SystemsSec 2018W Lecture 2 - Revision history

Akhil at 03:20, 19 January 2018

2018-01-19T03:20:33Z

← Older revision		Revision as of 03:20, 19 January 2018
Line 22:		Line 22:


	== '''~~Think~~ Exercise:''' ==		== '''Thought Exercise:''' ==

Calvin: /* Notes */

2018-01-16T20:05:48Z

Notes

← Older revision		Revision as of 20:05, 16 January 2018
Line 21:		Line 21:


	~~'''Think Exercise:'''~~

	~~Secret to cold fusion, Need to keep secret and safe for 20 years~~		== '''Think Exercise:''' ==


	~~Minimal people (2) - both need~~ to ~~trust each other. Hard copy (clean print~~, ~~paper~~ and ~~ink) locked away somewhere secure and dry.~~		Secret to cold fusion, Need to keep secret and safe for 20 years. How do I do that?
	~~(safety deposit box in a bank, not hidden under a mattress)~~. I ~~have half of the documents, other guy has other half of the documents.~~
	~~Maybe I split my half of the documents again. Quarter in a safety deposit box, quarter in my house hidden away.~~
	~~Need to know who wants this. Need to know how far they'll go to get it.~~


	Threat Modelling:		'''Possible Solution:'''
			: Minimal people (2) - both need to trust each other. Hard copy (clean print, paper and ink) locked away somewhere secure and dry. (safety deposit box in a bank, not hidden under a mattress). I have half of the documents, other guy has other half of the documents. Maybe I split my half of the documents again. Quarter in a safety deposit box, quarter in my house hidden away.


			Need to know who wants this.

			Need to know how far they'll go to get it.


			'''Threat Modelling:'''

	- Adversaries		- Adversaries
Line 43:		Line 49:


	'''Capabilities:'''
			== '''Capabilities:''' ==


	- Who knows the secret exists? (If they don't know it exists, they won't come looking for it)		- Who knows the secret exists? (If they don't know it exists, they won't come looking for it)
Line 51:		Line 59:


	Defenses:		'''Defenses:'''

	- Convince world secret doesn't exist.		- Convince world secret doesn't exist.
Line 62:		Line 70:


	Risks:		'''Risks:'''

	- Disclosure.		- Disclosure.
Line 79:		Line 87:


	Security Tech:		'''Security Tech:'''

	- Lava Lamps for entropy (Cloudflare) (If I put a hidden camera in that room, and I get their source code, they're compromised)		- Lava Lamps for entropy (Cloudflare) (If I put a hidden camera in that room, and I get their source code, they're compromised)
Line 105:		Line 113:


	Homework: ~~CUlearn~~: List security techs you use/interact, and which ones do you not actually understand.		== Homework: ==
			CuLearn: List security techs you use/interact, and which ones do you not actually understand.

Calvin: /* Notes */

2018-01-16T19:59:39Z

Notes

← Older revision		Revision as of 19:59, 16 January 2018
Line 1:		Line 1:
	==Notes==		==Notes==

			openstack.scs.carleton.ca

			homeostasis.scs.carleton.ca/wiki

			nilofarmansourzadeh@cmail.carleton.ca (TA email)


			'''Alternate Grading Scheme:'''

			10% Participation

			20% Experiences

			20% Assignments

			20% Midterm

			30% Final


			'''Think Exercise:'''

			Secret to cold fusion, Need to keep secret and safe for 20 years

			Minimal people (2) - both need to trust each other. Hard copy (clean print, paper and ink) locked away somewhere secure and dry.
			(safety deposit box in a bank, not hidden under a mattress). I have half of the documents, other guy has other half of the documents.
			Maybe I split my half of the documents again. Quarter in a safety deposit box, quarter in my house hidden away.
			Need to know who wants this. Need to know how far they'll go to get it.


			Threat Modelling:

			- Adversaries

			- Their Capabilities

			- Assume "reasonable" limits (nuclear weapon vs floods vs sledgehammer vs digital virus)


			Threats/Adversaries: Oil Companies, Anarchists, Nation States, Militant Evironmentalists


			'''Capabilities:'''

			- Who knows the secret exists? (If they don't know it exists, they won't come looking for it)
			i.e. once the mad scientist realized what he had, he started trying to hide it.

