![Computer Security and Privacy/ Physical Security
āThe most robustly secured
computer that is left sitting
unattended in an unlocked room
is not at all secure !!ā
[Chuck Easttom]](https://image.slidesharecdn.com/chapter1security-240103152348-3d46ed35/85/chapter-1-security-ppt-18-320.jpg)
![Computer Security and Privacy/ Physical Security
Physical security protects your physical computer
facility (your building, your computer room, your
computer, your disks and other media) [Chuck
Easttom].
Physical security is the use of physical controls to
protect premises, site, facility, building or other
physical asset of an organization [Lawrence Fennelly]](https://image.slidesharecdn.com/chapter1security-240103152348-3d46ed35/85/chapter-1-security-ppt-19-320.jpg)
chapter 1 security.ppt
- 1. Computer security (Itecā¦ 3CrHr) Department of Computer Science Admas university Mekanisa campus Set by: HabtamuB.
- 2. Computer Security and Privacy āThe most secure computers are those not connected to the Internet and shielded from any interferenceā
- 3. Computer Security and Privacy Computer security is about provisions and policies adopted to protect information and property from theft, corruption, or natural disaster while allowing the information and property to remain accessible and productive to its intended users.
- 4. Computer Security and Privacy Network security on the other hand deals with provisions and policies adopted to prevent and monitor unauthorized access, misuse, modification, or denial of the computer network and network- accessible resources. Internet Not Sufficient!!
- 5. Computer Security and Privacy Elements of Security Integrity Confidentiality Availaibility
- 6. Spoofing Attack Brut Force Attack: Malware Attack: Virus/Worm Attack SMURF Attack: SYN Attack Trojan Horse Logic Bomb Ping of Death Packet Sniffing Eavesdropping Cracking Session Hijacking War Dialing DoS/DDoS Blackout/ Brownout Serge/Spike Traffic Analysis Wire Tapping Assignment: ā¢ Form a group of Three. ā¢ Read about these security attack related keywords and write a five page (maximum) summary of your findings including any recorded history of significant damages created by these attacks. ā¢ Send your report by email in word format after two weeks (Use your names as the file name:[email protected]). ā¢ Bonus: While reading, if you find keywords other than these, send them on the second page of your report. ā¢ Finally prepare for presentation. Computer Security and Privacy
- 7. Course Outline 1.Fundamentals of computer security & privacy ļ§ Overview: history, vulnerabilities, countermeasures, physical security 2.Computer security attacks/threats ļ§ Viruses, Worms, Trojan horses, Crackers, Spy-wares ā¦ 3.Cryptography and Encryption Techniques 4.Network security concepts and mechanisms ļ§ Transport and Application layer security, IP security, ā¦ 5.Security mechanisms and techniques ļ§ Authentication, access control, firewall, ā¦ 6.Secure system planning and administration ļ§ Analysing risks, planning, policies and procedures 7.Information Security ļ§ Legal, ethical and policy issues
- 8. References 1. Computer security basics, D. Russel and G. Gangemi 2. Security Complete, BPB Publications 3. Computer Security Fundamentals, Chuck Easttom 4. Network Security Essentials, W. Stallings 5. Effective Physical Security, Lawrence Fennelly 6. Information Security Policies and Procedures, Thomas R. Peltier 7. Physical Security for IT, Erbschloe Michael 8. Computer Security: Art and Science, Matt Bishop 9. Computer Security, Dicter Gouman, John Wiley & Sons 10. Computer Security: Art and Science, Mathew Bishop, Addison-Wesley 11. Principles of Information Security, Whitman, Thomson. 12. Network security, Kaufman, Perl man and Speciner, Pearson Education. 13. Cryptography and Network Security, 5th Edition William Stallings, Pearson Education 14. Introduction to Cryptography, Buchmann, Springer.
