Computer Systems Security: Winter 2018 Assignment 4 - Revision history

Soma: /* Solutions */

2018-04-09T17:10:09Z

Solutions

← Older revision		Revision as of 17:10, 9 April 2018
Line 37:		Line 37:
	<li>It is possible for this extension to do so, so much more than pin things to your pinterest account. It can see everything that has been downloaded, change how your browser works (by changing the theme), see what other web pages are being loaded, and monitor and modify anything you see in your browser. Lots of power for a little pinning!</li>		<li>It is possible for this extension to do so, so much more than pin things to your pinterest account. It can see everything that has been downloaded, change how your browser works (by changing the theme), see what other web pages are being loaded, and monitor and modify anything you see in your browser. Lots of power for a little pinning!</li>
	</ol>		</ol>
	<li> </li>		<li>iOS sandboxing and Linux VServer both isolate applications so they cannot directly interact with the files and processes of other applications. With Linux VServer, a user gets what appears to be an entire Linux machine - standard files are all present in their expected locations, user accounts (including root) work as epected, and so the machine can be configured as desired support arbitrary services (e.g., web servers, databases). These services, however, are (almost) as isolated from other applications on the VServer host as they would be running on separate systems. With iOS, however, applications are clearly running in a specialized environment that allows for other applications to be observed and interacted with (in very limited, mediated ways). Further, it is possible for arbitrary apps to perform many privileged operations that can affect the entire system '''if''' they have the right entitlements (permissions encoded in a digitally signed file accompanying the app). While iOS sandboxing using many of the OS-level sandboxing techniques that Linux VServer does, it adds its own and changes the programmer-visible environment into something very different from
			a standard UNIX box.</li>
	<li>Below is an example answer. Many other examples are acceptable; your definitions should be pretty close to those listed below.		<li>Below is an example answer. Many other examples are acceptable; your definitions should be pretty close to those listed below.
	<ol style="list-style-type:lower-alpha">		<ol style="list-style-type:lower-alpha">

Soma: /* Solutions */

2018-04-09T14:15:12Z

Solutions

← Older revision		Revision as of 14:15, 9 April 2018
Line 27:		Line 27:
	<ol>		<ol>
	<li>Sandboxing does not refer to a specific technology; instead, it refers to the goal of isolating code so it runs within a restricted environment. While code is often sandboxed by running it within a restricted runtime environment (e.g. browser-based JavaScript), it can also be achieved using static analysis or using OS-level isolation mechanisms (e.g., containers).</li>		<li>Sandboxing does not refer to a specific technology; instead, it refers to the goal of isolating code so it runs within a restricted environment. While code is often sandboxed by running it within a restricted runtime environment (e.g. browser-based JavaScript), it can also be achieved using static analysis or using OS-level isolation mechanisms (e.g., containers).</li>
	<li>It is harder to implement protection boundaries within a process because inside a process, we don't have access to the hardware mechanisms that operating systems use, such as user/supervisor mode and virtual memory.</ii>		<li>It is harder to implement protection boundaries within a process because inside a process, we don't have access to the hardware mechanisms that operating systems use, such as user/supervisor mode and virtual memory.</li>
	<li>System calls are a better interface for implementing security restrictions because even if an attacker gets control of a process, they cannot subvert the security policies implemented by system calls. The logic is protected because it is in the kernel or is delegated to another process. If protections are implemented inside functions, they can be subverted by an attacker gaining control of a process.</li>		<li>System calls are a better interface for implementing security restrictions because even if an attacker gets control of a process, they cannot subvert the security policies implemented by system calls. The logic is protected because it is in the kernel or is delegated to another process. If protections are implemented inside functions, they can be subverted by an attacker gaining control of a process.</li>
	<li>Language runtimes maintain complete control of the runtime environment, either by directly interpreting higher-level code (interpreters) or by controlling the compilation of code (JITs). Because they interpose on all code, it is straightforward to place restrictions on the behavior of code, and these restriction can only be bypassed if there are flaws in the logic of the language runtime. Compiled languages do not provide the same opportunities for enforcing security guarantees because security checking code that can be inserted into a binary is intermingled with user code; thus, flaws in user code can allow compiler-provided security-checking code to be bypassed.</li>		<li>Language runtimes maintain complete control of the runtime environment, either by directly interpreting higher-level code (interpreters) or by controlling the compilation of code (JITs). Because they interpose on all code, it is straightforward to place restrictions on the behavior of code, and these restriction can only be bypassed if there are flaws in the logic of the language runtime. Compiled languages do not provide the same opportunities for enforcing security guarantees because security checking code that can be inserted into a binary is intermingled with user code; thus, flaws in user code can allow compiler-provided security-checking code to be bypassed.</li>

