book

Modern Cryptography for Cybersecurity Professionals

Name: Modern Cryptography for Cybersecurity Professionals
Author: Lisa Bock
ISBN: 9781838644352

by Lisa Bock

June 2021

Intermediate to advanced

286 pages

5h 49m

English

Packt Publishing

Read now

Unlock full access

Modern Cryptography for Cybersecurity Professionals
ContributorsAbout the authorAbout the reviewer
Preface
Who this book is forWhat this book coversTo get the most out of this bookDownload the color imagesConventions usedGet in touchReviews
Section 1: Securing Our Data
Chapter 1: Protecting Data in Motion or at Rest
Outlining the current threat landscapeDigitally transforming our worldThreatening the security of our dataUnderstanding security services Investigating X.800Introducing common cryptographic concepts Trusting a TTPManaging keys using the PKI Getting to know Bob and AliceOutlining substitution and transposition Substituting characters Transposing the textBreaking the codeSummaryQuestionsFurther reading
Chapter 2: The Evolution of Ciphers
Early uses of cryptographyUsing tattoos and scytalesEvaluating monoalphabetic ciphersRecognizing polyalphabetic ciphersEncoding transmissions during warCommunicating during wartimeExamining the Enigma machineEntering the digital ageInnovating in the field of computingDeveloping the early ciphersSummaryQuestionsFurther reading
Chapter 3: Evaluating Network Attacks
Comparing passive and active attacksCarrying out a passive attackLaunching an active attackProtecting sensitive data Understanding attack vectorsProviding defense mechanismsMaintaining integrityProtecting assetsManaging riskSummaryQuestionsFurther reading
Section 2: Understanding Cryptographic Techniques
Chapter 4: Introducing Symmetric Encryption
Discovering the evolution of symmetric encryptionProtecting customer dataDeveloping the Feistel cipherCreating the Lucifer cipherOutlining symmetric algorithmsUnderstanding symmetric encryptionDescribing the Data Encryption StandardIllustrating the Advanced Encryption StandardIdentifying other symmetric algorithmsScheduling the keysDissecting block and stream ciphersUsing a block cipherGenerating a streamComparing symmetric encryption operation modesUsing ECB Adding feedbackApplying CTR modeSecuring wireless communicationsPreventing eavesdroppingComparing protocolsSummary QuestionsFurther reading
Chapter 5: Dissecting Asymmetric Encryption
Realizing the need for asymmetric encryption Securely exchanging a keyOutlining the PKCSUnderstanding cryptographic requirementsDesigning a strong algorithmGenerating a key pairManaging keysUsing asymmetric encryptionComparing public-key algorithms Outlining RSA Visualizing an elliptical curveProviding PGP Trusting public keys Working with digital signaturesProviding core security services Creating a digital signatureSummaryQuestionsFurther reading
Chapter 6: Examining Hash Algorithms
Describing a hash algorithmCreating a hashEmploying a hash functionIdentifying optimal hash propertiesGenerating a one-way functionProducing a fixed-size outputConsistently creating the same hashEnsuring collision resistanceComparing common hash algorithmsUsing the message digest algorithmExploring the Secure Hash Algorithm (SHA)Recognizing other hash algorithmsAuthenticating a messageCreating a MACEncrypting and authenticating dataSummaryQuestionsFurther reading

Section 3: Applying Cryptography in Today's World
Chapter 7: Adhering to Standards
Understanding FIPS and PCI DSSOutlining FIPSOutlining PCI DSSStaying compliantEnsuring the privacy of patient data Giving consumers control of their dataEnforcing protection in CaliforniaLeveraging encrypted dataSecuring our data Concealing malwareHolding files ransomExposing private informationSummaryQuestionsFurther reading
Chapter 8: Using a Public Key Infrastructure
Describing a PKI frameworkUnderstanding how a PKI assures trustExchanging the keysUnderstanding the componentsStoring certificates Revoking a certificate Managing public keys Creating a certificateTrusting the rootSpoofing the processExamining a certificateViewing a certificateRecognizing the X.509 standardValidating a certificateUsing certificatesSummaryQuestionsFurther reading
Chapter 9: Exploring IPsec and TLS
Using a VPNSecuring traffic using OpenVPNChoosing a browser-based VPNUsing an SSH VPNUsing a VPN on a Windows machineOutlining an IPsec VPNGrasping the IPsec framework Dissecting the AH protocolEncapsulating the security payloads Using operating modes Generating a shared secret key with DHManaging the keys using IKESetting up an IPsec profileUnderstanding TLSUnderstanding the handshake protocolsDissecting the Record protocolSummaryQuestionsFurther reading
Chapter 10: Protecting Cryptographic Techniques
Recognizing cryptographic attacks Comparing various attacksUsing Kali LinuxCracking WEPAttacking the infrastructure Guaranteeing trustViolating trust Influence of quantum computing Describing quantum computingImplementing quantum-resistant algorithmsSummaryQuestionsFurther reading
Assessments
Chapter 1 – Protecting Data in Motion or at RestChapter 2 – The Evolution of CiphersChapter 3 – Evaluating Network AttacksChapter 4 – Introducing Symmetric EncryptionChapter 5 – Dissecting Asymmetric EncryptionChapter 6 – Examining Hash AlgorithmsChapter 7 – Adhering to StandardsChapter 8 – Using a Public Key InfrastructureChapter 9 – Exploring IPsec and TLSChapter 10 – Protecting Cryptographic Techniques
Why subscribe?
Other Books You May EnjoyPackt is searching for authors like youLeave a review - let other readers know what you think

Content preview from Modern Cryptography for Cybersecurity Professionals

Chapter 7: Adhering to Standards

Along with all the connected systems, devices, and interactivity, we also see an expansion of the amount of data. With this expansion comes the need to ensure the confidentiality, integrity, and availability of the data. In this chapter, we'll provide an overview of how security standards and laws exist to provide guidelines and best practices to prevent data loss. We'll review some of the guidelines provided by the Federal Information Processing Standards (FIPS) along with the Payment Card Industry Data Security Standard (PCI DSS).

In addition, we'll see that there are strict legislative requirements such as the Health Insurance Portability and Accountability Act (HIPAA) and the General Data Protection Regulation ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781838644352

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Modern Cryptography for Cybersecurity Professionals

by Lisa Bock

Chapter 7: Adhering to Standards

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.