Computer and Network Security
CS494/594            Class 2   9/5/06

Topics

• PGP usage
• UNIX vulnerabilities and countermeasures
• anatomy of a breakin
• lecture slides (pdf)
• assignment 3

Required reading

• Text: Chapter 19.1, 19.2
• gpg man page
• Why Johnny can't encrypt PGP usage
• Thompson's Reflections on trusting trust
• Paxson's How to 0wn the Internet in Your Spare Time
• stack overflow tutorial Input is EVIL

Additional reading

• GnuPG gpg, OpenPGP RFC 2440

  UNIX

• sniffer FAQ
• an evening with Berferd monitoring the attacker
• The Internet Worm Program: An Analysis '88 Morris worm or '01 linux ramen worm
• CERT's UNIX configuration guide
• UNIX tools from CIAC or COAST
• secure UNIX programming FAQ
• CERT's security articles
• common vulnerabilities and exposures
• Spafford's book Practical UNIX & Internet Security
• newsgroup comp.security.unix or comp.security.announce or CERT security alerts and bugtraq mailing list
• reliability of UNIX utilities and fuzz testing
• StackGuard's buffer overflow gcc enhancement and paper
• intro to buffer overflows and smash attacks and defensive programming
• defeating compiler-level buffer overflow protection
• rlogin overflow vulnerability
• stackguard for gcc
• Phrack's bypassing stackguard
• securing memory
• safestr library
• limiting buffer overflows with ExecShield
• NX bit no exec bit
• PaX project randomized storage and here
• microsoft vista address space randomization ALSR or here
• Intel's itanium architecture and stack overflows
• heap overflows
• extended attributes and access control lists (ACL) for linux
• bastille Linux and NSA's security enhanced linux
• trustix secure linux or EnGarde secure linux
• OpenBSD security
• as always, cruise the security page