| <html lang="en"> | |
| <head> | |
| <meta charset="UTF-8"> | |
| <meta name="viewport" content="width=device-width, initial-scale=1.0"> | |
| <title>Frequently Asked Questions & Exam Preparation Guide - Network Security Textbook</title> | |
| <link rel="stylesheet" href="css/style.css"> | |
| </head> | |
| <body> | |
| <header class="top-bar"> | |
| <a href="index.html" class="brand">🛡️ Network Security & Cryptography</a> | |
| <ul class="top-nav"> | |
| <li><a href="index.html">Home</a></li> | |
| <li><a href="chapters/01-introduction.html">Chapters</a></li> | |
| <li><a href="slides/deck-01.html">Slides</a></li> | |
| <li><a href="labs-exams/hw-solutions.html">Labs & Exams</a></li> | |
| <li><a href="glossary.html">Glossary</a></li> | |
| <li><a href="takeaways.html">Takeaways</a></li> | |
| <li><a href="faq.html">FAQ</a></li> | |
| </ul> | |
| </header> | |
| <div class="main-container"> | |
| <nav class="sidebar"> | |
| <div class="sidebar-title">FAQ Categories</div> | |
| <ul class="sidebar-list"> | |
| <li><a href="#faq-crypto">Cryptographic Algorithms</a></li> | |
| <li><a href="#faq-protocols">Network Protocols & TLS</a></li> | |
| <li><a href="#faq-perimeter">Firewalls, IDS & VPNs</a></li> | |
| <li><a href="#faq-exams">Exam Study Advice</a></li> | |
| </ul> | |
| </nav> | |
| <main class="content"> | |
| <h1 class="page-title">Frequently Asked Questions & Exam Preparation Guide</h1> | |
| <p class="page-subtitle">Expert Clarifications on Complex Course Concepts and Exam Solved Examples</p> | |
| <div id="faq-crypto" class="card"> | |
| <h2>Cryptographic Algorithms & Mathematics</h2> | |
| <h4 style="color: var(--accent-primary);">Q1: Why is ECB mode considered broken for image encryption?</h4> | |
| <p>Because ECB mode encrypts identical 128-bit plaintext blocks into identical ciphertext blocks. When encrypting structured data like bitmaps, visual patterns remain visible in the ciphertext.</p> | |
| <h4 style="color: var(--accent-primary); margin-top: 1rem;">Q2: What is the difference between AES-128, AES-192, and AES-256?</h4> | |
| <p>All process 128-bit blocks in a 4x4 byte state array. They differ in key size and round count: AES-128 uses 10 rounds, AES-192 uses 12 rounds, and AES-256 uses 14 rounds.</p> | |
| <h4 style="color: var(--accent-primary); margin-top: 1rem;">Q3: How does the Birthday Attack affect cryptographic hash functions?</h4> | |
| <p>Due to the birthday paradox, finding any pair of messages $(m_1, m_2)$ such that $H(m_1) = H(m_2)$ takes only ~$2^{n/2}$ operations for an n-bit hash. Thus, SHA-256 (256 bits) provides 128-bit collision resistance.</p> | |
| </div> | |
| <div id="faq-protocols" class="card"> | |
| <h2>Network Security Protocols & TLS</h2> | |
| <h4 style="color: var(--accent-primary);">Q4: How does TLS 1.3 reduce handshake latency compared to TLS 1.2?</h4> | |
| <p>TLS 1.2 requires 2 Round-Trip Times (2-RTT) to negotiate algorithms and exchange key material. TLS 1.3 sends key shares directly inside the initial <code>ClientHello</code> message, completing the handshake in 1-RTT.</p> | |
| <h4 style="color: var(--accent-primary); margin-top: 1rem;">Q5: Why did TLS 1.3 remove static RSA key exchange?</h4> | |
| <p>Static RSA key exchange does not provide Forward Secrecy. If a server's private key is compromised years later, an adversary can decrypt all past recorded session traffic. TLS 1.3 mandates ephemeral ECDHE key exchange to guarantee forward secrecy.</p> | |
| </div> | |
| <div id="faq-perimeter" class="card"> | |
| <h2>Firewalls, IDS & Perimeter Defense</h2> | |
| <h4 style="color: var(--accent-primary);">Q6: What is the difference between Signature-Based and Anomaly-Based IDS?</h4> | |
| <p>Signature IDS (e.g. Snort) compares traffic against known attack patterns. It has high accuracy for known attacks but cannot detect zero-day exploits. Anomaly IDS monitors baseline traffic behavior; it detects zero-day attacks but suffers from high false positive rates.</p> | |
| <h4 style="color: var(--accent-primary); margin-top: 1rem;">Q7: What is the purpose of a Demilitarized Zone (DMZ)?</h4> | |
| <p>A DMZ is an isolated subnetwork positioned between an external perimeter firewall and an internal firewall. Public-facing servers (Web, DNS, Mail) reside in the DMZ so that if a server is compromised, attackers cannot directly access internal corporate networks.</p> | |
| </div> | |
| </main> | |
| </div> | |
| <footer> | |
| <p>Network Security & Cryptography • Complete Academic Course Textbook Portal</p> | |
| <p style="font-size: 0.85rem; margin-top: 0.5rem; color: #64748b;">Comprehensive Reference • 62 Documents Analyzed • 2,444 Pages Read • 689 Slides Covered</p> | |
| </footer> | |
| </body> | |
| </html> | |
Xet Storage Details
- Size:
- 5.09 kB
- Xet hash:
- a00045761870652d15139a96e624c71b5bda960e92c82cd21278271f43e89372
·
Xet efficiently stores files, intelligently splitting them into unique chunks and accelerating uploads and downloads. More info.