Information Security

Hyper Text Transfer Protocol Secure (HTTPS) is a secure version of the Hyper Text Transfer Protocol (HTTP). HTTPS allows secure e-commerce transactions, such as online banking. Web browsers such as Internet Explorer and Firefox display a padlock icon to indicate that the website is secure, as it also displays https:// in the address bar. When a user connects to a website via HTTPS, the website encrypts the session with a Digital Certificate. A user can tell if they are connected to a secure website or  if the website URL begins with https:// instead of http://.

This type of security is more suitable for blocking unauthorized users on one network to gain access to another network.

In cryptography, both public and private keys are used for encryption and decryption. Public key encryption uses a key pair - one public (shared) for encryption and one private (secret) for decryption, or vice versa for digital signatures. Symmetric encryption uses a single shared key, while asymmetric uses the public/private pair.

Passwords are the most common authentication mechanism to verify user identity. Users provide secret passwords that only they should know, proving their identity to the system. Proper password policies and hashing are essential for maintaining security against unauthorized access.

Cryptanalysis is the science of analyzing information systems to discover hidden aspects of ciphers. It involves finding weaknesses in encryption algorithms to recover plaintext without knowing the key. This field drives advances in cryptography by exposing vulnerabilities.

Asymmetric cryptography, also called public-key cryptography, uses a pair of keys: a public key for encryption and a private key for decryption. This solves the key distribution problem inherent in symmetric systems. Symmetric systems use the same key for both operations, which requires secure key exchange.

Symmetric cryptography uses a single secret key for both encryption and decryption. This requires both sender and receiver to securely share the key beforehand. Asymmetric cryptography uses different keys for each operation.

In cryptography, plaintext is the original readable message, and ciphertext is the encrypted result. The encryption algorithm transforms plaintext into ciphertext using a key. Decryption reverses this process to recover the plaintext.

Plaintext refers to the original, unencrypted message that is readable by humans. Ciphertext is the encrypted version that appears scrambled. The encryption process converts plaintext to ciphertext.

A capability is an unforgeable token that grants the holder specific access rights to an object. It's like a key - possession of the capability proves authorization. Capabilities are a fundamental concept in access control systems, contrasting with access control lists that store permissions with the object.

Encryption algorithms require a key as a parameter - it's the secret that determines the specific transformation. Without the key, the encryption or decryption cannot be performed correctly. The same plaintext encrypted with different keys produces different ciphertexts.

Common access control mechanisms include hierarchical approaches (like protection rings or multilevel security) and list-based approaches (like Access Control Lists). These represent two fundamental paradigms for managing permissions. Hierarchies organize by privilege levels, while lists enumerate explicit permissions.

False rejection ratio measures the rate at which a biometric or authentication system incorrectly rejects legitimate users who should be granted access. It represents the system's failure to recognize authorized users.

Encryption is the process of converting data into a coded form that cannot be read without the proper decryption key. This ensures data confidentiality and security during storage or transmission. Compression reduces file size but doesn't secure data, while biometrics and ergonomics are unrelated to data protection.