Lecture Notes (Syracuse University) Introduction: 1
Introduction of Computer and Network Security
1 Overview
A good security professional should possess two important skills: (1) the sense of security, and (2) the
knowledge of security principles. I hope that students who finish this course can possess both. Possessing
does not mean “knowing”; it means “being able to apply these skills”.
2 Risks and Threats
• Risks when using computer systems:
– You are working on your project in a public library, and you have remotely logged into your
department’s UNIX server. You have to leave for one minute, and you feel lazy and decide not
to lock the screeen of your computer. What is the most severe damage that you can get if a
malicious person takes this oppurtunity? How much time does it a malicious person need to
achieve the most severe damage?
– You go to a public lab and wants to use a computer there to remotely login to your department’s
computer or conduct online banking; what is the risk that you are facing?
– You go to an ATM machine to get cash in a nice neighbourhood (i.e., there is no forced robbery),
what is your risk?
• Risks when setting up computer systems.
– You want to access your office computer from your home, so you set up your office computer so
you can access its desktop remotely. What is the risk?
– You intall a wireless access point in your house to build a wireless network. What is the risk?
– You are system administrator, and turn several programs into privileged programs, so you will
not be bothered by some of the tasks (users can use those privileged programs to finish those
tasks). What is the risk?
• Risks when developing computer systems.
– Your program has a few buffer-overflow problem, but you are under pressure to release the
software product in time, and decide not to fix this bug for this release. What is the risk?
– Your company just wins the bid for building e-voting systems for the government. What are the
risks that you system might face?
– You are developing an online shopping web site for a store. What are the risks that you will face.
• Sense of Security: The ability to see and foresee the risks. If you cannot systematically enumerate the
risks in the above examples, you do not have a good sense of security. I hope that after this course,
you can gain a good sense of security, and be able to assess your risks when you are to use, setup, or
develop computer systems.
• Lessons learned from previous classes: students in this class in the past did not pay enough attention to
foster the sense of security. Every semester in the demonstration of final project, I saw students (not
just a few, but majority of them) who demonstrated excellent functionalities of their systems, but
剩余56页未读，继续阅读
资源评论
绝不原创的飞龙
- 粉丝: 4w+
- 资源: 1083
最新资源
- Linux Lab-linux
- ioGame-unity
- kdump-anaconda-addon-anaconda
- northstar-ai
- basic_framework-keil5安装教程
- 守月亮修行杂谈（2012年-2020年）
- 《Web开发实训》项目总结报告.doc
- 新年烟花LED效果，10分频，10khz变1khz，Multisim仿真
- vba自定清单.zip
- XamarinBleCodeBehind-main.zip
- mmexport1734999482214.png
- python-4.FBI树-虽然但是，不是那个.py
- IMG_20241220_204418_edit_64163654257396.png
- python-5.火星人-这题面，好抽象.py
- python-6.奖学金-语文给你多少？我数英给你…….py
- Screenshot_20241216_213107.jpg
资源上传下载、课程学习等过程中有任何疑问或建议，欢迎提出宝贵意见哦~我们会及时处理！
点击此处反馈
