MyCERT 3rd Quarter 2011 Summary Report - CyberSAFE Malaysia

More documents

Recommendations

Info

26Non -ParameterizedTest SelectionCumulative SumsTestRuns TestLongest Runs ofOnes TestRank TestSpectral DFT TestRandomExcursions TestRandomExcursions VariantTestLempel ZivComplexity TestFrequency TestFocusThe maximal excursion (from zero)of the random walk defined by thecumulative sum of adjusted (-1, +1)digits in the sequence.The total number of runs in thesequence, where a run is anuninterrupted sequence of identicalbits.The longest run of ones within M – bitblocks where M is the length of eachblock.The rank of disjoint sub – matrices ofthe whole sequence.The peak heights in the DiscreteFourier Transform of the sequence.The number of cycles having exactlyK visits in a cumulative sum randomwalk.The total number of times whicha particular state is visited in acumulative sum random walk.The number of cumulatively distinctpatterns (words) in the sequence.The proportion of zeros and ones forthe whole sequence.PurposeTo determine whether the sum of thepartial sequences occurring in the testedsequence is too large or too small.To determine whether the number ofruns of ones and zeros of various lengthsis as expected for a random sequence.To determine whether the longest runof ones is consistent with the longestrun of ones that would be expected in arandom sequence.To check for linear dependence amongfixed length substrings of the originalsequence.To detect periodic features in the testedsequence that would indicate a deviationfrom the assumption of randomness.To determine if the number of visits toa particular state within a cycle deviatesfrom what one would expect for arandom sequence.To detect deviations from thedistributions of the number of visits of arandom walk to a certain state.To determine how far the testedsequence can be compressed.To determine whether the numberof zeros and ones in a sequence areapproximately the same as would beexpected for a truly random sequence.Table 2: Non - Parameterized Test SelectionConclusionIn conclusion, the use of random numbergenerators is important since it is one of themain criteria to determine the strength ofcomputer security applications. The randomnumber generators are very useful in orderto construct the encryption keys and also theother cryptographic algorithm parameters.Therefore, by using the statistical tests suite,one can ensure that the sequence producedfrom hardware or software is random. ■References1. Juan Soto, “Statistical Testing of RandomNumber Generators,” National Institute ofStandards & Technology, 100 Bureau Drive,Stop 8930, Gaithersburg, MD 20899 – 8930.2. Andrew Rukhin, Juan Soto, JamesNechvatal, Miles Smid, Elaine Barker, StefanLeigh, Mark Levenson, Mark Vangel, DavidBanks, Alan Heckert, James Dray, San Vo,“A Statistical Test Suite for Random andPseudorandom Number Generators forCryptographic Applications,” NIST SpecialPublication 800 – 22.3. Juan Soto and Lawrence Bassham,“Randomness Testing of the AdvancedEncryption Standard Finalist Candidates,”Computer Security Division, NationalInstitute of Standards and Technology, 100Bureau Drive, Stop 8930, Gaithersburg, MD20899 – 8930.4. http://csrc.nist.gov/groups/ST/toolkit/rng/pubs_presentations.htmle-Security | Cyber Security Malaysia | Vol: 28-(Q3/2011)© CyberSecurity Malaysia 2011 - All Rights Reserved
Mathematics Operations in BinaryNumeral System27BY | Abdul Alif Bin ZakariaIntroductionCryptography is one of the most importantaspects in the Information Security arena.It is the practice and study of techniquesfor secure communications in the presenceof third parties. Communications overuntrusted networks can be carried out withencryption which is the conversation froma readable state to an unreadable state. Theopposite of encryption is decryption whichis converting an apparent nonsense state toa readable state.Designing a strong cryptographic algorithmhas never been easy these days becausepeople are getting smarter and technologyis progressing rapidly. One of the mostimportant tools in designing cryptographicalgorithms such as DES and AES is theapplication of binary number system. Thisnumber system would complicate anyefforts to break the algorithm. Although itis still possible to break the algorithm, atleast it will delay the efforts to do so.There are many types of number systemswhich are decimal (base-10), hexadecimal(base-8), and binary. Not many of us arefamiliar and understand the foundation ofbinary number systems. Therefore, a binarynumber system is the main topic that willbe discussed in this article because of itsimportance in many applications comparedto other number systems. Binary numeralsystems are also well known as base-2number systems. Unlike decimal numberswhich include every single number from0, 1, 2… to infinite, this system is onlyrepresented by the numbers “0” and “1”.Number “1” represents yes, agree or positive.Number “0”, on the other hand, representsno, disagree or negative, depending onhow we define it. Binary numeral systemsare used in most modern computers it ispopularly known as “bit”. Besides usingbinary in computing, it also has been widelyused in the science and mathematics fields.Due to its flexibleness, further explanationon how to utilise binary numeral systemsin mathematical operations will be discusslater.Differences Between Decimaland BinaryDecimal and binary number systems are twodifferent types of number systems but canoperate in similar mathematical operationtechniques. The difference between thesetwo number systems is the digits thatthey use. Decimal number uses digits “0”to “9” while binary number uses digits “0”and “1”. These two number systems applythe same method to determine the largestand the smallest value by looking at theposition of columns of each digit. “Carry”method is applied in both number systemsif each digit value increases when it reachesthe maximum value in each column.Decimal Number SystemDecimal numbers known as integers canuse the numbers 0, 1, 2, 3, 4, 5, 6, 7, 8,or 9 in each digit. For numbers containingmore than one digit (e.g. 47 and 13), digitsequence is actually separated by columndepending on the total of digits of the saidnumber. Smallest-value column is located atthe end of the column to the right while thelargest value is located at the far left. Thevalues of the sequence are 100, 101, 102,103, 10n where it reads from right to left.Table 1 shows values of each column andits decimal form.e-Security | Cyber Security Malaysia | Vol: 28-(Q3/2011)© CyberSecurity Malaysia 2011 - All Rights Reserved
Page 3: MyCERT 3 rd Quarter 2011 Summary Re
Page 6 and 7: 4compared to the previous quarter.
Page 8 and 9: 6Based on the statistics, there was
Page 10 and 11: 8Legal Restriction on CryptographyB
Page 12 and 13: 10Wassenaar Agreement “will not i
Page 14 and 15: 12transactions, electronically thro
Page 16 and 17: 14deciding if software is considere
Page 18 and 19: 16SPAM, the Annoying Culprit on the
Page 20 and 21: 18Figure 4: The distribution of spa
Page 23 and 24: “wire-once” settings pool bare-
Page 25 and 26: San Francisco, CA. McKesson has dou
Page 27: 3. Consistency:It means that the be
Page 31 and 32: compare the difference between a bi
Page 33 and 34: divided, it will remain as remainde
Page 35 and 36: Criteria is in a better spot to pro
Page 37 and 38: ASPECTS PLAN EXECUTE ANALYSISObject

MyCERT 3rd Quarter 2011 Summary Report - CyberSAFE Malaysia

Create successful ePaper yourself

Delete template?

Save as template?