Security / Keamanan - Distributed System / Sistem Terdistribusi

Summary

This video explores the complexities of security in distributed systems, highlighting various threats such as eavesdropping, man-in-the-middle attacks, and denial-of-service attacks. It discusses the importance of encryption, authentication, and digital signatures in ensuring data protection and communication integrity. Key techniques like symmetric and asymmetric encryption, authentication methods (passwords, smart cards, biometrics), and the use of digital certificates for identity verification are covered. The goal is to safeguard distributed systems against unauthorized access and cyber threats while ensuring the reliability and security of data transmission and storage.

Takeaways

• 😀 Security in distributed systems involves protecting data, resources, and processes from unauthorized access or threats.
• 😀 Distributed systems face more complex security challenges compared to centralized systems due to the involvement of multiple communicating nodes.
• 😀 Eavesdropping refers to unauthorized interception of data during transmission over the network.
• 😀 A Man-in-the-Middle attack occurs when an attacker intercepts and potentially alters communication between two parties.
• 😀 A Replay attack involves an attacker recording and retransmitting messages to deceive the system.
• 😀 Authentication attacks can include phishing, where users are tricked into revealing their login credentials, and brute force attacks that guess passwords.
• 😀 Data integrity can be compromised through data tampering or injection attacks (e.g., SQL injection), which alter or corrupt data.
• 😀 Denial of Service (DoS) attacks aim to overwhelm a system with fake requests, causing it to become unavailable, while Distributed DoS (DDoS) uses multiple sources.
• 😀 Crash attacks are intended to cause a system to fail completely, making it unusable.
• 😀 Security techniques like encryption, authentication, and digital signatures play a crucial role in safeguarding data and systems in distributed environments.

Q & A

What are the primary security concerns in distributed systems?

The primary security concerns in distributed systems include unauthorized access, data tampering, threats to data integrity, denial of service attacks, and risks during communication between nodes.

How does a Man-in-the-Middle (MitM) attack work?

In a Man-in-the-Middle attack, an attacker inserts themselves between two communicating parties, intercepting, altering, or stealing data being transmitted.

What is an eavesdropping attack?

Eavesdropping is the unauthorized interception of data transmitted over a network, where an attacker listens in on sensitive communications without consent.

What is the difference between symmetric and asymmetric encryption?

Symmetric encryption uses a single key for both encryption and decryption, making it faster. Asymmetric encryption uses a public and private key pair, where the public key is for encryption, and the private key is for decryption.

What are the common methods used for authentication in distributed systems?

Common authentication methods include knowledge-based authentication (e.g., passwords), token-based authentication (e.g., smart cards), and biometric authentication (e.g., fingerprints or facial recognition).

What is the role of encryption in securing data in distributed systems?

Encryption secures data by converting it into an unreadable format, ensuring that only authorized parties with the decryption key can access the original data.

How does a brute force attack work in authentication systems?

A brute force attack systematically attempts all possible password combinations until the correct one is found, which can compromise authentication systems if weak passwords are used.

What is a digital signature and how does it enhance security?

A digital signature is a cryptographic technique used to verify the authenticity of data and guarantee its integrity. It ensures that the sender cannot deny sending the data, providing non-repudiation.

What is the purpose of a Denial of Service (DoS) attack in a distributed system?

The goal of a Denial of Service (DoS) attack is to make a system unavailable by overwhelming it with fake requests, preventing legitimate users from accessing it.

How does the hybrid encryption model combine symmetric and asymmetric encryption?

Hybrid encryption combines the strengths of symmetric encryption for fast data encryption with asymmetric encryption for secure key exchange, offering both speed and security.