1.1 Introduction
In the past, security was simply a matter of locking the door or storing files in a locked filing cabinet or safe. Today, paper is no longer the only medium of choice for housing information. Files are stored in computer databases as well as file cabinets. Hard drives and floppy disks hold many of our secret information. In the physical world, security is a fairly simple concept. If the locks on your house’s doors and windows are so strong that a thief cannot break in to steal your belongings, the house is secure. For further protection against intruders breaking through the locks, you might have security alarms. Similarly, if someone tries to fraudulently withdraw money from your bank account but the teller asks for identification and does not trust the thief’s story, your money is secure. When you sign a contract with another person, the signatures are the legal driving force that impels both parties to honor their word.
In the digital world, security works in a similar way. One concept is privacy, meaning that no one can break into files to read your sensitive data (such as medical records) or steal money (by, for example, obtaining credit card numbers or online brokerage accounts information). Privacy is the lock on the door. Another concept, data integrity, refers to a mechanism that tells us when something has been altered. That’s the alarm. By applying the practice of authentication, we can verify identities. That’s comparable to the ID required to withdraw money from a bank account (or conduct a transaction with an online broker). And finally, non repudiation is a legal driving force that impels people to honor their word.
As the Internet becomes a more pervasive part of daily life, the need for e-security becomes even more critical. Any organization engaged in online activity must assess and manage the e-security risks associated with this activity. Effective use of cryptographic techniques is at the core of many of these risk-management strategies. The most important security tool is cryptography.
1.2 Background of the Study
Before the modern era, cryptography was concerned solely with message confidentiality (i.e., encryption) − conversion of messages from a comprehensible form into an incomprehensible one, and back again at the other end, rendering it unreadable by interceptors or eavesdroppers without secret knowledge (namely, the key needed for decryption of that message). In recent decades, the field has expanded beyond confidentiality concerns to include techniques for message integrity checking, sender/receiver identity authentication, digital signatures, interactive proofs, and secure computation, amongst others.
Encryption attempts to ensure secrecy in communications, such as those of spies, military leaders, and diplomats, but it have also had religious applications. Steganography (i.e., hiding even the existence of a message so as to keep it confidential) was also first developed in ancient times. An early example, from Herodotus, concealed a message − a tattoo on a slave’s shaved head − under the regrown hair. More modern examples of steganography include the use of invisible ink, microdots, and digital watermarks to conceal information.
1.3 Statement of the Problem
The problem is security. The password method used in almost all commercial operating systems is probably not very strong against a sophisticated or unsophisticated attacker.
The choice of data encryption comes next in the minds of those that want reduction of unauthorized access on confidential files or data. Security provided by the computer operating systems come with a preset super user account and password.
The super user may have a password to control network functionality, another to conduct or access nightly backups, create accounts, and so on. For a cracker, logging on to a system as the super user is possibly the best way to collect data or do damage. If the super user has not changed an operating system’s preprogrammed passwords, the network is vulnerable to attack.
Most crackers know these passwords, and their first attempt to break into a network is simply to try them. If an attacker cannot log on as the super user, the next best thing might be to figure out the user name and password of a regular user.
It is used to be standard practice in most Universities and colleges, and in some commercial companies, to assign every student or employee an account with user name and initial password − the password being the user name. Everyone was instructed to log on and change the password, but often, hackers and crackers logged on before legitimate users had a chance.
1.4 Aim and objective of the Study
The aim of the study is to design and implement an Encryption and Decryption Techniques for Securing Communication in Networking using Symmetric Algorithm. In achieving this aim, the following specific objectives of study were considered to design and develop an application software that will;
- Understand and improve the computer networking data security through encryption of data.
- Enable communication between two or more computers on the network.
- Allow the computers in the network communicate without the need for a central server.
- Allow the computers connected in the network perform the function of both a server and a client on the network i.e. they are given the administrative right to both send and receive data.
- Create a network for each computer to easily upload and download files over the peer to peer network, and this can be done without having access to the internet.
1.5 Scope of the Study
The scope of study focuses on Encryption and Decryption Techniques for Securing Communication in Networking using Symmetric Algorithm.
1.6 Significant of the Study
Data security in these contemporary times is a must. For your secrets to be secure, it may be necessary to add protections not provided by your computer operating systems. The built-in protections may be adequate in some cases. If no one ever tries to break into or steal data from a particular computer, its data will be safe. Or if the intruder has not learned how to get around the simple default mechanisms, they’re sufficient. But many attackers do have the skills and resources to break various security systems. If you decide to do nothing and hope that no skilled cracker targets your information, you may get lucky, and nothing bad will happen.
One of the most important tools for protecting your data from an authorized access is Data Encryption, any of various methods that are used to turn readable files into gibberish. Even if an attacker obtains the contents of the file, it is gibberish. It does not matter whether or not the operating system protections worked.
1.7 Limitations of the Study
During the course of this study, many things militated against its completion, some of which are:
- Time Constraint: The time frame given to accomplish this project was very short due to school academic calendar and it was carried out under pressure which made the researcher not to implement some necessary features.
- Research material: availability of research material is a major setback to the scope of the study.
- Frequent power failure: This made the researcher append more money on fuel to ensure sustainable power.
- Financial Constraint: Insufficient fund tends to impede the efficiency of the researcher in sourcing for the relevant materials, literature or information and in the process of data collection (internet).
1.8 Definition of Terms
Based on this research work, the following terms are used, and briefly defined bellow;
Encryption: A process of converting data/information into another form.
Decryption: A process of converting data/information (multimedia) back to its Original form.
Clear-text/plaintext: Original data/information before it is enciphered / scrambled.
Ciphered text/cryptogram: Information (multimedia) that has been converted into other symbols or form.
Ciphers: The secret code used to convert plain text message.
Hackers: People who steal information without permission.
Cryptography: This is process of hiding writing information.
Cryptographers: Those that hide writing information.
Cryptologist: Scientist who study different ways to protect information or data.
Cryptanalysis: Is the art of breaking of ciphers, some from program codes.
ASCII: American Standard Codes for Information Interchange.
BASIC: Beginners All-Purpose Symbols Instruction Codes.
DES: Data Encryption Standard.
Internet: A global computer network providing a variety of information and communication facilities, consisting of interconnected networks using standardized communication protocols.
