tailieunhanh - Continuous Asset Evaluation, Situational Awareness, and Risk Scoring Reference Architecture Report (CAESARS)

When talking about cryptography, we refer to senders and receivers wishing to exchange messages or plaintext by exchanging ciphertext. It is assumed that an eavesdropper reading ciphertext should not be able to extract corresponding plaintext. This characteristic is called confidentiality. The process performed by a sender to hide plaintext is called encryption, the reverse operation is called decryption. These processes are often expressed as mathematic functions or com- puting algorithms. The encryption and decryption algorithms together constitute a cipher. Cipher algorithms intended for general use cannot be secret. So cannot the eavesdropper just invoke the decryption process to extract plaintext? Ciphers use keys to solve this problem. The key. | w Homeland Security hninnniniinmnininn lOOHOOHOFEDERAL 1001110100010110101 0010101111001111 10100101001011 NETW0RK10100111000 1011000011101010110 1001010010011010100 __s R I Department of Homeland Security Federal Network Security Branch Continuous Asset Evaluation Situational Awareness and Risk Scoring Reference Architecture Report CAESARS September 2010 Version Document No. MP100146 This page intentionally left blank. CAESARS September 2010 Table of Contents 1. Intended Review of FISMA Controls and Continuous CAESARS Reference Architecture Concept of Operating Relationship of CAESARS to Cautionary Note - What Risk Scoring Can and Cannot CAESARS and Risk Risk Management The CAESARS Document Structure The Architecture of CAESARS Sensor CAESARS Database Repository CAESARS Analysis Risk Scoring CAESARS Presentation and Reporting 2. The Sensor Goals .14 Operating Environment Assumptions for the Sensor Solution Concept for the Sensor Tools for Assessing Security Configuration Security Assessment Tools for Assessing Patch-Level Tools for Discovering and Identifying Security Tools for Providing Virus Definition Other Sensor Controller .32 Recommended Technology in the Sensor CAESARS iii September .