Lecture 6: CSCI E-1 Spring 2013

9e4d3e53f8525fdff00691a8b843e66b?s=47 Tommy MacWilliam
April 10, 2013
Education
1
190

Lecture 6: CSCI E-1 Spring 2013

9e4d3e53f8525fdff00691a8b843e66b?s=128

Tommy MacWilliam

April 10, 2013
Tweet

More Decks by Tommy MacWilliam

See All by Tommy MacWilliam
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
65
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
73
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
150
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
1
160
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
1
99
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
140
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
190
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
360
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
300

Other Decks in Education

See All in Education
18cdb6f294c8cb10a46167e462c2a51f?s=48 matleenalaakso
3
3.3k
8b8d433ca23ddb6d5c1949e121b57383?s=48 karte
0
270
08d84a320a8128f6e0b00b27c201530f?s=48 yasslab
2
250k
A10e41b0a61d59f2258d7f6172c33479?s=48 kaityo256
2
940
1896b034326abb4bc429d6718dc6a42e?s=48 shomaekawa
2
480
830b019cfcaad9e565fa50b32ed5a524?s=48 kbalog
0
200
21c2e17b9d4b34aafa4b2722d23dd4d3?s=48 todayuya
0
150
Fd6d65c0c678caeee88eaa8c520bdd2c?s=48 serzhenko
0
100
18cdb6f294c8cb10a46167e462c2a51f?s=48 matleenalaakso
1
2.4k
1135dc242dcff3b90ae46fc586ff4da8?s=48 signer
0
200
8c6c1f0c4c41d0640ade76bd71e9e475?s=48 gishi_yama
0
230
1e708b2afb8622d5c5f070a94a3425a9?s=48 tibbelit
0
190

Featured

See All Featured
1177e050db6bafe62885362edf6e3537?s=48 lauravandoore
9
1.1k
E6c6e133e74c3b83f04d2861deaa1c20?s=48 searls
203
35k
Fe6b81005d1553accd6b2a28f6a2bef1?s=48 phodgson
86
3.9k
651dcfe41723207fbb0aa044a4f7c07f?s=48 dotmariusz
94
5.1k
78b475797a14c84799063c7cd073962f?s=48 holman
448
130k
B3d6434763caa0ef5dc4b792662c49f7?s=48 smashingmag
282
46k
C1daf20e5c49ff910745198ef9869ac2?s=48 hatefulcrawdad
258
16k
7653c7c449918ff6542880a8c284f5e7?s=48 jponch
101
4.9k
5f2da528927a2ec9ba4fec2069cbc958?s=48 kneath
218
15k
91cefdf141106fa10674aae74ce05890?s=48 yeseniaperezcruz
300
31k
Ef32e0b1ac5082450dc8c1fca3a26b5c?s=48 cherdarchuk
66
260k
C7393b7ba7ec9c8890dd77d209fbb3c9?s=48 maltzj
500
36k

Transcript

  1. Computer Science E-1 Lecture 6: Security

  2. http://youtu.be/H542nLTTbu0

  3. http://bing.com

  4. http://vimeo.com/blog/post:564

  5. Security

  6. Authentication

  7. Cookies

  8. Sessions

  9. GET /home.php HTTP/1.1 Host: www.facebook.com Cookie: PHPSESSID=5153d29ed84c4

  10. GET /home.php HTTP/1.1 Host: www.facebook.com Cookie: PHPSESSID=5153d29ed84c4

  11. Session Hijacking

  12. None

  13. HTTPS

  14. Cryptography

  15. GET /home.php HTTP/1.1 Host: www.facebook.com Encrypt ehosn9745t987gnlkjab 7@5uejfnjasdbfxb98@#

  16. GET /home.php HTTP/1.1 Host: www.facebook.com Encrypt ehosn9745t987gnlkjab 7@5uejfnjasdbfxb98@# ehosn9745t987gnlkjab 7@5uejfnjasdbfxb98@#

    GET /home.php HTTP/1.1 Host: www.facebook.com Decrypt

  17. Wi-Fi Security

  18. WEP, WPA, WPA2

  19. CSRF

  20. https://bank.com/money/transfer? to=67890&amount=100

  21. None

  22. Ka-Boom.

  23. https://bank.com/money/transfer? to=67890&amount=100& token=8549ba93417cdef85

  24. <input type="hidden" name="csrfTokenHidden" value="12345" id="csrfTokenHidden">

  25. http://cse1.net/lecture6

  26. XSS

  27. <h1>Tommy</h1>

  28. None

  29. Ka-Boom.

  30. http://cse1.net/lecture6

  31. Databases

  32. Name DOB Color Preference Shocked Cat 3/17/2010 white indoor Grumpy

    Cat 4/4/2012 white indoor Keyboard Cat 1/1/1984 orange outdoor

  33. SQL

  34. SELECT name FROM cats

  35. SELECT * from cats WHERE preference = ‘indoor’

  36. INSERT INTO cats (name, dob, color, preference) VALUES ('Maru', '2008-06-01',

    'gray', 'indoor')

  37. UPDATE cats SET name = ‘shocked’ WHERE name = ‘Maru’

  38. DELETE FROM cats WHERE name = ‘Maru’

  39. CRUD

  40. Create Read Update Delete

  41. INSERT SELECT UPDATE DELETE

  42. SELECT * FROM profiles WHERE username = ‘zuck’

  43. I would like __ cheeseburgers cooked ____ and topped with

    ________.

  44. I would like 2 cheeseburgers cooked medium-well and topped with

    lettuce.

  45. I would like 2 cheeseburgers cooked and then thrown at

    the nearest customer’s head and topped with lettuce.

  46. Injection

  47. SELECT * FROM profiles WHERE username = ‘______’

  48. ‘ OR ‘1’ = ‘1

  49. SELECT * FROM profiles WHERE username = ‘’ OR ‘1’

    = ‘1’

  50. Ka-Boom.

  51. Authentication

  52. SELECT * FROM users WHERE username = ‘_____’ AND password

    = ‘_____’

  53. SELECT * FROM users WHERE username = ‘rj’ AND password

    = ‘’ OR ‘1’ = ‘1’

  54. Ka-Boom.

  55. ’; DELETE FROM profiles; --

  56. SELECT * FROM profiles WHERE username = ‘’; DELETE FROM

    profiles; --’
  57. None

  58. Sanitizing Input

  59. SELECT * FROM profiles WHERE username = '\' OR \'1\'

    = \'1'

  60. Permissions

  61. http://cse1.net/lecture6

  62. Encrypting Text

  63. Caesar Cipher

  64. ABCDEFGHIJKLMNOPQRSTUVWXYZ NOPQRSTUVWXYZABCDEFGHIJKLM

  65. ROT13

  66. banana

  67. onanan

  68. Brute-Force Attack

  69. ROT26

  70. Vigenère Cipher

  71. banana + 246246

  72. banana + 246246 detcrg

  73. banana + cegceg detcrg

  74. Plaintext: computer Key: benrj

  75. computer + benrjben

  76. computer + benrjben dszgduie

  77. Symmetric-Key Cryptography

  78. None

  79. Asymmetric-Key Cryptography

  80. Public/Private Keys

  81. None

  82. Trapdoor One-Way Function

  83. 2459 * 8863 = 21794117

  84. Factor 21794117

  85. RSA

  86. Diffie-Hellman

  87. Computer Science E-1 Lecture 6: Security