SysSec红皮书：2013年系统安全研究路线图

需积分: 10 82 浏览量更新于2024-07-16 收藏 1.38MB PDF 举报

"SysSec红皮书：系统安全研究路线图" 《SysSec红皮书：系统安全研究路线图》是SysSec财团及其支持者在2013年上半年制定的一份重要文献，主要关注未来互联网的安全管理，特别是威胁与漏洞的处理。这本书是欧洲第七框架计划（Seventh Framework Programme）的一部分，属于“可信ICT”（Trustworthy ICT）网络卓越中心的项目。该项目旨在提升欧洲在全球未来互联网安全威胁和脆弱性管理中的地位。红皮书的核心内容是一个系统安全的研究路线图，它为该领域的研究提供了一个全面的指南。书中详细探讨了在系统安全领域面临的挑战、关键研究方向以及可能的技术解决方案。以下是该书涵盖的一些关键知识点： 1. 威胁模型和分析：书中深入研究了未来互联网中可能出现的各种威胁，包括恶意软件、网络攻击、隐私侵犯等，并提出相应的分析方法和技术来识别和预测这些威胁。 2. 脆弱性评估与管理：讨论了如何评估系统的弱点，以及如何建立有效的脆弱性管理策略，以防止潜在的攻击利用这些漏洞。 3. 防御技术：涵盖了多种防御机制，如入侵检测系统、防火墙、加密算法、安全协议等，以及它们在系统安全中的应用。 4. 安全设计原则：强调了在系统设计阶段就应该考虑安全性的原则，如最小权限原则、安全隔离、冗余与多样性等。 5. 安全编程与测试：讨论了如何通过安全编码实践减少软件漏洞，并介绍了安全测试的方法和技术，以确保软件在发布前达到一定的安全标准。 6. 响应与恢复策略：阐述了在遭受攻击后的应对策略，包括快速响应、数据恢复、系统修复等，以及如何通过灾难恢复计划提高系统的弹性。 7. 安全政策与法规：涉及安全政策的制定、执行和合规性，以及如何在国际和跨组织环境中协调安全策略。 8. 教育与培训：强调了提高公众和专业人员的安全意识，以及提供专业的安全教育和培训课程的重要性。 9. 研究方法与评估：介绍了系统安全研究的最新方法，包括实验平台、模拟和建模工具，以及如何评估安全研究的有效性和影响力。 10. 国际合作：鉴于网络安全是全球性问题，书中呼吁加强国际合作，共同应对全球安全挑战。《SysSec红皮书》为系统安全研究提供了一条清晰的路径，不仅对研究人员有指导意义，也为政策制定者、企业决策者以及广大公众理解网络安全问题提供了宝贵的参考。通过深入研究这些知识点，可以推动系统安全领域的进步，构建更安全的未来互联网环境。

2. Introduction

who want to get at the personal data of particular people. A domain

may be thought of as a restriction to (some of) the threats in such a way

that they can be studied and/or better solved. Solutions developed for

one domain may not necessarily hold on other domain. For example,

the domain of implantable devices may restrict the types of DoS attacks

which can be made on such devices and may require solutions that can

not be applied in large scale servers. The purpose of these domains is

not usually to provide security, although without security their provision

could be useless. For example, the purpose of the domain of on-line

banking is to provide banking services, much as the traditional banking

sector has been doing in the physical world for hundreds of years.

• Horizontal Research Areas

. Finally, we have identiﬁed Horizontal Re-

search areas - that is, areas that apply to several, if not most, aspects of

security. For example, measuring security is a horizontal research area

whose results may apply to many individual domains and threats.

One may choose to approach the problem of security and privacy from

any of the above ﬁrst dimensions. For example, one might start with a threat,

such as a buffer overﬂow, and explain the types of attacks that can be made

possible, the types of assets that can be compromised, and the kind of domains

in which such attacks would materialize. As another example, one might start

with the assets that seem important and explain how the different domains

may set the stage for an attack on these assets and how an attacker may exploit

domain-speciﬁc vulnerabilities or use threats to materialize such attacks.

We feel, however, that in the recent history of cybersecurity and privacy

all above dimensions have been used, so that each individual problem is

described from the most convenient and easiest-to-understand dimension. In

this work we follow a similar approach and categorize the important aspects

of cybersecurity and privacy along these dimensions, so that we are able to

illustrate the concepts from the best point of view.

2.2 Mapping the Threats We Fear

The evolution of cyberspace, which triggered an explosion in innovation and

novel applications, has offered cyberattackers a wide variety of threats and

vulnerabilities that can be used to compromise people’s security and privacy.

Such threats include:

• Malware

has been traditionally used as the main vehicle to carry mali-

cious activities for several decades now. Initially materialized as “com-

puter viruses” and originally spread through “ﬂoppy disks,” malware is

still going strong, compromising computers at the speed of the Internet.

