SystemsSec 2018W Lecture 3 - Revision history

Soma at 06:49, 30 January 2018

2018-01-30T06:49:44Z

← Older revision		Revision as of 06:49, 30 January 2018
Line 1:		Line 1:
			==Audio==

			[http://homeostasis.scs.carleton.ca/~soma/systemssec-2018w/lectures/comp4108-2018w-lec03-15Jan2018.m4a Lecture 3 Audio]

	==Notes==		==Notes==
	Class 3, January 15		Class 3, January 15

Soma at 06:48, 30 January 2018

2018-01-30T06:48:51Z

← Older revision		Revision as of 06:48, 30 January 2018
Line 1:		Line 1:
	= Notes =		==Notes==
	Class 3, January 15		Class 3, January 15

	== 1st Era (Time Sharing Systems) ==		===1st Era (Time Sharing Systems)===
	Computing originated from cracking codes during WWII and initial computer security came from physical security measures put in place to limit physical access to the machine.		Computing originated from cracking codes during WWII and initial computer security came from physical security measures put in place to limit physical access to the machine.

Line 19:		Line 19:
	However the number of people with knowledge about these systems was limited and all of them could easily circumvent the policy.		However the number of people with knowledge about these systems was limited and all of them could easily circumvent the policy.

	== 2nd Era (Personal Computers) ==		===2nd Era (Personal Computers)===
	Computers for personal use. Peer to peer file sharing (via floppy disks, etc...). This era of personal computers is all about copy protection and piracy as files could now be shared among peers and copied onto their own computer.		Computers for personal use. Peer to peer file sharing (via floppy disks, etc...). This era of personal computers is all about copy protection and piracy as files could now be shared among peers and copied onto their own computer.

Line 31:		Line 31:
	Mostly driven by people's desire to share games with their friends, the widespread sharing of software from unknown sources allowed for "malicious" programs to spread. When you introduce file-sharing between computers you get the invention of computer viruses (malicious software) and anti-virus software (added policy to protect resources).		Mostly driven by people's desire to share games with their friends, the widespread sharing of software from unknown sources allowed for "malicious" programs to spread. When you introduce file-sharing between computers you get the invention of computer viruses (malicious software) and anti-virus software (added policy to protect resources).

	== 3rd Era (Networking) ==		===3rd Era (Networking)===
	Once you start networking computers together, both the previous era problems are now combined and become much more important. As computers are now interconnected, attacks are possible through the internet. An example is the [https://en.wikipedia.org/wiki/Morris_worm Morris Worm] that was a combination of various software bugs used to circumvent access controls. Although it had no malicious intent behind the creation, a bug in the code made it continue to duplicate itself and crash the system.		Once you start networking computers together, both the previous era problems are now combined and become much more important. As computers are now interconnected, attacks are possible through the internet. An example is the [https://en.wikipedia.org/wiki/Morris_worm Morris Worm] that was a combination of various software bugs used to circumvent access controls. Although it had no malicious intent behind the creation, a bug in the code made it continue to duplicate itself and crash the system.

Line 55:		Line 55:
	"The internet today is a result of evolution."		"The internet today is a result of evolution."

	= E1 results =		===E1 results===
	9 Firewall		9 Firewall
	8 Windows Defender		8 Windows Defender

Yannick: /* 3rd Era (Networking) */

2018-01-19T23:50:38Z

3rd Era (Networking)

← Older revision		Revision as of 23:50, 19 January 2018
Line 32:		Line 32:

	== 3rd Era (Networking) ==		== 3rd Era (Networking) ==
	~~Computers~~ are now interconnected, attacks are possible through the internet. ~~See~~ [https://en.wikipedia.org/wiki/Morris_worm Morris Worm]		Once you start networking computers together, both the previous era problems are now combined and become much more important. As computers are now interconnected, attacks are possible through the internet. An example is the [https://en.wikipedia.org/wiki/Morris_worm Morris Worm] that was a combination of various software bugs used to circumvent access controls. Although it had no malicious intent behind the creation, a bug in the code made it continue to duplicate itself and crash the system.

