Chapter 16: SecurityChapter 16: Security
15.2 Silberschatz, Galvin and GagneOperating System Concepts
Chapter 15: SecurityChapter 15: Security
The Security Problem...
15.3 Silberschatz, Galvin and GagneOperating System Concepts
The Security ProblemThe Security Problem
Security must consid...
15.4 Silberschatz, Galvin and GagneOperating System Concepts
AuthenticationAuthentication
User identity most often establi...
15.5 Silberschatz, Galvin and GagneOperating System Concepts
Program ThreatsProgram Threats
Trojan Horse
Code segment that...
15.6 Silberschatz, Galvin and GagneOperating System Concepts
System ThreatsSystem Threats
Worms – use spawn mechanism; sta...
15.7 Silberschatz, Galvin and GagneOperating System Concepts
The Morris Internet WormThe Morris Internet Worm
15.8 Silberschatz, Galvin and GagneOperating System Concepts
Threat MonitoringThreat Monitoring
Check for suspicious patte...
15.9 Silberschatz, Galvin and GagneOperating System Concepts
Threat Monitoring (Cont.)Threat Monitoring (Cont.)
Check for:...
15.10 Silberschatz, Galvin and GagneOperating System Concepts
FireWallFireWall
A firewall is placed between trusted and un...
15.11 Silberschatz, Galvin and GagneOperating System Concepts
Network Security Through Domain Separation ViaNetwork Securi...
15.12 Silberschatz, Galvin and GagneOperating System Concepts
Intrusion DetectionIntrusion Detection
Detect attempts to in...
15.13 Silberschatz, Galvin and GagneOperating System Concepts
Data Structure Derived From System-CallData Structure Derive...
15.14 Silberschatz, Galvin and GagneOperating System Concepts
EncryptionEncryption
Encrypt clear text into cipher text.
Pr...
15.15 Silberschatz, Galvin and GagneOperating System Concepts
Encryption (Cont.)Encryption (Cont.)
Public-key encryption b...
15.16 Silberschatz, Galvin and GagneOperating System Concepts
Encryption Example - SSLEncryption Example - SSL
SSL – Secur...
15.17 Silberschatz, Galvin and GagneOperating System Concepts
Computer Security ClassificationsComputer Security Classific...
15.18 Silberschatz, Galvin and GagneOperating System Concepts
Windows NT ExampleWindows NT Example
Configurable security a...
15.19 Silberschatz, Galvin and GagneOperating System Concepts
15.0115.01
15.20 Silberschatz, Galvin and GagneOperating System Concepts
15.0315.03
15.21 Silberschatz, Galvin and GagneOperating System Concepts
15.0415.04
15.22 Silberschatz, Galvin and GagneOperating System Concepts
15.0515.05
15.23 Silberschatz, Galvin and GagneOperating System Concepts
15.0715.07
15.24 Silberschatz, Galvin and GagneOperating System Concepts
15.0815.08
15.25 Silberschatz, Galvin and GagneOperating System Concepts
15.0915.09
End of Chapter 15End of Chapter 15
Upcoming SlideShare
Loading in …5
×

Security

430 views

Published on

Published in: Technology
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
430
On SlideShare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
24
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Security

