Computer Security – Dieter Gollmann

The threat scenario had changed substantially and the lack of security mechanisms – and security awareness – started to make itself felt. 8.8.1 Virus Taxonomy Virus researchers have put considerable effort into developing schemes for describing, naming, and classifying computer viruses, and on defining the distinctive features that distinguish computer viruses from other types of malicious software. The CARO convention is now widely used for naming and describing computer viruses. We will try to keep matters simple and not to get carried away by the intricacies of some of the more elaborate taxonomies.

A Trojan horse: is a program with hidden side-effects that are not specified in the program documentation and are not intended by the user executing the program. A computer virus: is a piece of self-replicating code attached to some other piece of code, with zpayload. The payload can range from the non-existent via the harmless, e.g. displaying a message or playing a tune, to the harmful like deleting and modifying files. A computer virus: infects a program by inserting itself into the program code.

A transient virus: is only active when a program it has infected is running. A resident virus: establishes itself in memory when the program it has infected is running. A resident (terminate-stay-resident (TSR)) virus can become active even after the program it was attached to has terminated by linking itself into the execution of other programs. A logic bomb: is a program that is only executed when a specific trigger condition is met.

A worm: is a replicating but not infecting program. In the following classification of viruses, we will emphasise the general nature of the vulnerabilities exploited. You will note that successful attacks often combine several of the methods described. 8.8.2 PC Boot Sequence Computer viruses exploit obvious points of attack in operating systems that do not protect against unauthorised modifications. To understand the range of vulnerabilities, it is helpful to briefly review the boot sequence of an IBM PC.

Professor David Barron, Southampton University, UK Professor Peter Wegner, Brown University, USA The Worldwide Series in Computer Science has been created to publish textbooks which both address and anticipate the needs of an ever evolving curriculum thereby shaping its future. It is designed for undergraduates majoring in Computer Science and practitioners who need to reskill. Its philosophy derives from the conviction that the discipline of computing needs to produce technically skilled engineers who will inevitably face, and possibly invent, radically new technologies throughout their future careers.

New media will be used innovatively to support high quality texts written by leaders in the field. Published titles Ammeraal, Computer Graphics forJava Programmers Ben-Ari, Ada for Software Engineers Ercegovac, Introduction to Digital Systems Goodrich & Tamassia, Data Structures and Algorithms in Java Kotonya & Sommerville, Requirements Engineering: Processes and Techniques Lowe & Hall, Hypermedia & the Web: An Engineering Approach Preiss, Data Structures and Algorithms with Object-Oriented Design Patterns in C+ + Reiss, A Practical Introduction to Software Design with C+ + Winder & Roberts, DevelopingJava Software ‘This is the book I have been looking for for years.’

Viiveke Fak, Linkoping University, Sweden ‘This is an excellent textbook, clearly aimed at computer science students.’ John Biggam, Glasgow Caledonian University, UK ‘…a serious candidate for being used as the main textbook in an introductory academic or vocational computer systems security course…’ Professor Sokratis K. Katsikas, University of the Aegean, Greece ‘This is an extremely valuable book, pitched at the computer literate who are not gurus but who do have legitimate questions and needs.

It will most definitely be a welcome addition to every computer manager’s and software designer’s library… I think you have a winner and heartily recommend its publication.’ Professor J. Seberry, University of Wollongong, Australia ‘In particular I like the treatment of emerging security technologies for Windows NT, CORBA and Java. This provides added value to the book which is not shared by otherwise comparable books on computer security…’

This is a short excerpt from the opening of “” by Unknown, quoted for review and introduction purposes. All rights belong to the copyright holders.

Book Information

• Unique ID: 58d9d2b9dff6b284
• File Extension: .pdf
• File Size: 15,522,278 bytes (14.803 MB)
• Title: –
• Author: Unknown
• Pages: 341
• Language: English (en)

Reading & Word Statistics

• Estimated Reading Time: 608.54 minutes
• Total Words: 121,708
• Total Characters: 755,151
• Average Words per Page: 356.91
• Average Characters per Page: 2214.52

Most Frequent Words

security (1835), access (952), system (744), user (478), control (467), data (457), key (356), users (335), information (327), systems (314), object (312), computer (311), database (307), operating (305), file (266), level (254), figure (249), password (231), read (230), chapter (225), two (206), between (206), model (205), integrity (205), new (203), protection (198), write (197), use (193), example (193), set (193), used (192), authentication (182), mechanisms (177), like (174), objects (172), also (171), program (171), evaluation (170), network (168), secure (168), class (168), different (164), unix (160), time (150), subject (149), policies (147), memory (144), one (143), operations (143), exercise (143), given (142), book (141), transaction (135), first (134), server (133), web (131), directory (131), policy (130), management (123), state (120), protocol (119), files (119), message (119), software (118), name (118), following (117), virus (115), therefore (115), permissions (114), rights (113), passwords (112), value (111), services (111), login (111), process (111), cryptographic (110), see (109), problem (108), now (106), subjects (105), address (102), levels (101), however (101), application (99), number (99), domain (99), machine (98), distributed (98), relation (98), keys (98), code (97), attacker (96), algorithm (96), version (96), need (95), layer (95), trusted (95), group (95), transactions (94), requirements (92).

PDF Download