	~~More~~ complicated security measures necessary. ~~From an attackers~~ perspective: find exploits, infect systems~~. From a defenders~~ perspective: find exploits before they're used, patch them, or patch exploits after they're used.		It was determined that more complicated security measures were necessary.
			; Attackers perspective
			: find exploits
			: infect systems
			; Defenders perspective
			: find exploits before they're used
			: patch them
			: or patch exploits after they're used.

	~~"The internet today is a result of~~ evolution."		; Unix Directory System
			: Labels for processes, files, directories, read/write/execute permissions.
			: Users: UID
			: Groups: GID
			: Designed for multi-user systems. Works for single user systems as some processes require more permissions than others. Still in place due to legacy systems. Is considered robust due to evolution.

	~~''' Unix Directory System '''~~		; Military : The military and intelligence organizations cared about security from the beginning. Developed their own systems to enforce classification levels. Was convoluted and is no longer in use.
	** Labels for processes, files, directories, read/write/execute permissions.
	*** Users: UID
	*** Groups: ~~GID~~
	* Designed for multi-user systems. ~~Works for single user~~ systems ~~as some processes require more permissions than others~~. ~~Still~~ in ~~place due to legacy systems. Is considered robust due to evolution~~.

	~~''' Military '''~~
	~~The military~~ and ~~intelligence organizations cared about security from the beginning. Developed their own systems~~ to ~~enforce classification levels~~. ~~Was convoluted and~~ is ~~no longer in use~~.		You can understand any mechanism by looking at where it came from and what problem it was designed to solve.
			"The internet today is a result of evolution."

	= E1 results =		= E1 results =

Yannick: /* 2nd Era (Personal Computers) */

2018-01-19T23:35:53Z

2nd Era (Personal Computers)

← Older revision		Revision as of 23:35, 19 January 2018
Line 29:		Line 29:


	Mostly driven by people's desire to share games with their friends, the widespread sharing of software from unknown sources allowed for "malicious" programs to spread. When you introduce ~~networking~~ you get the invention of computer viruses (malicious software) and anti-virus software (added policy to protect resources).		Mostly driven by people's desire to share games with their friends, the widespread sharing of software from unknown sources allowed for "malicious" programs to spread. When you introduce file-sharing between computers you get the invention of computer viruses (malicious software) and anti-virus software (added policy to protect resources).

	== 3rd Era (Networking) ==		== 3rd Era (Networking) ==

Yannick: /* 2nd Era (Personal Computers) */

2018-01-19T23:34:48Z

2nd Era (Personal Computers)

← Older revision		Revision as of 23:34, 19 January 2018
Line 20:		Line 20:

	== 2nd Era (Personal Computers) ==		== 2nd Era (Personal Computers) ==
	Computers for personal use. Peer to peer file sharing (via floppy disks, etc...).		Computers for personal use. Peer to peer file sharing (via floppy disks, etc...). This era of personal computers is all about copy protection and piracy as files could now be shared among peers and copied onto their own computer.

	~~The~~ era of personal computers ~~introduced~~ copy protection and piracy as files could now be shared among peers and copied onto their own computer.

	; Copy protection		; Copy protection
Line 31:		Line 29:


	~~Sharing~~ software from unknown sources allowed for "malicious" programs to spread. ~~The~~ invention of computer viruses and ~~therefore~~ anti-virus software.		Mostly driven by people's desire to share games with their friends, the widespread sharing of software from unknown sources allowed for "malicious" programs to spread. When you introduce networking you get the invention of computer viruses (malicious software) and anti-virus software (added policy to protect resources).

	== 3rd Era (Networking) ==		== 3rd Era (Networking) ==

Yannick: /* 1st Era (Time Sharing) */

2018-01-19T23:28:00Z

1st Era (Time Sharing)

← Older revision		Revision as of 23:28, 19 January 2018
Line 2:		Line 2:
	Class 3, January 15		Class 3, January 15

	== 1st Era (Time Sharing) ==		== 1st Era (Time Sharing Systems) ==
	Computing originated from cracking codes during WWII.		Computing originated from cracking codes during WWII and initial computer security came from physical security measures put in place to limit physical access to the machine.

