《操作系统教学资料》2013-CHAP8.pdfVIP

Chapter8 Security(安全) 8.1 Introduction(引言) 8.2 Type of Threats (安全威胁类型) 8.3 Protection(保护) 8.4 Terminology (术语) Security (安全) 8.1 Introduction(引言) Security includes: Computer security •the collection of system tools designed to protect data and resist intrusion Network security •the facilities needed to protect data during transmission Security (安全) 8.1 Introduction(引言) Security Objectives: CIA Triad Confidentiality a loss of confidentiality is the unauthorized disclosure of information Integrity a loss of integrity is the unauthorized modification or destruction of information Availability a loss of availability is the disruption of access to or use of information or an information system Security (安全) 8.1 Introduction(引言) Two further concepts are often added to the core of computer security: Authenticity •The property of being genuine and being able to be verified and trusted; confidence in the validity of a transmission, a message, or message originator •Verifying that users are who they say they are and that each input arriving at the system came from a trusted source Accountability •The security goal that generates the requirement for actions of an entity to be traced uniquely to that entity Security (安全) 8.2 Type of Threats(安全威胁类型) In a normal flow of information we assume that Bob is the information source sending data to Alice. The Bandit cannot get involved in the transmission.