Outline for January 9, 2002
Greetings and Felicitations!
Puzzle of the day
Robust Programming
Go through handout, emphasizing principles
Information hiding and abstraction
Error handling
Common Implementation Vulnerabilities
Unknown interaction with other system components (DNS entry with bad names, assuming finger port is finger and not chargen)
Overflow (year 2000, lpr overwriting flaw, sendmail large integer flaw, su buffer overflow)
Race conditions (xterm flaw, ps flaw)
Environment variables (vi one-upsmanship, loadmodule)
Not resetting privileges (Purdue Games incident)
ECS 153, Introduction to Computer Security
Winter Quarter 2002
Email:
[email protected]