What is Computer Security? CSM27 Computer Security Dr Hans Georg - PowerPoint PPT Presentation

What is Computer Security? CSM27 Computer Security Dr Hans Georg Schaathun University of Surrey Autumn 2009 – Week 1 Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 1 / 38

The module Security in our Department Introduction to Multimedia Security Watermarking Cryptography Network Security Computer Security Web Security Many modules ⇒ Very specialised Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 2 / 38

The module Module Objectives understand and be able to use formal models for computer security be able to avoid the many security pitfalls in computer system and software development apply defences against obvious and less obvious threats be able critically to evaluate security at each stage of the development process Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 3 / 38

The module This module We will not deal with network security cryptography Our focus will tend towards The general and high-level The theoretical and formal Unfortunately, this means relatively few hands-on activities Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 4 / 38

The session Session objectives Establish a common terminology to discuss (computer) security Be able to distinguish between vulnerabilities , threats , and attacks Get a glimpse of the wide range of threats Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 5 / 38

The problem Yellow Stickers Exercise Sit in groups of 3-5. Write down all computer security problems that you can think of. One problem per yellow sticker. Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 6 / 38

The problem Three faces of security Outline The module 1 The session 2 The problem 3 Three faces of security Two companions of security Risk analysis 4 Risk analysis Threats and Vulnerabilities Attacks Solutions Defining Computer Security Exercise 5 Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 7 / 38

The problem Three faces of security Confidentiality Talking of security, we often mean confidentiality. Unauthorised entities cannot get information. Is it sufficient that they cannot get all the information? Are we allowed to leak a single bit? Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 8 / 38

� � The problem Three faces of security Complete confidentiality Put the computer in a locked steel box, set it in concrete, and sink it in the ocean. � � � � Data � � � � � Is this good enough? The information is no good to anyone. Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 9 / 38

The problem Three faces of security Availability Definition (Availability) The system is accessible and useable upon demand by an authorised entity. Can we maintain availability and confidentiality at the same time? Denial of Service (DoS) attacks violate availability. E.g. a horde of computers send dummy request to a web server, causing a congestion which prevents legitimate users from using the web services in a timely fasion. Potentially costly damage. Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 10 / 38

The problem Three faces of security Integrity Definition (Integrity) The state of the system or data can only be changed by an authorised entity. If integrity is not ensured. I could change your bank account to send money to my Swiss bank account. We could forge a file to incriminate the PM. You cannot trust your computer. Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 11 / 38

The problem Three faces of security The three faces of security Integrity Availability Security Confidentiality Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 12 / 38

The problem Three faces of security Exercise Return to your groups. Take a handful of yellow stickers (not necessarily your own) For each one decide what kind of security problem it is, Integrity, Confidentiality, Availability? Two or three of the above? Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 13 / 38

The problem Two companions of security Outline The module 1 The session 2 The problem 3 Three faces of security Two companions of security Risk analysis 4 Risk analysis Threats and Vulnerabilities Attacks Solutions Defining Computer Security Exercise 5 Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 14 / 38

The problem Two companions of security Security threats Security is concerned with Intentional attacks Security is not (usually) concerned with Accidental mistakes (human error) Random, accidental events Yet, the three kinds of events are similar Similar protection Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 15 / 38

The problem Two companions of security Reliability Reliability is concerned with damage or loss due to accidental and random events Reliability and security issues may overlap Fire can be accidental (reliability); or it can be arson (security) Reliability and security issues can enforce eachother A laptop with confidential data is lost on the train; the finder happens to have criminal intent Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 – Week 1 16 / 38

What is Computer Security? CSM27 Computer Security Dr Hans Georg - PowerPoint PPT Presentation

What is Computer Security? CSM27 Computer Security Dr Hans Georg Schaathun University of Surrey Autumn 2009 Week 1 Dr Hans Georg Schaathun What is Computer Security? Autumn 2009 Week 1 1 / 38 The module Security in our Department

Introduction to Computer Security Rev. Sept 2015 What is Computer Security? 2 Computer

Quick Intro to Computer Security What is computer security? Securing communication

Introduction to Computer Security Why do we need computer security? What are our goals and

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Introduction Attacks Security Goals Fall 2010 CS 334 Computer Security 1 What is Computer

Computer Security Foundations What is Security? Attacker Assets Threat Counter- measure

Basic Ciphers Computer Security: Ensure security of data kept on the computer Ahmet Burak

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

CS 480/ 557 Computer Security I ntroduction to I nf ormation 1. Physical Security 2.Human

CSE 543 - Computer Security Lecture 11 - OS Security October 2, 2007 URL:

Computer Security http://security.di.unimi.it/sicurezza1819/ Chapter 3: 1 Chapter 3:

Computer Security 3e Security.di.unimi.it/sicurezza1314 Chapter 3: 1 Chapter 3: Foundations of

Computer Security 3e Security.di.unimi.it/sicurezza1516 Chapter 3: 1 Chapter 3: Foundations of

CSE 543 - Computer Security Lecture 12 - MAC Security October 4, 2007 URL:

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Outline The web from a security perspective CSci 5271 Introduction to Computer Security SQL

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn

Foundations of Network and Foundations of Network and Computer Security Computer Security J ohn