Class 8, 9 and 10

Access Control Part 2  Access Control

Access Control ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Authentication Part 2  Access Control

Who Goes There? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Something You Know ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Trouble with Passwords ,[object Object],[object Object],Part 2  Access Control

Why Passwords? ,[object Object],[object Object],[object Object],Part 2  Access Control

Keys vs Passwords ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Good and Bad Passwords ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Attacks on Passwords ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Password Retry ,[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Password File ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Dictionary Attack ,[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Password Cracking: Do the Math ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Password Cracking ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Other Password Issues ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Passwords ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Password Cracking Tools ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Biometrics Part 2  Access Control

Something You Are ,[object Object],[object Object],Part 2  Access Control Are Know Have ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Why Biometrics? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Ideal Biometric ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Biometric Modes ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Enrollment vs Recognition ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Cooperative Subjects ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

End of class 8 Part 2  Access Control

Biometric Errors ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Fingerprint History ,[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Fingerprint History ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Fingerprint Comparison ,[object Object],[object Object],Part 2  Access Control Loop (double) Whorl Arch

Fingerprint Biometric ,[object Object],[object Object],[object Object],Part 2  Access Control

Fingerprint Biometric ,[object Object],[object Object],Part 2  Access Control

Hand Geometry Part 2  Access Control ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Hand Geometry ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Iris Patterns ,[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Iris Recognition: History ,[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Iris Scan ,[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Measuring Iris Similarity ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Iris Scan Error Rate Part 2  Access Control distance distance Fraud rate : equal error rate 0.29 1 in 1.3  10 10 0.30 1 in 1.5  10 9 0.31 1 in 1.8  10 8 0.32 1 in 2.6  10 7 0.33 1 in 4.0  10 6 0.34 1 in 6.9  10 5 0.35 1 in 1.3  10 5

Attack on Iris Scan ,[object Object],[object Object],Part 2  Access Control ,[object Object],[object Object]

Equal Error Rate Comparison ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Biometrics: The Bottom Line ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Something You Have ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

2-factor Authentication ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Web Cookies ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Authorization Part 2  Access Control

Authentication vs Authorization ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Lampson’s Access Control Matrix ,[object Object],[object Object],Part 2  Access Control OS Accounting program Accounting data Insurance data Payroll data Bob Alice Sam Accounting program R ead e X ecute Rx R --- --- RX Rx R RW RW RWX Rwx R RW RW RX Rx RW rite RW RW

Are You Allowed to Do That? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Access Control Lists (ACLs) ,[object Object],[object Object],Part 2  Access Control OS Accounting program Accounting data Insurance data Payroll data Bob Alice Sam Accounting program rx rx r --- --- rx rx r rw rw rwx rwx r rw rw rx rx rw rw rw

Capabilities (or C-Lists) ,[object Object],[object Object],Part 2  Access Control OS Accounting program Accounting data Insurance data Payroll data Bob Alice Sam Accounting program rx rx r --- --- rx rx r rw rw rwx rwx r rw rw rx rx rw rw rw

ACLs vs Capabilities ,[object Object],[object Object],Part 2  Access Control Access Control List Capability file1 file2 file3 file1 file2 file3 r --- r Alice Bob Fred w r --- rw r r Alice Bob Fred r w rw --- r r r --- r

ACLs vs Capabilities ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Multilevel Security (MLS) Models Part 2  Access Control

Classifications and Clearances ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Clearances and Classification ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Subjects and Objects ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Multilevel Security (MLS) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

MLS Applications ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

MLS Security Models ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Bell-LaPadula ,[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

End of Class 9 Part 2  Access Control

Covert Channel Part 2  Access Control

Covert Channel ,[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Covert Channel Example ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Covert Channel Example Part 2  Access Control Alice: Time: Create file Delete file Create file Delete file Bob: Check file Check file Check file Check file Check file Data: 1 0 1 0 1

Covert Channel ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Covert Channel ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Real-World Covert Channel ,[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Real-World Covert Channel ,[object Object],[object Object],[object Object],Part 2  Access Control A. Covert_TCP sender C. Covert_TCP receiver B . Innocent server SYN Spoofed source: C Destination: B SEQ : X ACK (or RST ) Source: B Destination: C ACK : X

Inference Control Part 2  Access Control

Inference Control Example ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Inference Control and Research ,[object Object],[object Object],[object Object],Part 2  Access Control

Naïve Inference Control ,[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Less-naïve Inference Control ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Inference Control: The Bottom Line ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

CAPTCHA Part 2  Access Control

Turing Test ,[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

CAPTCHA ,[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

CAPTCHA Paradox ,[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

CAPTCHA Uses? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

CAPTCHA: Rules of the Game ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Do CAPTCHAs Exist? ,[object Object],Part 2  Access Control ,[object Object],[object Object]

CAPTCHAs ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

CAPTCHA’s and AI ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Firewalls Part 2  Access Control

Firewalls ,[object Object],[object Object],Part 2  Access Control Internet Internal network Firewall

Firewall as Secretary ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Firewall Terminology ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control

Packet Filter ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Part 2  Access Control application transport network link physical

Packet Filter ,[object Object],[object Object],Part 2  Access Control Action Source IP Dest IP Source Port Dest Port Protocol ,[object Object],Flag Bits Allow Inside Outside Any 80 HTTP Allow Outside Inside 80 > 1023 HTTP Deny All All All All All Any ACK All

End of class 10 Part 2  Access Control

Class 8, 9 and 10

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Class 8, 9 and 10

Similar to Class 8, 9 and 10 (20)

Class 8, 9 and 10