????? ???? (authentication) : ?? ???

1
?????? ????????? ??? ?????????? ?' ???"?

• ????? 12???? ??????

2
?????

• ?????? ??????? ??????? ???? ?????? ???????
• ?? ????? ????? ??????? ????? ???? ??????
• ????? ??????? ????? ???? ?????? ????? ????? ????
• ???? ?????? ???? ??? ??? ????? ????? ?????
• ????? ???? (authentication) ?? ???
• ?????? (permissions, access control)???? ??????
  ?????? ??? ??????
• ??????? ????? (logging) ?? ??? ???
• ????? ?????? ??????? ?????

3
?????

• ????? ???? ?? ??? ?? ????? ?????
• ????, ???? ??????
• ????? ?? ????? ????
• ????? ????, ????? ???? ????
• ????? ????
• ??? ?????, ?????? ??????
• ????? ?????
• ???? ???? ???????
• ????? ??????? ??? ?????
• ??? ?????, ????

• ??????? ????, ?????? ?????
• ????? ??????
• ?????? ??????
• ???? ???? ?????
• ??????

4
???? ?????

• ???? ????? ??????
• ????? ?? ???? ?? ?? ?? ?????? ?? ?????
• ????? ??? ?????? ?? ??????? ???????
• ????? ???? ???? ????? ???? ?????? ????? ??? ?????
  ????
• ?????? (????? ???? ?? ????? ???????)
• ?????? ????? ??????, ?? ????? ?? ?????? ?????
  ????? (????? ????) ??? ????? ???????
• ???? ??? ?????
• ?????? ?????? ?????? ??????? ???? ?????? ???????
  ?? ???? ???? ???? ??? ???? ???? ????
• ??????? ???? ?????? ?? ????? (???? ?????? ??
  ????) ?/?? ?????? ?????? ????????
• ????? ?????? ???? ????
• ????? ??? ????? ?????? ??? ??? ??? ????? ????? ??
  ??????
• ???? ?????? ?????? ?????? ????

5
??? ????? (malware)???????, ??????, ?????
????????? ???? ???? ????

• ???? ???? ??????? ?????? ?????
• ?????? ???? ?????? ?? ???? ???? ????? ?? ????
  ????
• ???? ?????? ???? ????? ?? ????? ?????? ?????
  ??????? ??????, ?????? ?? ?? ????? ???? ????
• ????? ????? ???????
• ?????? ????? ????? ??????
• plug-ins, ActiveX controls, Java applets ???'
• ?????? ????? ????? ?????? ????????? ?????
• "??????" ?????? ????????
• ?????? ??????? ??????? ???? ???? ???? ?????
• Sony rootkit, Amazon 1984 recall
• ????? ?????? ???? ???? ??? ????? ??????? ?????

6
?????

• Bugmight be a
• Vulnerabilityfor which someone will write an
• Exploitthat hijacks control and runs
• Shellcodethat typically installs a
• Rootkitthat 0wn the computer and hides the
  traces, often making the computer a part of a
• Botnet

7
????? ?????? ???? ?????

• ??????? ?????? ???????? ????? ?? ????
• ??????? ?????? ???? ??????? ?????? ?? ???? ?????
  ???? ??? ????? ?? ?????? ????? ??????? ???
  ??????? ?????? (????? ????)
• ?????? ????????, ??????? ????? ????? ??? ????
  ????? ?? ??? ????? ???
• ?????? ????????? ?? ??? ???? ?????? ?? ??? ????
  ??????? ???? ??????? ???
• ???? ?????? ??? ??????? ????? ?????? ?????? (????
  HTTP ????) ?? ?????? ????????? ?????? ??????
• ????? ???????? ????-????? ??? ????? ??? ?????
  ????, ?? ????? ????? ?? ????????
• ??????? ?? ???? ?????? ??? ???? ????? ????

