Foundations of Platform Security

Nate Lawson
Nate LawsonEngineer at Root Labs
••
! quot;# quot;$ % % ! quot;% && ' ( % )* & +
), ( ! quot; -. / 0 1 ( - / $ 1 ! 2# 34! 2 2 5 02 ) $ ! !
), ! quot;# quot; * &, * 6 quot; 7 . 8 2 % 8 ( # ! ! ( 2 - ) 2 / 9 )$ 95 04 : ; quot; !<
= 1 1 ) , ! ) > !quot; quot; (quot; , quot; quot; ( quot; quot; ) !>, quot; )1 3 > quot; ,1 6 quot; quot; quot;(! , (
(3 ) ( quot; > ! ! !quot; , quot; ( ! ! ! 6 quot; ( ! 1 6 ! !quot; ! $ ! :(
( ! (; ! ! , ) ( - / $ quot; ,quot; (quot; ( ) ! , !, ( ! quot; , ,quot; , ! )1 3 ) ! ; 4 3 1 ! quot; quot; ( ?
( quot; quot; quot; 1 6 quot; - ) / $ , 1, , ( >( - ) !/ $ , 1 1 ! 83 > (4 (! quot; 7 -1 ) 3 / 0 ( ! 3 1 ( ( 83 > quot; 4 quot; ) quot;! ?
) ( 2 7 , ( : , : ,, ( quot; !quot; !1 , 6 , !1 ( :quot; ! ? ) 1 @ quot; ( 3 ? ( quot; 1 quot; , quot;
( ) quot; ! , ) quot; - A quot; B/ 5 , ! ) , quot; ! quot; quot; 3 , 1 , 1 ) ( ! = quot; ,! , - A( quot; B/ quot; 1> ( , quot; 1 -%%2 / ! quot; 1 1> quot; ( C 1 > ( 1 ! D quot; quot; ! ! !
) ! quot; quot; , ; ( quot; !1 A9quot; 1 3 , quot; quot; quot;1 , B A (7 !quot; ! ( 1B 1, !quot; ! ) !>, (! quot; ; quot;1 quot; )1 3 > quot; quot; ! quot;
= 9quot; quot; 1 3 ,! 1 ! > 1 ! quot; quot; 1 ! 7, 2 quot;> quot; quot; quot; quot; quot; quot; $ E quot; - /> 1 , 7- /> ( 1 , quot; % - C C 3 4! /%) : # )> quot; ! 1 , , ! ! D1 quot; - / 83 , ) - CC 7 C 3 4! /
3 quot; F ! =quot; - ,! ! 9 % / 5E 5 G 1 1 ! % # = E 5: = 1 G 3 !3 quot; F E > 1( ! quot; 0 quot; 1! 5E quot; ( 1 1 G A , > 5 $ ! quot;1 quot; BH ! 6 H
:quot; ; ! ! G = 1 , * - / = quot; ! 1 = = , quot; 1 , ( 9quot; 1 3 3 2= : *3 9 5
# > 1 04 1 3 , -quot; 1% , / 3 quot; 2= quot; 3 3 1C ! 4 quot;quot; : quot; - 4, !/ 3 3- , quot; / 9 1 5 quot; ( ! quot; quot; : E , # ) 3 4 1 8 3 5 quot; 1 > > quot; C C % %!C
> quot; quot; quot; D = ! ! 1 ! ! ! ! 3 , - % / 1 ! 2 1 ! quot;quot; ; ,3 3 , 1 ! G! !quot; D quot; (/ - - / @ > G quot; ;1 1 quot; quot; 1 ! quot; D -%% ! $ 2 /
quot; -/ 9 ! quot; 7 C !7 quot;quot; 4 $ >( , ! 3 7 C !7 1 ! 3 ) 7 , ( 1 , 1 3 , > ( quot; ! 1 $ A< $ 3 quot; quot; quot; ! 3 quot; ,, ( I quot; , %9quot; D quot; ( !B - %) 0! D ! / = ! (> quot; =
>D 2 ! A9quot; ) quot; D BH G @ quot; ) H +
>D ! quot; $C$ 2 J2 quot; ! $ quot; - ( / , - !/ quot; (/ - - / !-/ quot; - / 3 1 @ > quot; 3 , 3 ! ! D ; quot;quot; > % %C > CC D C ! % quot;
D quot; - / ! 1 2 - / ! , 7 quot; ! ; quot; 1 -K /4 L / - - A M B/H N #D +4, quot; quot; !1 - +J / L 0 # 1 ! 0 quot; ! ( quot; 2 ? !
quot; ; ! > ! 1 , $ quot; ; 1 1 ( ) quot; 1 , , ) 41 > 1 quot; ! , 3 ! =quot; ! quot; 1 ! 1 , quot; # , > quot; ( ! ? ) > 1 !quot; quot; A) quot; $ ; quot; ! quot; (/<B - G quot; ,! quot;
O ; ! quot;
- / 0 ( ! ( , ! quot; # , ! quot; quot;1 quot; , > ) > !quot; quot; , quot; quot; ( quot; quot; ) !>, quot; )1 3 > quot; ,1 ! , quot; ; !
1 of 22

