OSI security architecture
1.1 What is the OSI security architecture?
1.2 What is the difference between passive and active security threats?
1.3 List and briefly define categories of passive and active security attacks.
1.4 List and briefly define categories of security services.
1.5 List and briefly define categories of security mechanisms.
1.6 List and briefly define the fundamental security design principles.
1.7 Explain the difference between an attack surface and an attack tree.
Sample Solution
OSI security architecture
The Open System Interconnect (OSI) security architecture was designated by the ITU-T (International Telecommunication Union – Telecommunication). The OSI security architecture provides a useful, if abstract, overview of many of the concepts. The OSI security architecture focuses on security attacks, mechanisms, and services. What is the difference between passive and active security threats? Active and passive attacks are security attacks. In active attack, an attacker tries to modify the content of the messages whereas in passive attack, an attacker observes the messages, copy them and may use them for malicious purposes. Active attack is dangerous for integrity as well as availability. Passive attack, on the other hand, is dangerous for confidentiality.
