ch.10 Security

Question 1

threat model

Answer 1

a formal model of the actions that an attacker can & cannot perform (aka a trusted computing base or components that an attacker can & cannot perform)

Question 2

what are 4 that an attacker must follow? (aka model)

Answer 2

1. cannot read memory
2. directly access code on system
3. break encryption
4. cannot impersonate a system

Question 3

what does an un-sanitized input?

Answer 3

a system doesn’t validate input before using it (therefore we should always check user input before using it)

Question 4

what are side channels?

Answer 4

information is leaked in indirect ways -> for instance different timing could allow for a password to be guessed if it awas 1 ms for a correct and 2 ms for an incorrect value)

Question 5

what is security through obscurity?

Answer 5

the attacker does not know what program we are executing

Question 6

what does an attacker observe/control in a single node system?

Answer 6

1. observe the timing of actions
2. observe the inputs / outputs of the system
3. control the inputs to the system

Question 7

what does an attacker observer in a multi node system?

Answer 7

observe messages sent between nodes
drop messages sent between nodes
change messages sent between nodes