Foundations of Platform Security

••
Download to read offline
TechnologyBusiness

Uses the concept of asymmetry as a foundation for analyzing the security of various systems. Asymmetry in security is the property where mounting an attack is much more difficult for the attacker than the defender's effort required to maintain security. Platform design principles, including a study of sendmail vs. qmail architectures, are recommended for those who are designing their own systems. Given to a SJSU security class on May 1, 2006.

Nate Lawson
Nate LawsonEngineer at Root Labs

Recommended

090313seminar Talk About Salesforce For Google Apps090313seminar Talk About Salesforce For Google Apps
090313seminar Talk About Salesforce For Google AppsKohei Nishikawa
519 views•24 slides
56657245 curs-criminologie 56657245 curs-criminologie
56657245 curs-criminologie exodumuser
14K views•133 slides
Drepturi RealeDrepturi Reale
Drepturi Realeexodumuser
9.8K views•42 slides
135 6024135 6024
135 6024hlydom
187 views•7 slides
Nota De Eco Dias 264Nota De Eco Dias 264
Nota De Eco Dias 264parrhesia
266 views•6 slides
Landrate CircularLandrate Circular
Landrate Circularguestbb2aa84
154 views•3 slides

More Related Content

What's hot

H.el205 l3nH.el205 l3n
H.el205 l3nzaluu_medleg
497 views•5 slides
H.el205 l4H.el205 l4
H.el205 l4zaluu_medleg
510 views•4 slides
Funciones HashFunciones Hash
Funciones HashSamary Páez
119 views•64 slides

What's hot(18)

H.el205 l3nH.el205 l3n
H.el205 l3n
zaluu_medleg•497 views
H.el205 l4H.el205 l4
H.el205 l4
zaluu_medleg•510 views
La invencion de_enfermedades_mentalesLa invencion de_enfermedades_mentales
La invencion de_enfermedades_mentales
AnatolGrey•171 views
Edited inspection new (2) (1)Edited inspection new (2) (1)
Edited inspection new (2) (1)
berhanu taye•188 views
Funciones HashFunciones Hash
Funciones Hash
Samary Páez•119 views
3. Reducing Liabilities (English)3. Reducing Liabilities (English)
3. Reducing Liabilities (English)
smilerneil•329 views
H.el205 l8H.el205 l8
H.el205 l8
zaluu_medleg•807 views
Adobe Photoshop Elements 7 PL. Obróbka zdjęć cyfrowychAdobe Photoshop Elements 7 PL. Obróbka zdjęć cyfrowych
Adobe Photoshop Elements 7 PL. Obróbka zdjęć cyfrowych
Wydawnictwo Helion•605 views
H.el205 l9H.el205 l9
H.el205 l9
zaluu_medleg•970 views
Project Brief - Italian Interior Design for the Global Contract Sector - Dece...Project Brief - Italian Interior Design for the Global Contract Sector - Dece...
Project Brief - Italian Interior Design for the Global Contract Sector - Dece...
Jessica Donadio•204 views
980430國票期貨台指盤後分析980430國票期貨台指盤後分析
980430國票期貨台指盤後分析
guest92ee6e•437 views
Òðàíñôîðìàòîðûí îðóóëãûí á¿ä¿¿â÷Òðàíñôîðìàòîðûí îðóóëãûí á¿ä¿¿â÷
Òðàíñôîðìàòîðûí îðóóëãûí á¿ä¿¿â÷
zaluu_medleg•449 views
тактический маркетинг модуль 2тактический маркетинг модуль 2
тактический маркетинг модуль 2
Бизнес-Школа ЧЕ-ЛИНК•371 views
H.el205 l12H.el205 l12
H.el205 l12
zaluu_medleg•1.4K views
Estudio de la Peligrosidad y Riesgo por inundaciones en el T.M de Navaluenga ...Estudio de la Peligrosidad y Riesgo por inundaciones en el T.M de Navaluenga ...
Estudio de la Peligrosidad y Riesgo por inundaciones en el T.M de Navaluenga ...
Alberto Cañivano Moreno•274 views
H.el205 l6H.el205 l6
H.el205 l6
zaluu_medleg•639 views
Que paso en amuayQue paso en amuay
Que paso en amuay
COENERCoener•18 views
O apostolo dos pés sangrentosO apostolo dos pés sangrentos
O apostolo dos pés sangrentos
iriberto•373 views