- 9. Computer Security and Privacy/ Overview Security: The prevention and protection of computer assets from unauthorized access, use, alteration, degradation, destruction, and other threats. Privacy: The right of the individual to be protected against intrusion into his personal life or affairs, or those of his family, by direct physical means or by publication of information. Security/Privacy Threat: Any person, act, or object that poses a danger to computer security/privacy. Definitions
- 10. Computer Security and Privacy/Attacks Prevention oTo prevent someone from violating a security policy Detection: oTo detect activities in violation of a security policy oVerify the efficacy of the prevention mechanism Recovery oStop policy violations (attacks) oAssess and repair damage oEnsure availability in presence of an ongoing attack oFix vulnerabilities for preventing future attack. oRetaliation against the attacker Goals of Security
- 11. Computer Security and Privacy/Attacks Interruption: An attack on availability ļ E.g. DOS Attack Interception: An attack on confidentiality ļ E.g. Eyes dropper Modification: An attack on integrity ļ E.g. Hacker Fabrication: An attack on authenticity ļ E.g. Man in the middle (MITM) Repudiation of origin: False denial that an entity created something. Categories of Attacks(Common security attacks)
- 12. Computer Security and Privacy/Attacks ļDisclosure: Disclosure: unauthorized access to information oSpoofing ļDeception: acceptance of false data. oModification, masquerading/spoofing, repudiation of origin, denial of receipt. oModification ļDisruption: interruption/prevention of correct interruption/prevention of correct operation oModification ļUsurpation: Usurpation: unauthorized control of a system unauthorized control of a system component oModification, masquerading/spoofing, delay, denial of service Classes of Threats (Shirley)
- 13. Computer Security and Privacy/Attacks Categories of Attacks/Threats (W. Stallings) Normal flow of information Interruption Interception Modification Fabrication Source Destination Attack
- 14. Computer Security and Privacy/Vulnerabilities Physical vulnerabilities (Ex. Buildings) Natural vulnerabilities (Ex. Earthquake) Hardware and Software vulnerabilities (Ex. Failures) Media vulnerabilities (Ex. Disks can be stolen) Communication vulnerabilities (Ex. Wires can be tapped) Human vulnerabilities (Ex. Insiders) Types of Vulnerabilities
- 15. Computer Security and Privacy/ Countermeasures Computer security controls ļAuthentication (Password, Cards, Biometrics) (What we know, have, are!) ļEncryption ļAuditing ļAdministrative procedures ļStandards ļCertifications ļPhysical Security ļLaws
- 16. Computer Security and Privacy/ The Human Factor The human factor is an important component of computer security Some organizations view technical solutions as ātheir solutionsā for computer security. However: ļ Technology is fallible (imperfect) ļ Ex. UNIX holes that opened the door for Morris worm ļ The technology may not be appropriate ļ Ex. It is difficult to define all the security requirements and find a solution that satisfies those requirements ļ Technical solutions are usually (very) expensive ļ Ex. Antivirus purchased by ETC to protect its Internet services ļ Given all these, someone, a human, has to implement the solution
- 17. Computer Security and Privacy/ The Human Factor Competence of the security staff ļEx. Crackers may know more than the security team Understanding and support of management ļEx. Management does not want to spend money on security Staffās discipline to follow procedures ļEx. Staff members choose simple passwords Staff members may not be trustworthy ļEx. Bank theft
- 18. Computer Security and Privacy/ Physical Security āThe most robustly secured computer that is left sitting unattended in an unlocked room is not at all secure !!ā [Chuck Easttom]
- 19. Computer Security and Privacy/ Physical Security Physical security protects your physical computer facility (your building, your computer room, your computer, your disks and other media) [Chuck Easttom]. Physical security is the use of physical controls to protect premises, site, facility, building or other physical asset of an organization [Lawrence Fennelly]
- 20. Computer Security and Privacy/ Physical Security In the early days of computing physical security was simple because computers were big, standalone, expensive machines ļIt is almost impossible to move them (not portable) ļThey were very few and it is affordable to spend on physical security for them ļManagement was willing to spend money ļEverybody understands and accepts that there is restriction
- 21. Computer Security and Privacy/ Physical Security => Physical security is much more difficult to achieve today than some decades ago
- 22. Computer Security and Privacy/ Physical Security Natural Disasters ļ Fire and smoke ļ Fire can occur anywhere ļ Solution ā Minimize risk Good policies: NO SMOKING, etc.. Fire extinguisher, good procedure and training Fireproof cases (and other techniques) for backup tapes Fireproof doors ļ Climate ļ Heat ļ Direct sun ļ Humidity Threats and vulnerabilities
- 23. Computer Security and Privacy/ Physical Security Natural Disasters ā¦ ļ Hurricane, storm, cyclone ļ Earthquakes ļ Water ļ Flooding can occur even when a water tab is not properly closed ļ Electric supply ļ Voltage fluctuation Solution: Voltage regulator ļ Lightning Threats and vulnerabilities ā¦ Solution ļ Avoid having servers in areas often hit by Natural Disasters!
