Lecture 6: CSCI E-1 Spring 2013

9e4d3e53f8525fdff00691a8b843e66b?s=47 Tommy MacWilliam
April 10, 2013
Education
1
190

Lecture 6: CSCI E-1 Spring 2013

9e4d3e53f8525fdff00691a8b843e66b?s=128

Tommy MacWilliam

April 10, 2013
Tweet

More Decks by Tommy MacWilliam

See All by Tommy MacWilliam
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
62
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
68
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
140
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
1
160
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
1
99
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
140
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
190
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
350
9e4d3e53f8525fdff00691a8b843e66b?s=48 tmacwill
0
300

Other Decks in Education

See All in Education
575ca492bac55e895d0e1c86f7d709fe?s=48 hschwentner
4
450
B4b800c75ece8682ae6d73d1568b83eb?s=48 jdbedics
0
220
19d7ae634445d4bd9b10c7961a462260?s=48 shu223
1
670
Cf47cf3c3e0f037f899088df041e2cca?s=48 dpc
0
170
Bba766ffe32150cadedf5ab8e7eacaae?s=48 coderdojojapan
5
1.7k
703f52adaba29aff9877b03b98d431a6?s=48 koeri
0
950
827dbd19908541482bac51ace8b86426?s=48 anchorcable
4
510
C0f0968555a1e046963baa6b5e74e3c9?s=48 salvemaria
0
100
Afe2f4da332a580161799fa1a2d99b13?s=48 futureitomasahiko
0
190
1e708b2afb8622d5c5f070a94a3425a9?s=48 tibbelit
0
110
E89be27a49d1cf6643f7432b41ba4d26?s=48 loochsorg
0
110
3ed98d0c9704e28a7da4d5d7ea9c320f?s=48 roudakov
0
3.4k

Featured

See All Featured
C9b18d9dff88a9dd2393364c2b3b21bd?s=48 colly
184
14k
Ecdea9b9714877b86cee08458f085481?s=48 trallard
9
380
56c4053438af8e8b90d6f53cbb7573be?s=48 jakevdp
769
190k
C620790ae5bf5b50c245b2e0ef95f338?s=48 deanohume
294
27k
465724d73fe3a92c0879fdfb43a3a6f3?s=48 philhawksworth
190
17k
1177e050db6bafe62885362edf6e3537?s=48 lauravandoore
8
1k
170b760e0147792d0140e59ec78e9893?s=48 eitanlees
106
9.5k
9128d500301ae51524e887bb680f471d?s=48 caitiem20
304
16k
D09fad3e36ae6841f54820be0e907f7a?s=48 rocio
154
11k
5f2da528927a2ec9ba4fec2069cbc958?s=48 kneath
293
39k
9cde37f47e4a800ea081ea42de8d749a?s=48 dougneiner
55
5.3k
0bce06bd06ee7a2c4f5500f25dcf7f18?s=48 paulrobertlloyd
70
3.5k

Transcript

  1. Computer Science E-1 Lecture 6: Security

  2. http://youtu.be/H542nLTTbu0

  3. http://bing.com

  4. http://vimeo.com/blog/post:564

  5. Security

  6. Authentication

  7. Cookies

  8. Sessions

  9. GET /home.php HTTP/1.1 Host: www.facebook.com Cookie: PHPSESSID=5153d29ed84c4

  10. GET /home.php HTTP/1.1 Host: www.facebook.com Cookie: PHPSESSID=5153d29ed84c4

  11. Session Hijacking

  12. None

  13. HTTPS

  14. Cryptography

  15. GET /home.php HTTP/1.1 Host: www.facebook.com Encrypt ehosn9745t987gnlkjab 7@5uejfnjasdbfxb98@#

  16. GET /home.php HTTP/1.1 Host: www.facebook.com Encrypt ehosn9745t987gnlkjab 7@5uejfnjasdbfxb98@# ehosn9745t987gnlkjab 7@5uejfnjasdbfxb98@#

    GET /home.php HTTP/1.1 Host: www.facebook.com Decrypt

  17. Wi-Fi Security

  18. WEP, WPA, WPA2

  19. CSRF

  20. https://bank.com/money/transfer? to=67890&amount=100

  21. None

  22. Ka-Boom.

  23. https://bank.com/money/transfer? to=67890&amount=100& token=8549ba93417cdef85

  24. <input type="hidden" name="csrfTokenHidden" value="12345" id="csrfTokenHidden">

  25. http://cse1.net/lecture6

  26. XSS

  27. <h1>Tommy</h1>

  28. None

  29. Ka-Boom.

  30. http://cse1.net/lecture6

  31. Databases

  32. Name DOB Color Preference Shocked Cat 3/17/2010 white indoor Grumpy

    Cat 4/4/2012 white indoor Keyboard Cat 1/1/1984 orange outdoor

  33. SQL

  34. SELECT name FROM cats

  35. SELECT * from cats WHERE preference = ‘indoor’

  36. INSERT INTO cats (name, dob, color, preference) VALUES ('Maru', '2008-06-01',

    'gray', 'indoor')

  37. UPDATE cats SET name = ‘shocked’ WHERE name = ‘Maru’

  38. DELETE FROM cats WHERE name = ‘Maru’

  39. CRUD

  40. Create Read Update Delete

  41. INSERT SELECT UPDATE DELETE

  42. SELECT * FROM profiles WHERE username = ‘zuck’

  43. I would like __ cheeseburgers cooked ____ and topped with

    ________.

  44. I would like 2 cheeseburgers cooked medium-well and topped with

    lettuce.

  45. I would like 2 cheeseburgers cooked and then thrown at

    the nearest customer’s head and topped with lettuce.

  46. Injection

  47. SELECT * FROM profiles WHERE username = ‘______’

  48. ‘ OR ‘1’ = ‘1

  49. SELECT * FROM profiles WHERE username = ‘’ OR ‘1’

    = ‘1’

  50. Ka-Boom.

  51. Authentication

  52. SELECT * FROM users WHERE username = ‘_____’ AND password

    = ‘_____’

  53. SELECT * FROM users WHERE username = ‘rj’ AND password

    = ‘’ OR ‘1’ = ‘1’

  54. Ka-Boom.

  55. ’; DELETE FROM profiles; --

  56. SELECT * FROM profiles WHERE username = ‘’; DELETE FROM

    profiles; --’
  57. None

  58. Sanitizing Input

  59. SELECT * FROM profiles WHERE username = '\' OR \'1\'

    = \'1'

  60. Permissions

  61. http://cse1.net/lecture6

  62. Encrypting Text

  63. Caesar Cipher

  64. ABCDEFGHIJKLMNOPQRSTUVWXYZ NOPQRSTUVWXYZABCDEFGHIJKLM

  65. ROT13

  66. banana

  67. onanan

  68. Brute-Force Attack

  69. ROT26

  70. Vigenère Cipher

  71. banana + 246246

  72. banana + 246246 detcrg

  73. banana + cegceg detcrg

  74. Plaintext: computer Key: benrj

  75. computer + benrjben

  76. computer + benrjben dszgduie

  77. Symmetric-Key Cryptography

  78. None

  79. Asymmetric-Key Cryptography

  80. Public/Private Keys

  81. None

  82. Trapdoor One-Way Function

  83. 2459 * 8863 = 21794117

  84. Factor 21794117

  85. RSA

  86. Diffie-Hellman

  87. Computer Science E-1 Lecture 6: Security