Viewers also liked

Viewers also liked(13)

ACPI and FreeBSD (Part 1)ACPI and FreeBSD (Part 1)
ACPI and FreeBSD (Part 1)
Nate Lawson•1.6K views
ACPI and FreeBSD (Part 2)ACPI and FreeBSD (Part 2)
ACPI and FreeBSD (Part 2)
Nate Lawson•3.5K views
Using FreeBSD to Design a Secure Digital Cinema Server (Usenix 2004)Using FreeBSD to Design a Secure Digital Cinema Server (Usenix 2004)
Using FreeBSD to Design a Secure Digital Cinema Server (Usenix 2004)
Nate Lawson•862 views
Crypto Strikes Back! (Google 2009)Crypto Strikes Back! (Google 2009)
Crypto Strikes Back! (Google 2009)
Nate Lawson•3.7K views
When Crypto Attacks! (Yahoo 2009)When Crypto Attacks! (Yahoo 2009)
When Crypto Attacks! (Yahoo 2009)
Nate Lawson•3K views
Copy Protection Wars: Analyzing Retro and Modern Schemes (RSA 2007)Copy Protection Wars: Analyzing Retro and Modern Schemes (RSA 2007)
Copy Protection Wars: Analyzing Retro and Modern Schemes (RSA 2007)
Nate Lawson•3K views
Highway to Hell: Hacking Toll Systems (Blackhat 2008)Highway to Hell: Hacking Toll Systems (Blackhat 2008)
Highway to Hell: Hacking Toll Systems (Blackhat 2008)
Nate Lawson•3.1K views
Don't Tell Joanna the Virtualized Rootkit is Dead (Blackhat 2007)Don't Tell Joanna the Virtualized Rootkit is Dead (Blackhat 2007)
Don't Tell Joanna the Virtualized Rootkit is Dead (Blackhat 2007)
Nate Lawson•1.8K views
Designing and Attacking DRM (RSA 2008)Designing and Attacking DRM (RSA 2008)
Designing and Attacking DRM (RSA 2008)
Nate Lawson•3.5K views
TLS OptimizationTLS Optimization
TLS Optimization
Nate Lawson•7.7K views
TLS/SSL MAC security flawTLS/SSL MAC security flaw
TLS/SSL MAC security flaw
Nate Lawson•1.5K views
TLS/SSL Protocol Design 201006TLS/SSL Protocol Design 201006
TLS/SSL Protocol Design 201006
Nate Lawson•3K views
TLS/SSL Protocol DesignTLS/SSL Protocol Design
TLS/SSL Protocol Design
Nate Lawson•8.4K views