- 24. Computer Security and Privacy/ Physical Security People ļIntruders ļInternal Thieves ļ Thieves ļ People who have been given access unintentionally by the insiders ļ Employees, contractors, etc. who have access to the facilities ļExternal thieves ļ Portable computing devices can be stolen outside the organizationās premises Loss of a computing device ļMainly laptop Threats and vulnerabilities ā¦
- 25. Computer Security and Privacy/ Physical Security Safe area Safe area often is a locked place where only authorized personnel can have access Organizations usually have safe area for keeping computers and related devices
- 26. Computer Security and Privacy/ Physical Security Is the area inaccessible through other openings (window, roof-ceilings, ventilation hole, etc.)? ļDesign of the building with security in mind ļKnow the architecture of your building Safe area ā¦ Challenges During opening hours, is it always possible to detect when unauthorized person tries to get to the safe area? ļSurveillance/guards, video-surveillance, automatic- doors with security code locks, alarms, etc. ļPut signs so that everybody sees the safe area
- 27. Computer Security and Privacy/ Physical Security Are the locks reliable? ļ The effectiveness of locks depends on the design, manufacture, installation and maintenance of the keys! ļ Among the attacks on locks are: ļ Illicit keys Duplicate keys Avoid access to the key by unauthorized persons even for a few seconds Change locks/keys frequently Key management procedure Lost keys Notify responsible person when a key is lost There should be no label on keys ļ Circumventing of the internal barriers of the lock Directly operating the bolt completely bypassing the locking mechanism which remains locked ļ Forceful attacks: Punching, Drilling, Hammering, etc. Safe areaā¦Locks
- 28. Computer Security and Privacy/ Physical Security Surveillance with guards ļThe most common in Ethiopia ļNot always the most reliable since it adds a lot of human factor ļNot always practical for users (employees donāt like to be questioned by guards wherever they go) Safe areaā¦ Surveillance
- 29. Computer Security and Privacy/ Physical Security Safe areaā¦ Surveillance Surveillance with video ļ Uses Closed Circuit Television (CCTV) ļ Started in the 1960s ļ Become more and more popular with the worldwide increase of theft and terrorism ļ Advantages ļ A single person can monitor more than one location ļ The intruder doesnāt see the security personnel ļ It is cheaper after the initial investment ļ It can be recorded and be used for investigation ļ Since it can be recorded the security personnel is more careful ļ Todayās digital video-surveillance can use advanced techniques such as face recognition to detect terrorists, wanted people, etc. ļ Drawback ļ Privacy concerns
- 30. Computer Security and Privacy/ Physical Security Choose employees carefully ļPersonal integrity should be as important a factor in the hiring process as technical skills Create an atmosphere in which the levels of employee loyalty, morale, and job satisfaction are high Remind employees, on a regular basis, of their continuous responsibilities to protect the organizationās information Internal Human factor - Personnel
- 31. Computer security/ Attacks & Threats A computer security threat is any person, act, or object that poses a danger to computer security Computer world is full of threats! ā¦ refer to the first assignmentā¦ And so is the real world! ļThieves, pick-pockets, burglars, murderers, drunk drivers, ā¦
- 32. Computer security/ Attacks & Threats What is the right attitude? ļ To do what you do in real life What do you do in real life? ļ You learn about the threats ļ What are the threats ļ How can these threats affect you ļ What is the risk for you to be attacked by these threats ļ How you can protect yourself from these risks ļ How much does the protection cost ļ What you can do to limit the damage in case you are attacked ļ How you can recover in case you are attacked ļ Then, you protect yourself in order to limit the risk but to continue to live your life You need to do exactly the same thing with computers!