	~~Initial computer security came from physical~~ security. ~~Security measures~~ were ~~put in place~~ to ~~limit physical~~ access.		; Mainframes
			: Large, powerful computers. Early models of which implemented no implicit security. It was based on access to the system.
			: Batch Processing: Processing written programs in batches. Programs were written offline then queued to be ran one after the other.
			: Programmers didn't actually interact with the computer, the code went through Operators.
			: Switched to time sharing which allowed many users to access the same machine concurrently through multiple terminals.

	~~; Mainframes : Large, powerful computers. Early models of which implemented no implicit security. It was based on access~~ to ~~the system.~~		Eventually people started wanting more time and resources with the computer and this caused the organization (HR) to start creating '''policy''' to manage the mainframe. Creating these policies lead to the computer getting the power to say 'No' to operations, which is the early creation of software based access control.
	~~; Batch Processing: Processing written programs in batches. Programs were written offline then queued~~ to ~~be ran one after~~ the ~~other~~.
	~~; Time Sharing :An environment option for Mainframes. They allowed many users~~ to ~~access~~ the ~~same machine concurrently.~~

	~~This caused a need for~~ computer ~~systems security. Policies were developed (more organizational policies than strict security)~~, early creation of software based access control.
	; Access control		; Access control
	: Users, Groups		: Users, Groups
	: Permissions		: Permissions
	: ACLs (Access control list)		: ACLs (Access control list)

			However the number of people with knowledge about these systems was limited and all of them could easily circumvent the policy.

	== 2nd Era (Personal Computers) ==		== 2nd Era (Personal Computers) ==

Yannick: /* Notes */

2018-01-19T23:15:34Z

Notes

← Older revision		Revision as of 23:15, 19 January 2018
Line 1:		Line 1:
	= Notes =		= Notes =
	Class 3, January 12		Class 3, January 15

	== 1st Era (Time Sharing) ==		== 1st Era (Time Sharing) ==

Erik B: fixing formatting

2018-01-19T05:58:39Z

fixing formatting

← Older revision		Revision as of 05:58, 19 January 2018
Line 24:		Line 24:
	; Copy protection		; Copy protection
	: any effort designed to prevent the reproduction of software, films, music, and other media, usually for copyright reasons.		: any effort designed to prevent the reproduction of software, films, music, and other media, usually for copyright reasons.
	; essentially telling a personal computer not to do what it was made to do.		: essentially telling a personal computer not to do what it was made to do.

	; Piracy : the unauthorized use or reproduction of another's work.		; Piracy : the unauthorized use or reproduction of another's work.

Erik B: Added notes.

2018-01-19T05:57:24Z

Added notes.

@@ Line 1: / Line 1: @@
-==E1 results==
+= Notes =
 Firewall
 Windows Defender

Soma: Created page with "==E1 results== 9 Firewall 8 Windows Defender 5 Windows Firewall 5 https 5 Google Authenticator 4 SSL 4 Passwords 3 VPN 3..."

2018-01-15T14:32:21Z

Created page with "==E1 results== 9 Firewall 8 Windows Defender 5 Windows Firewall 5 https 5 Google Authenticator 4 SSL 4 Passwords 3 VPN 3..."

New page

==E1 results==

9 Firewall
8 Windows Defender
5 Windows Firewall
5 https
5 Google Authenticator
4 SSL
4 Passwords
3 VPN
3 uBlock Origin
3 SSH
3 KeePass
3 firewall
3 Cryptography
3 Antivirus
3 2FA
2 Wireshark
2 vpn
2 Virtual Machines
2 Valve Anti Cheat
2 traceroute
2 password
2 OpenVPN
2 netstat
2 Netcat
2 md5sum
2 Malwarebytes Anti-Malware
2 Malwarebytes
2 HTTPS
2 Filevault
2 encryption
2 Anti-virus
2 antivirus
2 access control