Security in Windows operating system

1. Security in operating system
Student Name : Abdullah I Roomi
Dr:Nabil Hasasneh
Hebron University
College of Information Technology

2. Contents
 The Security Problem
 Program Threats
 System and Network Threats
 User Authentication

3. The Security Problem
 System secure if resources used and accessed as intended under all circumstances
 Unachievable
 Intruders (crackers) attempt to breach security
 Threat is potential security violation
 Attack is attempt to breach security
 Attack can be accidental or malicious
 Easier to protect against accidental than malicious misuse

4. Security Violation Categories
 Breach of confidentiality
 Unauthorized reading of data
 Breach of integrity
 Unauthorized modification of data
 Breach of availability
 Unauthorized destruction of data
 Theft of service
 Unauthorized use of resources
 Denial of service (DOS)
 Prevention of legitimate use

5. Security Violation Methods
 Masquerading (breach authentication)
 Pretending to be an authorized user to escalate privileges
 Replay attack
 As is or with message modification
 Man-in-the-middle attack
 Intruder sits in data flow, masquerading as sender to receiver and vice versa
 Session hijacking
 Intercept an already-established session to bypass authentication

6. Program Threats
 Trap door
 Specific user identifier or password that circumvents normal security procedures
 Buffer overflow
 Exploits a bug in a program (overflow either the stack or memory buffers)
 Failure to check bounds on inputs, arguments
 Viruses
 Code fragment embedded in legitimate program
 Self-replicating, designed to infect other computers
 Very specific to CPU architecture, operating system, applications
 Usually borne via email or as a macro

7. Trap door

8. Buffer overflow
 #include<iostream>
 Int main()
 {
 a[5];
 For( i = 0 ; i< 7;i++)
 a[i]=i;// Exceeded the size and any value expected 0 is true
 }

9. Where viruses live in the program

10. A Boot-sector Computer Virus

11. System and Network Threats
The Morris Internet Worm
 Network threats harder to detect, prevent

12. Authentication using password
 Problem: how does the computer know who you are?
 Solution: use authentication to identify
 This must be done before user can use the system

13. References
 https://view.officeapps.live.com/op/view.aspx?src=http://codex.cs.yale.edu/avi/os-
book/OS9/slide-dir/PPT-dir/ch15.ppt