- 33. Computer security/ Attacks & Threats Types of Threats/Attacks ā¦ (Chuck Eastom) Hacking Attack: ļAny attempt to gain unauthorized access to your system Denial of Service (DoS) Attack ļBlocking access from legitimate users Physical Attack: ļStealing, breaking or damaging of computing devices
- 34. Computer security/ Attacks & Threats Malware Attack: ļA generic term for software that has malicious purpose ļExamples ļViruses ļTrojan horses ļSpy-wares ļNew ones: Spam/scam, identity theft, e-payment frauds, etc. Types of Threats/Attacks (Chuck Eastom)
- 35. Computer security/Threats Viruses ļāA small program that replicates and hides itself inside other programs usually without your knowledge.ā Symantec ļSimilar to biological virus: Replicates and Spreads Malware Attack: Worms ļAn independent program that reproduces by copying itself from one computer to another ļIt can do as much harm as a virus ļIt often creates denial of service
- 36. Computer security/Threats Trojan horses ļ(Ancient Greek tale of the city of Troy and the wooden horse) - ?? ļSecretly downloading a virus or some other type of mal- ware on to your computers. Spy-wares ļāA software that literally spies on what you do on your computer.ā ļExample: Simple Cookies and Key Loggers Malware Attackā¦
- 37. Computer security/Threats Infection mechanisms ļFirst, the virus should search for and detect objects to infect ļInstallation into the infectable object ļWriting on the boot sector ļAdd some code to executable programs ļAdd some code to initialization/auto-executable programs ļā¦ Most software based attacks are commonly called Viruses: How do viruses work?
- 38. Computer security/Threats Trigger mechanism ļDate ļNumber of infections ļFirst use How do viruses work? ā¦ Effects: It can be anything ļA message ļDeleting files ļFormatting disk ļOverloading processor/memory ļEtc.
- 39. Computer security/Threats Adolescents ļEthically normal and of average/above average intelligence. ļTended to understand the difference between what is right and wrong ļTypically do not accept any responsibility for problems caused Who Writes Virus
- 40. Computer security/Threats The College Student ļEthically normal ļAre not typically concerned about the results of their actions related to their virus writing Who Writes Virus ā¦ The Adult (smallest category) ļEthically abnormal
- 41. Computer security/Threats Three categories ļScanners ļActivity monitors ļChange detection software Anti-Virus There are ļGeneric solutions ļEx. Integrity checking ļVirus specific solution ļEx. Looking for known viruses
- 42. Types of Antivirus 1. AVG(Anti Virus Garden) the first most popular anti virus software It can download freely from internet 2. MacAfee the second most popular anti virus software 3. Norton the third most popular anti virus software and it cheeks and delete virus from a computer
- 43. Computer security/Threats Functions of anti-viruses ļIdentification of known viruses ļDetection of suspected viruses ļBlocking of possible viruses ļDisinfection of infected objects ļDeletion and overwriting of infected objects Anti-Virus ā¦
- 44. Computer security/Threats Hacking: is any attempt to intrude or gain unauthorized access to your system either via some operating system flaw or other means. The purpose may or may not be for malicious purposes. Hackers/Intrusion Attack: Cracking: is hacking conducted for malicious purposes.
- 45. Computer security/Threats DoS Attack: is blocking access of legitimate users to a service. Denial of Service (DoS) Attack: Distributed DoS Attack: is accomplished by tricking routers into attacking a target or using Zumbie hosts to simultaneously attack a given target with large number of packets.
- 46. Computer security/Threats Simple illustration of DoS attack (from Easttom) C:>Ping <address of X> -l 65000 āw 0 -t Ping Ping Ping Ping Web Server X Legitimate User