Security Service is a service that improve the security data processing system and/or information transfers. It needs to at least secure four elements: confidentiality#, authenticity#, integrity#, and availability#. It has Security Mechanism# implemented in order to fulfil its promises and prevents potential Security Attack.
There are several such Security Services:
Traffic Flow Confidentiality is a kind of #Security Service utilises encryption#, Traffic Padding#, and Routing Control# in order to counter Traffic Analysis#.
SSL is a #Security Service developed by Netscape to provide Transport Layer# security for web servers and clients. It could be implemented as part of the underlying Protocol Suite or embedded in specific packages such as browsers and web servers.
Pervasive Security Mechanism is a group of #Security Mechanism which are not specific to any particular Security Service or protocol layer.
Peer Entity Authentication is a kind of #Security Service that utilises encryption#, Digital Signature# and Authentication Exchange# in order to counter Masquerade#.
Modification is a form of #Security Attack aims at gaining access to the system and altering the information. It undermines the integrity# of the system. Replay Attack# and modification is one of the example of Modification attack.
MAC is a technique generates a small fixed-size block of data, using a secret key shared between sender and receiver(Symmetric Cryptography#), that will append to the message. It provides Security Services# such as Data Integrity# and data origin authentication# (whether the message is sent by the claimed sender).
Kerberos is a protocol utilising #Symmetric Cryptography to provide Security Service# in Application Layer#. It is done by authenticate the user in order to gain temporary access to internal or remote resources. There are currently two versions of Kerberos implementation: Version 4# and Version 5#. Regardless of the version, three components make up the structure of Kerberos which is used to guard the network: Authentication#, Accounting and Auditing. It has two main components servers: Authentication Server and Ticket Granting Server.
Interruption is a form of #Security Attack aims at disturbing the delivery of system utilities to the end users. It violates the availability# of the system service. This can be caused by hardware destruction, communication line cut, the disabling of file system, or Denial of Service (DoS)#.
Interception is a form of #Security Attack aims at eavesdropping or monitoring or simply gaining access to the network flow or the system itself. It undermines the confidentiality# of the system. Traffic analysis# and Man-In-The-Middle Attack (MITM)# are one of the methods of interception, and the information acquired by this method could be exposed to the public or furthered materialised using one of the Active Attack.
Fabrication is a form of #Security Attack aims at forging an identity, pretending to be an authenticated entity. It undermines the authenticity# of the system. Masquerade# and Server-Side Request Forgery (SSRF)# are one of the example.
Data Origin Authentication is a kind of #Security Service that utilises encryption# and Digital Signature# in order to counter Masquerade#.
Confidentiality is the protection of transmitted data from unauthorised disclosure. It serves as a #Security Service and utilises encryption# and Routing Control# in order to counter the release of message contents#.