			- Reverse Engineering: If you try to fake an "accident", how do you falter reverse engineering from what you showed?


			Defenses:

			- Convince world secret doesn't exist.

			- Splitting up the secret.

			- Offline.

			- Cryptography is not viable. 20 years down the line, computers may be able to break that encryption in seconds.


			Risks:

			- Disclosure.

			- Loss of integrity (corrupted)

			- Full Data Loss

			- Is it better for it to be available (partial loss) on a corruption or completely unavailable (total loss)?

			- Should you even use digital storage? NO, too many risks.

			- That being said, you can still use digital tools, so long as you completely destroy the tools used.

			- What happens if you die? Is there a contingency plan?


			Security Tech:

			- Lava Lamps for entropy (Cloudflare) (If I put a hidden camera in that room, and I get their source code, they're compromised)

			- Anti Malware

			- SE Linux

			- Firewalls (It's designed to stop certain types of network traffic):

			: - Problems Arise: Sure bad guys might get stopped, but people may get angry since you blocked something they liked.

			: - Host

			: - Perimeter Defense (crunchy on the outside, chewy on the inside), once the perimeter gets bypassed (over, under, through), everything inside is wide open.

			: - Network

			Security theater: All those vaults, bars, steel doors in a bank, just for show (there's probably nothing physical in there).

			: - Bank runs no longer exist. The banks are now government owned/protected. It's a confidence game.

			: - Security Theater is useless for computer/digital.



			Homework: CUlearn: List security techs you use/interact, and which ones do you not actually understand.

Soma at 14:32, 15 January 2018

2018-01-15T14:32:47Z

← Older revision	Revision as of 14:32, 15 January 2018
Line 1:	Line 1:
		==Notes==

Soma: Blanked the page

2018-01-15T14:32:13Z

Blanked the page

← Older revision		Revision as of 14:32, 15 January 2018
Line 1:		Line 1:
	~~==E1 results==~~

	~~9 Firewall~~
	~~8 Windows Defender~~
	~~5 Windows Firewall~~
	~~5 https~~
	~~5 Google Authenticator~~
	~~4 SSL~~
	~~4 Passwords~~
	~~3 VPN~~
	~~3 uBlock Origin~~
	~~3 SSH~~
	~~3 KeePass~~
	~~3 firewall~~
	~~3 Cryptography~~
	~~3 Antivirus~~
	~~3 2FA~~
	~~2 Wireshark~~
	~~2 vpn~~
	~~2 Virtual Machines~~
	~~2 Valve Anti Cheat~~
	~~2 traceroute~~
	~~2 password~~
	~~2 OpenVPN~~
	~~2 netstat~~
	~~2 Netcat~~
	~~2 md5sum~~
	~~2 Malwarebytes Anti-Malware~~
	~~2 Malwarebytes~~
	~~2 HTTPS~~
	~~2 Filevault~~
	~~2 encryption~~
	~~2 Anti-virus~~
	~~2 antivirus~~
	~~2 access control~~

Soma: Created page with "==E1 results== 9 Firewall 8 Windows Defender 5 Windows Firewall 5 https 5 Google Authenticator 4 SSL 4 Passwords 3 VPN 3..."

2018-01-15T14:31:14Z

Created page with "==E1 results== 9 Firewall 8 Windows Defender 5 Windows Firewall 5 https 5 Google Authenticator 4 SSL 4 Passwords 3 VPN 3..."

New page

==E1 results==

9 Firewall
8 Windows Defender
5 Windows Firewall
5 https
5 Google Authenticator
4 SSL
4 Passwords
3 VPN
3 uBlock Origin
3 SSH
3 KeePass
3 firewall
3 Cryptography
3 Antivirus
3 2FA
2 Wireshark
2 vpn
2 Virtual Machines
2 Valve Anti Cheat
2 traceroute
2 password
2 OpenVPN
2 netstat
2 Netcat
2 md5sum
2 Malwarebytes Anti-Malware
2 Malwarebytes
2 HTTPS
2 Filevault
2 encryption
2 Anti-virus
2 antivirus
2 access control