  1. 1. Chapter 16: SecurityChapter 16: Security
  2. 2. 15.2 Silberschatz, Galvin and GagneOperating System Concepts Chapter 15: SecurityChapter 15: Security The Security Problem Authentication Program Threats System Threats Securing Systems Intrusion Detection Encryption Windows NT
  3. 3. 15.3 Silberschatz, Galvin and GagneOperating System Concepts The Security ProblemThe Security Problem Security must consider external environment of the system, and protect it from: unauthorized access. malicious modification or destruction accidental introduction of inconsistency. Easier to protect against accidental than malicious misuse.
  4. 4. 15.4 Silberschatz, Galvin and GagneOperating System Concepts AuthenticationAuthentication User identity most often established through passwords, can be considered a special case of either keys or capabilities. Passwords must be kept secret. Frequent change of passwords. Use of “non-guessable” passwords. Log all invalid access attempts. Passwords may also either be encrypted or allowed to be used only once.
  5. 5. 15.5 Silberschatz, Galvin and GagneOperating System Concepts Program ThreatsProgram Threats Trojan Horse Code segment that misuses its environment. Exploits mechanisms for allowing programs written by users to be executed by other users. Trap Door Specific user identifier or password that circumvents normal security procedures. Could be included in a compiler. Stack and Buffer Overflow Exploits a bug in a program (overflow either the stack or memory buffers.)
  6. 6. 15.6 Silberschatz, Galvin and GagneOperating System Concepts System ThreatsSystem Threats Worms – use spawn mechanism; standalone program Internet worm Exploited UNIX networking features (remote access) and bugs in finger and sendmail programs. Grappling hook program uploaded main worm program. Viruses – fragment of code embedded in a legitimate program. Mainly effect microcomputer systems. Downloading viral programs from public bulletin boards or exchanging floppy disks containing an infection. Safe computing. Denial of Service Overload the targeted computer preventing it from doing any sueful work.
  7. 7. 15.7 Silberschatz, Galvin and GagneOperating System Concepts The Morris Internet WormThe Morris Internet Worm
  8. 8. 15.8 Silberschatz, Galvin and GagneOperating System Concepts Threat MonitoringThreat Monitoring Check for suspicious patterns of activity – i.e., several incorrect password attempts may signal password guessing. Audit log – records the time, user, and type of all accesses to an object; useful for recovery from a violation and developing better security measures. Scan the system periodically for security holes; done when the computer is relatively unused.
  9. 9. 15.9 Silberschatz, Galvin and GagneOperating System Concepts Threat Monitoring (Cont.)Threat Monitoring (Cont.) Check for: Short or easy-to-guess passwords Unauthorized set-uid programs Unauthorized programs in system directories Unexpected long-running processes Improper directory protections Improper protections on system data files Dangerous entries in the program search path (Trojan horse) Changes to system programs: monitor checksum values
  10. 10. 15.10 Silberschatz, Galvin and GagneOperating System Concepts FireWallFireWall A firewall is placed between trusted and untrusted hosts. The firewall limits network access between these two security domains.
  11. 11. 15.11 Silberschatz, Galvin and GagneOperating System Concepts Network Security Through Domain Separation ViaNetwork Security Through Domain Separation Via FirewallFirewall
  12. 12. 15.12 Silberschatz, Galvin and GagneOperating System Concepts Intrusion DetectionIntrusion Detection Detect attempts to intrude into computer systems. Detection methods: Auditing and logging. Tripwire (UNIX software that checks if certain files and directories have been altered – I.e. password files) System call monitoring
  13. 13. 15.13 Silberschatz, Galvin and GagneOperating System Concepts Data Structure Derived From System-CallData Structure Derived From System-Call SequenceSequence
  14. 14. 15.14 Silberschatz, Galvin and GagneOperating System Concepts EncryptionEncryption Encrypt clear text into cipher text. Properties of good encryption technique: Relatively simple for authorized users to incrypt and decrypt data. Encryption scheme depends not on the secrecy of the algorithm but on a parameter of the algorithm called the encryption key. Extremely difficult for an intruder to determine the encryption key. Data Encryption Standard substitutes characters and rearranges their order on the basis of an encryption key provided to authorized users via a secure mechanism. Scheme only as secure as the mechanism.
  15. 15. 15.15 Silberschatz, Galvin and GagneOperating System Concepts Encryption (Cont.)Encryption (Cont.) Public-key encryption based on each user having two keys: public key – published key used to encrypt data. private key – key known only to individual user used to decrypt data. Must be an encryption scheme that can be made public without making it easy to figure out the decryption scheme. Efficient algorithm for testing whether or not a number is prime. No efficient algorithm is know for finding the prime factors of a number.
  16. 16. 15.16 Silberschatz, Galvin and GagneOperating System Concepts Encryption Example - SSLEncryption Example - SSL SSL – Secure Socket Layer Cryptographic protocol that limits two computers to only exchange messages with each other. Used between web servers and browsers for secure communication (credit card numbers) The server is verified with a certificate. Communication between each computers uses symmetric key cryptography.
  17. 17. 15.17 Silberschatz, Galvin and GagneOperating System Concepts Computer Security ClassificationsComputer Security Classifications U.S. Department of Defense outlines four divisions of computer security: A, B, C, and D. D – Minimal security. C – Provides discretionary protection through auditing. Divided into C1 and C2. C1 identifies cooperating users with the same level of protection. C2 allows user-level access control. B – All the properties of C, however each object may have unique sensitivity labels. Divided into B1, B2, and B3. A – Uses formal design and verification techniques to ensure security.
  18. 18. 15.18 Silberschatz, Galvin and GagneOperating System Concepts Windows NT ExampleWindows NT Example Configurable security allows policies ranging from D to C2. Security is based on user accounts where each user has a security ID. Uses a subject model to ensure access security. A subject tracks and manages permissions for each program that a user runs. Each object in Windows NT has a security attribute defined by a security descriptor. For example, a file has a security descriptor that indicates the access permissions for all users.
  19. 19. 15.19 Silberschatz, Galvin and GagneOperating System Concepts 15.0115.01
  20. 20. 15.20 Silberschatz, Galvin and GagneOperating System Concepts 15.0315.03
  21. 21. 15.21 Silberschatz, Galvin and GagneOperating System Concepts 15.0415.04
  22. 22. 15.22 Silberschatz, Galvin and GagneOperating System Concepts 15.0515.05
  23. 23. 15.23 Silberschatz, Galvin and GagneOperating System Concepts 15.0715.07
  24. 24. 15.24 Silberschatz, Galvin and GagneOperating System Concepts 15.0815.08
  25. 25. 15.25 Silberschatz, Galvin and GagneOperating System Concepts 15.0915.09
  26. 26. End of Chapter 15End of Chapter 15

×