Soma at 14:12, 9 April 2018

2018-04-09T14:12:30Z

← Older revision		Revision as of 14:12, 9 April 2018
Line 37:		Line 37:
	<li>It is possible for this extension to do so, so much more than pin things to your pinterest account. It can see everything that has been downloaded, change how your browser works (by changing the theme), see what other web pages are being loaded, and monitor and modify anything you see in your browser. Lots of power for a little pinning!</li>		<li>It is possible for this extension to do so, so much more than pin things to your pinterest account. It can see everything that has been downloaded, change how your browser works (by changing the theme), see what other web pages are being loaded, and monitor and modify anything you see in your browser. Lots of power for a little pinning!</li>
	</ol>		</ol>
			<li> </li>
	<li>Below is an example answer. Many other examples are acceptable; your definitions should be pretty close to those listed below.		<li>Below is an example answer. Many other examples are acceptable; your definitions should be pretty close to those listed below.
	<ol style="list-style-type:lower-alpha">		<ol style="list-style-type:lower-alpha">

Soma: /* Solutions */

2018-04-09T14:11:55Z

Solutions

← Older revision		Revision as of 14:11, 9 April 2018
Line 26:		Line 26:

	<ol>		<ol>
	<li>Sandboxing does not refer to a specific technology; instead, it refers to the goal of isolating code so it runs within a restricted environment. While code is often sandboxed by running it within a restricted runtime environment (e.g. browser-based JavaScript), it can also be achieved using static analysis or using OS-level isolation mechanisms (e.g., containers).<li>		<li>Sandboxing does not refer to a specific technology; instead, it refers to the goal of isolating code so it runs within a restricted environment. While code is often sandboxed by running it within a restricted runtime environment (e.g. browser-based JavaScript), it can also be achieved using static analysis or using OS-level isolation mechanisms (e.g., containers).</li>
	<li>It is harder to implement protection boundaries within a process because inside a process, we don't have access to the hardware mechanisms that operating systems use, such as user/supervisor mode and virtual memory.</ii>		<li>It is harder to implement protection boundaries within a process because inside a process, we don't have access to the hardware mechanisms that operating systems use, such as user/supervisor mode and virtual memory.</ii>
	<li>System calls are a better interface for implementing security restrictions because even if an attacker gets control of a process, they cannot subvert the security policies implemented by system calls. The logic is protected because it is in the kernel or is delegated to another process. If protections are implemented inside functions, they can be subverted by an attacker gaining control of a process.</li>		<li>System calls are a better interface for implementing security restrictions because even if an attacker gets control of a process, they cannot subvert the security policies implemented by system calls. The logic is protected because it is in the kernel or is delegated to another process. If protections are implemented inside functions, they can be subverted by an attacker gaining control of a process.</li>

Soma at 14:11, 9 April 2018

2018-04-09T14:11:14Z

@@ Line 21: / Line 21: @@
 <li>[4] How is iOS runtime security (see [https://www.apple.com/business/docs/iOS_Security_Guide.pdf Apple's Security Whitepaper], p. 23-24) like [https://en.wikipedia.org/wiki/Operating-system-level_virtualization OS virtualization], as implemented by [http://linux-vserver.org/Overview Linux-VServer] or similar systems?  How is it different?  Explain each and compare/contrast.</li>
 <li>[8] Define whitelists, blacklists, anomaly detection, and virtualization.  For each, give an example of a security mechanism based on that strategy, briefly explaining how the strategy relates to the mechanism.</li>
 </ol>

Soma at 15:58, 29 March 2018

2018-03-29T15:58:29Z

← Older revision		Revision as of 15:58, 29 March 2018
Line 1:		Line 1:
	~~'''This assignment is not yet finalized.'''~~

	Please answer the following questions. There are 7 questions with 20 points. Submit your answers as a text or PDF file via cuLearn by April 9, 2018 at 10:00 AM. Be sure to put your name and student number at the beginning of your submission.		Please answer the following questions. There are 7 questions with 20 points. Submit your answers as a text or PDF file via cuLearn by April 9, 2018 at 10:00 AM. Be sure to put your name and student number at the beginning of your submission.

Soma at 15:57, 29 March 2018

2018-03-29T15:57:57Z

← Older revision		Revision as of 15:57, 29 March 2018
Line 21:		Line 21:
	Hint: Refer to Firefox's [https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions description of permissions].		Hint: Refer to Firefox's [https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions description of permissions].
	</li>		</li>
	<li>[4] How is iOS runtime security (see [https://www.apple.com/business/docs/iOS_Security_Guide.pdf Apple's Security Whitepaper], p. 23-24) like OS virtualization, as implemented by [http://linux-vserver.org/Overview Linux-VServer] or similar systems? How is it different? Explain each and compare/contrast.</li>		<li>[4] How is iOS runtime security (see [https://www.apple.com/business/docs/iOS_Security_Guide.pdf Apple's Security Whitepaper], p. 23-24) like [https://en.wikipedia.org/wiki/Operating-system-level_virtualization OS virtualization], as implemented by [http://linux-vserver.org/Overview Linux-VServer] or similar systems? How is it different? Explain each and compare/contrast.</li>
	<li>[8] Define whitelists, blacklists, anomaly detection, and virtualization. For each, give an example of a security mechanism based on that strategy, briefly explaining how the strategy relates to the mechanism.</li>		<li>[8] Define whitelists, blacklists, anomaly detection, and virtualization. For each, give an example of a security mechanism based on that strategy, briefly explaining how the strategy relates to the mechanism.</li>
	</ol>		</ol>

Soma at 15:56, 29 March 2018

2018-03-29T15:56:29Z

← Older revision		Revision as of 15:56, 29 March 2018
Line 1:		Line 1:
	'''This assignment is not yet finalized.'''		'''This assignment is not yet finalized.'''

