Lectures for 2008 - KTH

KURSKOMPENDIUM NÄTVERKSSÄKERHETSKURS
___________________________________________________________________________
Innehållsförteckning
Figurförteckning.....................................................................................................................5
1 Introduktion och grundläggande koncept ..........................................................................7
1.1 Vad är information?...................................................................................................7
1.1.1 Informationssamhället.........................................................................................8
1.2 Varianter av säkerhet .................................................................................................9
1.2.1 Fysisk säkerhet....................................................................................................9
1.2.2 Logisk säkerhet...................................................................................................9
1.2.3 Informationssäkerhet.........................................................................................10
1.2.4 Nätverkssäkerhet...............................................................................................11
1.3 Principiella skydds- och säkerhetsåtgärder ...............................................................12
1.3.1 Autentisering.....................................................................................................12
1.3.2 Auktorisering ....................................................................................................16
1.3.3 Sekretess...........................................................................................................16
1.3.4 Riktighet ...........................................................................................................17
1.3.5 Spårbarhet.........................................................................................................17
1.3.6 Oavvislighet......................................................................................................17
1.3.7 Tillgänglighet....................................................................................................18
1.4 Informationssäkerhet ur ett historiskt perspektiv ......................................................18
2 Hotbeskrivningar............................................................................................................21
2.1 Viktiga begrepp relaterat till hot och risk .................................................................21
2.2 Hackers, Crackers och hackerkultur.........................................................................24
2.3 Informationsinsamling .............................................................................................26
2.3.1 Port- och nätverksscanning................................................................................27
2.4 Säkerhetsproblem ....................................................................................................28
2.4.1 Trafikanalys......................................................................................................29
2.4.2 Avlyssning........................................................................................................30
2.4.3 Uppträdande under falsk identitet......................................................................31
2.4.4 Återuppspelningsattack .....................................................................................32
2.4.5 Buffertöverskrivning.........................................................................................32
2.4.6 Intrång ..............................................................................................................33
2.4.7 Omdirigeringsattack..........................................................................................35
2.4.8 Överlastning och resursmissbruk.......................................................................35
2.4.9 Mannen-i-mittenattacker ...................................................................................35
2.4.10 Race conditions...............................................................................................36
2.4.11 Datamanipulation............................................................................................36
2.4.12 Trunkeringsattack............................................................................................36
2.4.13 Omarrangeringsattack .....................................................................................36
2.4.14 Klipp-och-klistra-attack...................................................................................37
2.4.15 Övertagande av session ...................................................................................37
2.4.16 Datadrivna attacker .........................................................................................37
2.5 Att leta säkerhetshål.................................................................................................38
2.5.1 Security by obscurity.........................................................................................38
2.5.2 Källkodsgranskning ..........................................................................................39
2.5.3 Baklängeskonstruktion......................................................................................39
2.5.4 Fuzzing .............................................................................................................40
2.5.5 Testexekvering samt introspektion ....................................................................41
2.6 Andra typer av tekniska hot .....................................................................................41
2.6.1 Övertro till tekniska lösningar ...........................................................................41
Copyright (c) 2003-2008 Robert Malmgren AB. All rights reserved Sid 2 (139)