B030710154

o Very difficult to detect

o Feasible to prevent the success of this attack

o Prevention rather than detection

• · Active attacks

o Difficult to prevent

o Instead, the goal is to detect active attacks and to recover from any disruption or delays caused by them

o If the detection has a deterrent effect, it may also contribute to prevention.

There are several ways to deal with harm that occurs when a threat is realized against a vulnerability.

• Prevent it, by blocking the attack or closing the vulnerability.
• Deter it, by making the attack harder, but not impossible.
• Detect it, either as it happens or some time after the fact.
• Deflect it, by making another target more attractive.
• Recover from its effect.

Encryption is making the interpretation is meaningless by scrambling the data without the intruder's knowing how the scrambling was done. Encryption enable us to provide security while accomplishing an important system or network task. Security services:

• Authentication is assurance that the communicating entity is the one claimed or assurance that the source of received data is as claimed.
• Access control is prevention of unauthorized use of resource.
• Data confidentiality is protect data from unauthorized disclosure.
• Data integrity is assurance that the data received is as sent by authorized entity.
• Non repudiation is to proof that the data sent by specified party and received by specified party.

Security mechanism is any process that is designed to detect, prevent, or recover from any security attack. Security mechanism divided into 2 classes, and Specific Security Mechanisms and Pervasive Security Mechanisms.