	~~This assignment has~~ 20 points ~~in 7 questions~~.		Please answer the following questions. There are 7 questions with 20 points. Submit your answers as a text or PDF file via cuLearn by April 9, 2018 at 10:00 AM. Be sure to put your name and student number at the beginning of your submission.

	~~Due: April 9~~, ~~2018~~, ~~10 AM~~		When answering each question, please indicate '''the sources of your answer.''' This could be a man page, your own experiments, discussion with a friend, or a website. Please list all your sources. You are allowed to collaborate; such collaboration should be clearly documented! If you already know an answer because of background knowledge you had before the class, that is fine, just state that this is the case.

			==Questions==

	<ol>		<ol>
Line 19:		Line 21:
	Hint: Refer to Firefox's [https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions description of permissions].		Hint: Refer to Firefox's [https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions description of permissions].
	</li>		</li>
	<li>[4] How is iOS runtime security (see [https://www.apple.com/business/docs/iOS_Security_Guide.pdf Apple's Security Whitepaper], p. 23-24) like OS virtualization, as implemented~~, for example,~~ by Linux-VServer? How is it different? Explain each and compare/contrast.</li>		<li>[4] How is iOS runtime security (see [https://www.apple.com/business/docs/iOS_Security_Guide.pdf Apple's Security Whitepaper], p. 23-24) like OS virtualization, as implemented by [http://linux-vserver.org/Overview Linux-VServer] or similar systems? How is it different? Explain each and compare/contrast.</li>
	<li>[8] Define whitelists, blacklists, anomaly detection, and virtualization. For each, give an example of a security mechanism ~~base~~ on that strategy, briefly explaining how the strategy relates to the mechanism.</li>		<li>[8] Define whitelists, blacklists, anomaly detection, and virtualization. For each, give an example of a security mechanism based on that strategy, briefly explaining how the strategy relates to the mechanism.</li>
	</ol>		</ol>

Soma at 14:30, 29 March 2018

2018-03-29T14:30:55Z

← Older revision		Revision as of 14:30, 29 March 2018
Line 9:		Line 9:
	<li>[1] Why is it harder to implement protection boundaries within a process, as compared to having an operating system implement protection boundaries? Explain briefly.</li>		<li>[1] Why is it harder to implement protection boundaries within a process, as compared to having an operating system implement protection boundaries? Explain briefly.</li>
	<li>[1] Which is a better interface for implementing security restrictions, function/method calls or system calls? Why?</li>		<li>[1] Which is a better interface for implementing security restrictions, function/method calls or system calls? Why?</li>
	<li>[1] How do language runtimes (interpreted and just-in-time compiled) provide opportunities for enforcing security properties? ~~Can these properties also be enforced when~~ code ~~is compiled (and at what cost)~~?</li>		<li>[1] How do language runtimes (interpreted and just-in-time compiled) provide opportunities for enforcing security properties? Why can't binaries compiled to machine code provide the same security guarantees?</li>
	<li>[4] Firefox [https://addons.mozilla.org/en-US/firefox/addon/pinterest-pin-button/ Pinterest save button] extension:		<li>[4] Firefox [https://addons.mozilla.org/en-US/firefox/addon/pinterest-pin-button/ Pinterest save button] extension:
	<ol style="list-style-type:lower-alpha">		<ol style="list-style-type:lower-alpha">

Soma at 14:28, 29 March 2018

2018-03-29T14:28:08Z

← Older revision		Revision as of 14:28, 29 March 2018
Line 17:		Line 17:
	<li>[1] Is it possible for the extension to perform actions unrelated to its purpose with these permissions? Explain briefly.		<li>[1] Is it possible for the extension to perform actions unrelated to its purpose with these permissions? Explain briefly.
	</ol>		</ol>
	Hint: Refer to Firefox's [https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions description of permissions].		Hint: Refer to Firefox's [https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions description of permissions].
	</li>		</li>
	<li>[4] How is iOS runtime security (see [https://www.apple.com/business/docs/iOS_Security_Guide.pdf Apple's Security Whitepaper], p. 23-24) like OS virtualization, as implemented, for example, by Linux-VServer? How is it different? Explain each and compare/contrast.</li>		<li>[4] How is iOS runtime security (see [https://www.apple.com/business/docs/iOS_Security_Guide.pdf Apple's Security Whitepaper], p. 23-24) like OS virtualization, as implemented, for example, by Linux-VServer? How is it different? Explain each and compare/contrast.</li>
	<li>[8] Define whitelists, blacklists, anomaly detection, and virtualization. For each, give an example of a security mechanism base on that strategy, briefly explaining how the strategy relates to the mechanism.</li>		<li>[8] Define whitelists, blacklists, anomaly detection, and virtualization. For each, give an example of a security mechanism base on that strategy, briefly explaining how the strategy relates to the mechanism.</li>
	</ol>		</ol>