be confused with the term encryption, which focuses on the actual ciphering, or altering of the message to a secret form. Whereas decryption is the process of decoding a distorted messages into something intelligible. A key is mathematical value, such as a password or complex mathematical computations that are used to

Access control has been in use before the growth of the technology world. It could involve a simple action as locking a door. A person locks a door to prevent entry to those who are not allowed or authorize to do so. The same can be said about the security involving databases and the controlling of who can have access and what can be accessed. As far as database security is concerned, there are various categories that are involved in access control. The four main categories of access control include: Discretionary, Mandatory, Role-based, and Rule-based access control.

Confidentiality: Access controls help ensure that only authorized subjects can access objects. When unauthorized entities are able to access systems or data, it results in a loss of confidentiality.