TAILIEUCHUNG - Lecture Operating system concepts (Fifth edition): Module 20 - Avi Silberschatz, Peter Galvin

The information stored in the system (both data and code), as well as the physical resources of the computer system, need to be protected from unauthorized access, malicious destruction or alteration, and accidental introduction of inconsistency. In this chapter, we examine the ways in which information may be misused or intentionally made inconsistent. We then present mechanisms to guard against this occurrence. | Module 20: Security The Security Problem Authentication Program Threats System Threats Threat Monitoring Encryption Operating System Concepts The Security Problem Security must consider external environment of the system, and protect it from: unauthorized access. malicious modification or destruction accidental introduction of inconsistency. Easier to protect against accidental than malicious misuse. Operating System Concepts Authentication User identity most often established through passwords, can be considered a special case of either keys or capabilities. Passwords must be kept secret. Frequent change of passwords. Use of “non-guessable” passwords. Log all invalid access attempts. Operating System Concepts Program Threats Trojan Horse Code segment that misuses its environment. Exploits mechanisms for allowing programs written by users to be executed by other users. Trap Door Specific user identifier or password that circumvents normal security procedures. Could be included in a .

• Hệ điều hành
• Operating system concepts
• Lecture Operating system concepts
• Operating system
• Hệ điều hành
• Computer system organization
• Program threats
• Operating system services
• Operating system structures
• Operating system design
• Operating system structure
• Operating System Debugging
• Operating System Generation
• Types of System Calls
• Computer system structures
• File system interface
• File system implementation
• Computer system architecture
• The Linux system