Communication System Security (Hardcover)

Helping current and future system designers take a more productive approach in the field, Communication System Security shows how to apply security principles to state-of-the-art communication systems. The authors use previous design failures and security flaws to explain common pitfalls in security design.

Divided into four parts, the book begins with the necessary background on practical cryptography primitives. This part describes pseudorandom sequence generators, stream and block ciphers, hash functions, and public-key cryptographic algorithms.

The second part covers security infrastructure support and the main subroutine designs for establishing protected communications. The authors illustrate design principles through network security protocols, including transport layer security (TLS), Internet security protocols (IPsec), the secure shell (SSH), and cellular solutions.

Taking an evolutionary approach to security in today’s telecommunication networks, the third part discusses general access authentication protocols, the protocols used for UMTS/LTE, the protocols specified in IETF, and the wireless-specific protection mechanisms for the air link of UMTS/LTE and IEEE 802.11. It also covers key establishment and authentication in broadcast and multicast scenarios.

Moving on to system security, the last part introduces the principles and practice of a trusted platform for communication devices. The authors detail physical-layer security as well as spread-spectrum techniques for anti-jamming attacks.

With much of the material used by the authors in their courses and drawn from their industry experiences, this book is appropriate for a wide audience, from engineering, computer science, and mathematics students to engineers, designers, and computer scientists. Illustrating security principles with existing protocols, the text helps readers understand the principles and practice of security analysis.

《通信系統安全》幫助現在和未來的系統設計師在領域中採取更有效的方法，展示如何將安全原則應用於最先進的通信系統。作者利用以前的設計失敗和安全漏洞來解釋安全設計中的常見陷阱。

本書分為四個部分，首先介紹了實用密碼學基礎知識。該部分描述了偽隨機序列生成器、流和區塊加密、哈希函數和公鑰加密算法。

第二部分涵蓋了安全基礎設施支持和建立保護通信的主要子程序設計。作者通過網絡安全協議（包括傳輸層安全性（TLS）、互聯網安全協議（IPsec）、安全外殼（SSH）和蜂窩解決方案）來說明設計原則。

第三部分以演化的方式討論了當今電信網絡中的安全性，包括一般訪問驗證協議、UMTS/LTE使用的協議、IETF指定的協議以及UMTS/LTE和IEEE 802.11的無線特定保護機制。它還涵蓋了廣播和多播場景中的密鑰建立和驗證。

最後一部分介紹了通信設備的可信平台的原則和實踐。作者詳細介紹了物理層安全以及用於反干擾攻擊的展頻技術。

這本書的大部分材料都是作者在課程中使用的，並從他們的行業經驗中獲得的。適合廣泛的讀者，從工程、計算機科學和數學學生到工程師、設計師和計算機科學家。通過現有協議來說明安全原則，本書幫助讀者理解安全分析的原則和實踐。