8
?????? ????? ?????(Denial of Service)

• ????? ????????? ??????? ????? ?????? ????? ?? ???
  ????? ???? ???????? ?????????
• ???? ??? ?????? ?????? ?? ??? ????? ?????? ?????
  ??? ???? ????, ?? ?? ?????? ??????? ????, ????
• ???? HTTP ?????? ????? ??? ????
• ???? ???? ???????? ?????? ???? ???? ??? ????
• ???? ????? ???? ?????? ????? ????? ?? ????? ??
  ????
• ?????? ???? ????? ??? ?????? ??? ???? ???? ??
  ???? ????? ?? ??????, ??? ???? ???? ???????
  ??????? ?? ?????
• ??? ????? ???? ?????? ?? ?????? ????????? ???????

9
????? ???? ???????

• ?????? ??? ?????? ???????? ????
• ????? ????? ??? ?????
• ????? ????? ????? ??????? ????? ??????? ???
  ???????
• ????? ?????? ??????? ???? ?????? ?? ???????? ????
• ?????? ?????? ????? ?? ????? ?? ???????? ????
• ????? ?????? ??????? ?????? ?? ?????? ??? ?????
• ???? ??????, ??? ?????, ??????

10
????? ???????

• ????? (?? ?? ????)
• ????? ??????? ???? ????? ??????? ?? ??? ??????
• ????? ?? ???? ?????? ?? ?????? ???????? ????? ??
  ???????????
• ????? ?????? ???? ??? ????? ???? ?? ??? ??????
• ???? ????? ???????? ?????? ??
• ????? ????? ????? ??????? ????? ?????? (????
  ???/??)
• ????? ????? ??????? ?-Tenex ????? ????? ??
• ???? ?????? ?????? ??????? ???????? ?????? ??
  ????? ?????? ?? ?? ?????? ??????? ???

11
???????? ?????? ???????

• ?????? ??????? ????? ??????? ?????? ????? ??????
• ???? ?? ?????? ??????? ?????? ??????? ??????
  ??????
• ?????? ????? ????? ????? ???????? ???? ?? ??????
  ????
• ?????? ????? ???????? ???? ????? ?? ??/?? ???
  ????? ???????? ??????? ?????? ??????
• ??????? ?????? ????? ??????? ????? ?????? ??????
  ?????? ????? ????? ??????
• ????? ?????? ????? ?? ??????? f(p) ?? ?????? p.
  ??? ??? ??????? ????? ?? p ?????? ???? ?? f(p) ??
  ??? ????? ?? ??????, ??????? ???? ?? p ????????
• ????? ???? ?????? ????, ??? ???? ???????? ????
  ????? ???? ???? ????? ?? ??? ??????? ??????
  (/etc/passwd ????? /etc/shadow )
• ?????? ????? ?????, ???? ???? ???????, ?????
  ?????Security Attention Key (???????
  CtrlAltDel)

12
????? ???? ?????? ???????? ??-??????

• ????? ?? ?????
• ?? ????? ???? ??????? ??????? ?????? ???? ???
• ?????? ????? ?????? ????? ???? ?? ??? ??? ???
  (????)
• ????? ???? ??? ?????? ???? ????? ?? ?????? ???
  ????? ???
• ????? ???? ????? ???????
• ????
• ?????? ????? ?? ????? ?????? ???????? ???? ????
• ????? ???? ?? ?????? ?????? ??? ???? (???? ????
  ????????)
• ???? ?????? ????? ???? ?? ??? ????? ????? ?? ???
  ????
• ???? ??? ?????? ????? ????? ?????? ????? ?? ???
  ????? ????
• ???? ???? (????????), ??????? ?????? ??????, ??
  ?????

13
????? ???? ???????

• ????? ??? ?? ?? ?????? ?????? ??????? ???, ?????
  ????, ????, ???? ?? ??????, ???? ?? ??? ???'
• ???? ???????? ?????? ????? ??? ???????, ?????? ??
  ???????? ?? ?????
• ???? ?????? ????? ???? ???
• ????? ?????? ??????? ?? ????? ?????
• ???? ?????? ????? ??????? ?????? ?? ??? ????
  ?????/?????/???? ?? ??????
• ?? ????? ?????? ?? ??, ???? ?? ??? ?? ???????
  ??????? ???? ???? ????? ??????? ?? ?? ???? ??????
  ??? ?? ????? ????
• ?????? ??? ?? ????? ???? ???? ???? ??????