Foundations of Platform Security

  • 1. ! quot;# quot;$ % % ! quot;% && ' ( % )* & +
  • 2. ), ( ! quot; -. / 0 1 ( - / $ 1 ! 2# 34! 2 2 5 02 ) $ ! !
  • 3. ), ! quot;# quot; * &, * 6 quot; 7 . 8 2 % 8 ( # ! ! ( 2 - ) 2 / 9 )$ 95 04 : ; quot; !<
  • 4. = 1 1 ) , ! ) > !quot; quot; (quot; , quot; quot; ( quot; quot; ) !>, quot; )1 3 > quot; ,1 6 quot; quot; quot;(! , (
  • 5. (3 ) ( quot; > ! ! !quot; , quot; ( ! ! ! 6 quot; ( ! 1 6 ! !quot; ! $ ! :(
  • 6. ( ! (; ! ! , ) ( - / $ quot; ,quot; (quot; ( ) ! , !, ( ! quot; , ,quot; , ! )1 3 ) ! ; 4 3 1 ! quot; quot; ( ?
  • 7. ( quot; quot; quot; 1 6 quot; - ) / $ , 1, , ( >( - ) !/ $ , 1 1 ! 83 > (4 (! quot; 7 -1 ) 3 / 0 ( ! 3 1 ( ( 83 > quot; 4 quot; ) quot;! ?
  • 8. ) ( 2 7 , ( : , : ,, ( quot; !quot; !1 , 6 , !1 ( :quot; ! ? ) 1 @ quot; ( 3 ? ( quot; 1 quot; , quot;
  • 9. ( ) quot; ! , ) quot; - A quot; B/ 5 , ! ) , quot; ! quot; quot; 3 , 1 , 1 ) ( ! = quot; ,! , - A( quot; B/ quot; 1> ( , quot; 1 -%%2 / ! quot; 1 1> quot; ( C 1 > ( 1 ! D quot; quot; ! ! !
  • 10. ) ! quot; quot; , ; ( quot; !1 A9quot; 1 3 , quot; quot; quot;1 , B A (7 !quot; ! ( 1B 1, !quot; ! ) !>, (! quot; ; quot;1 quot; )1 3 > quot; quot; ! quot;
  • 11. = 9quot; quot; 1 3 ,! 1 ! > 1 ! quot; quot; 1 ! 7, 2 quot;> quot; quot; quot; quot; quot; quot; $ E quot; - /> 1 , 7- /> ( 1 , quot; % - C C 3 4! /%) : # )> quot; ! 1 , , ! ! D1 quot; - / 83 , ) - CC 7 C 3 4! /
  • 12. 3 quot; F ! =quot; - ,! ! 9 % / 5E 5 G 1 1 ! % # = E 5: = 1 G 3 !3 quot; F E > 1( ! quot; 0 quot; 1! 5E quot; ( 1 1 G A , > 5 $ ! quot;1 quot; BH ! 6 H
  • 13. :quot; ; ! ! G = 1 , * - / = quot; ! 1 = = , quot; 1 , ( 9quot; 1 3 3 2= : *3 9 5
  • 14. # > 1 04 1 3 , -quot; 1% , / 3 quot; 2= quot; 3 3 1C ! 4 quot;quot; : quot; - 4, !/ 3 3- , quot; / 9 1 5 quot; ( ! quot; quot; : E , # ) 3 4 1 8 3 5 quot; 1 > > quot; C C % %!C
  • 15. > quot; quot; quot; D = ! ! 1 ! ! ! ! 3 , - % / 1 ! 2 1 ! quot;quot; ; ,3 3 , 1 ! G! !quot; D quot; (/ - - / @ > G quot; ;1 1 quot; quot; 1 ! quot; D -%% ! $ 2 /
  • 16. quot; -/ 9 ! quot; 7 C !7 quot;quot; 4 $ >( , ! 3 7 C !7 1 ! 3 ) 7 , ( 1 , 1 3 , > ( quot; ! 1 $ A< $ 3 quot; quot; quot; ! 3 quot; ,, ( I quot; , %9quot; D quot; ( !B - %) 0! D ! / = ! (> quot; =
  • 17. >D 2 ! A9quot; ) quot; D BH G @ quot; ) H +
  • 18. >D ! quot; $C$ 2 J2 quot; ! $ quot; - ( / , - !/ quot; (/ - - / !-/ quot; - / 3 1 @ > quot; 3 , 3 ! ! D ; quot;quot; > % %C > CC D C ! % quot;
  • 19. D quot; - / ! 1 2 - / ! , 7 quot; ! ; quot; 1 -K /4 L / - - A M B/H N #D +4, quot; quot; !1 - +J / L 0 # 1 ! 0 quot; ! ( quot; 2 ? !
  • 20. quot; ; ! > ! 1 , $ quot; ; 1 1 ( ) quot; 1 , , ) 41 > 1 quot; ! , 3 ! =quot; ! quot; 1 ! 1 , quot; # , > quot; ( ! ? ) > 1 !quot; quot; A) quot; $ ; quot; ! quot; (/<B - G quot; ,! quot;
  • 21. O ; ! quot;
  • 22. - / 0 ( ! ( , ! quot; # , ! quot; quot;1 quot; , > ) > !quot; quot; , quot; quot; ( quot; quot; ) !>, quot; )1 3 > quot; ,1 ! , quot; ; !