2. Introduction

•

Although considered rather old-fashioned,

DoS attacks

have started to

re-appear as the easiest form of on-line pressure.

• SPAM

. The domain of unwanted messages, although appearing to be

in decline, may redeﬁne itself through targeted domain-speciﬁc SPAM

that is difﬁcult to detect and may appear very similar to the interesting

messages received by the intended recipients.

• Malicious Hardware

. Attackers have been traditionally targeting vulner-

able software. However, it has become apparent that attacks on hardware

may be more effective, and more difﬁcult to detect. Although such at-

tacks require access to the hardware design/development process, recent

examples have demonstrated that such access is not impossible.

• Data Breaches

. Recently, an increasing percentage of activities are per-

formed (and recorded by various stakeholders) on-line. Some of them

are of great importance, such as on-line banking and interaction with

the local State or Government, and may represent a high-value target for

potential attackers. Unfortunately, opting out of such data collection is

not a possibility for ordinary citizens. The data will be collected and will

be stored in accordance with the relevant laws. Potential leaks of such

data may put the population of entire countries at major risk.

• Social Engineering - Phishing

. Social engineering has been one of

the oldest methods used by attackers and will probably continue to

be popular in the future. As technology advances faster than people

can understand

, attackers have the opportunity to exploit the little-

understood trust relationships of the ever-changing environment.

•

One of the oldest attacks,

Passive/Active Eavesdropping

, popularized by

man-in-the-middle-attacks, still seems to be very popular. The widespread

use of wireless communications, the recent popularity of proxy-based

infrastructures, and the availability of technology to retain data for several

months by most ISPs, make eavesdropping easier than ever.

• On-line behavior tracking

. Highly-desired by online advertisers and

popularized by the ubiquitous cookies, behavior tracking has reached the

point where it can track what people read, where they go, what they buy,

and even when they change the TV channel.

• Spooﬁng - Impersonation.

Several transactions on the Internet do not

require strong authentication. For example, even the sender of an IP

packet may easily be spoofed. This spooﬁng, or even impersonation

A notion colorfully termed future shock in “The For Ever War” [205].

2. Introduction

future, where each and every action people take on-line will probably be

recorded in some database beyond their control.

• Freedom - Freedom of speech

. Recognized as a Fundamental Human

Right, freedom is greatly challenged by the high-end technology in

general, and surveillance mechanisms in particular.

• Democracy, Sovereignty

. People who live in democratic societies usually

take it for granted and may underestimate the threats that it may be

subject to. However, high technology, including digital storage and

communications can be used to undermine democracy and freedoms

enjoyed in a democratic society.

• Identity

. Although our identity in the physical world is well deﬁned, and

hardly needs to be proven during the course of a normal day, especially

in small-scale environments, such as villages and towns, our identity in

the cyberspace is almost entirely based on digital credentials (such as

passwords), which can be lost, stolen, sold, and abused much like any

piece of information. This opens the door to a wide variety of attacks

that can lead to identity theft.

• The Right to be Forgotten.

The European Commission recently pro-

posed the implementation of the “Right to be Forgotten” in the Cy-

berspace, that is, the “right to ask service providers to delete the personal

information that has been collected by data brokers under a users’ con-

sent” [330]. Similar in principle to the “right of oblivion” (in the French

law), the Right to be Forgotten will empower people to take control of

their digital image and reputation in the cyberspace.

• Anonymity.

The widespread use of digital technologies has probably

impacted anonymity more than any other aspect of our lives. For exam-

ple, what used to be an anonymous stroll in the shopping mall, a leisure

browsing of today’s paper, or a casual watch of the television, has been

transformed into a fully identiﬁed interaction with a network of content

providers, a three-level-deep complex hierarchy of advertisers, and a

variety of social networks all trying to record each and every aspect of

every user’s action.

• Money.

Attackers have been traditionally motivated by the ﬁnancial

rewards of cybercrime, and will probably continue to be so.

2.4 Understanding the Domains of the Game

Evolutions in Science, Technology and Society create new domains that did

not exist before. Domains may be deﬁned by common technology platforms

剩余193页未读，继续阅读

weixin_38743481

粉丝: 696
资源: 4万+

SysSec红皮书：2013年系统安全研究路线图

2021年薪酬报告系列之环渤海地区银行门岗位薪酬水平报告.pdf .pdf

烽火MTK光猫全国地区配置固件电信.tar.gz

G-140W-C光猫 移动固件，版本：3FE46343GFGA82

AIX红皮书：系统管理与硬件调试指南

AIXPDF红皮书：系统管理与故障排查指南

AIX红皮书：系统管理与故障排除指南

AIX红皮书：系统管理与故障排除详解

AIX红皮书：系统管理与故障排查详解

AIX 6.1红皮书：系统管理与硬件诊断指南

IBM Power小型机红皮书：系统管理与故障排除

最新资源

G-140W-C光猫移动固件，版本：3FE46343GFGA82