This article covers authentication and security topics for the Information Processing Engineer practical exam, including server access control, network security, and privacy protection.
Compares Network Attacks vs. DoS Attacks with a table, explaining the objectives and characteristics of each attack type. Covers key security attack concepts for the Information Processing Engineer exam.
Learn core concepts, operating principles, and differences of SSO (Single Sign-On), Kerberos, and OAuth. Compare features and pros/cons of each authentication technology with practical exam problems.
This post compares and analyzes the core concepts and differences of symmetric-key (DES, SEED, AES), asymmetric-key (Diffie-Hellman, RSA, ECC), and hash (MD5, SHA) encryption algorithms that frequently appear in the Information Processing Engineer practical exam, and provides practice questions.
A deep dive into the three main models of server access control: Discretionary Access Control (DAC), Mandatory Access Control (MAC), and Role-Based Access Control (RBAC), comparing their concepts, features, and pros and cons.
Clearly understand the concepts and differences of the core 3A elements of information security: Authentication, Authorization, and Accounting. This guide explains how each element interacts to build a robust security system with real-world examples.
Explore everything about IPSec, the core network security protocol. Clearly understand the differences between AH and ESP, and the operational methods of Transport Mode and Tunnel Mode. Test your knowledge with practice questions for certification exams.
Learn the basic concepts of Denial of Service (DoS) attacks and their differences from Distributed Denial of Service (DDoS) attacks. This post also explains the principles and mechanics of Distributed Reflection Denial of Service (DRDoS), an amplification attack method. Includes practice problems for the engineer exam.
Learn about the principles and characteristics of various network attacks, including password cracking techniques like dictionary and brute-force attacks, IP/ARP spoofing, Trojan horses, and sniffing.
‘Security’ tag has 9 posts