TAILIEUCHUNG - Microsoft Encyclopedia Of Security Phần 3

Hạn chế ở đây có ý rằng không thể triệt phá hết ngay việc lạm dụng, cho nên cần sẵn sàng đề phòng mọi khả năng xấu với các phương cách thích hợp và chuẩn bị xử lý các sự cố nếu có việc lạm dụng xảy ra. | Common Cryptographic Architecture CCA compromised system Common Cryptographic Architecture CCA A cryptographic architecture developed by IBM for its computing platforms. Overview Common Cryptographic Architecture CCA defines a set of application programming interfaces APIs for providing cryptographic services to applications. These APIs include functions for confidentiality data integrity and message authentication. The architecture is based on the Data Encryption Standard DES and has found widespread use in the banking and financial industry in the IBM 4758 a tamper-resistant Peripheral Component Interconnect PCI card that plugs into PCs to provide cryptographic functions for secure communications. The IBM is encased in a hardened metal case and contains temperature shock and X-ray sensors to guard against tampering and it is Federal Information Processing Standards FIPS 140-1 Level 4 certified. Despite the hardened nature of this cryptographic device and the fact that it uses strong Triple DES 3DES encryption in 2002 an attack was devised by a team of researchers at Cambridge University s William Gates Computer Laboratory using off-the-shelf hardware costing less than 1 000 the team took less than a day to discover an encryption key used by CCA. See Also 3DES cryptography Data Encryption Stan dard DES encryption algorithm Common Vulnerabilities and Exposures CVE An emerging industry standard for naming vulnerabilities and other information security exposures. Overview Common Vulnerabilities and Exposures CVE is maintained by MITRE Corporation in collaboration with security experts academic institutions government agencies and security tool vendors. CVE was developed to standardize the naming of security vulnerabilities so that information could be shared between different security databases and tools. CVE functions as a kind of dictionary of all publicly known vulnerabilities and exposures for operating systems and applications. The National Institute of .

• An ninh - Bảo mật
• Tài liệu tin học
• Bảo mật mạng
• Chương trình bảo mật
• Microsoft Encyclopedia Of Security
• Bảo mật dữ liệu
• Quản trị dữ liệu
• Hệ dữ liệu
• Quản trị cơ sở dữ liệu
• Thủ thuật tin học