Table Of ContentInformation Security and Cryptography
Paul C. van Oorschot
Computer
Security and
the Internet
Tools and Jewels from Malware to Bitcoin
Second Edition
Information Security and Cryptography
Series Editors
David Basin, Department of Computer Science F 106, ETH Zürich, Zürich,
Switzerland
KennyPaterson,InformationSecurityGroup,RoyalHolloway,Universityof
London, Egham, Surrey, UK
Editorial Board
Michael Backes, Department of Computer Science, Saarland University,
Saarbrücken, Saarland, Germany
GillesBarthe,IMDEASoftwareInstitute,PozuelodeAlarcón,Madrid,Spain
Ronald Cramer, CWI, Amsterdam, The Netherlands
Ivan Damgård, Department of Computer Science, Aarhus University,
Aarhus, Denmark
RobertH.Deng ,SingaporeManagementUniversity,Singapore,Singapore
Christopher Kruegel, Department of Computer Science, University of
California, Santa Barbara, CA, USA
Tatsuaki Okamoto, Okamoto Research Lab., NTT Secure Platform
Laboratories, Musashino-shi, Tokyo, Japan
Adrian Perrig, CAB F 85.1, ETH Zurich, Zürich, Switzerland
Bart Preneel, Department Elektrotechniek-ESAT /COSIC, University of
Leuven, Leuven, Belgium
Carmela Troncoso, Security and Privacy Engineering Lab, École
Polytechnique Fédérale de Lausa, Lausanne, Switzerland
Moti Yung, Google Inc, New York, NY, USA
Information Security – protecting information in potentially hostile environ-
ments – is a crucial factor in the growth of information-based processes in
industry,business,andadministration.Cryptographyisakeytechnologyfor
achieving information security in communications, computer systems,
electronic commerce, and in the emerging information society.
Springer’s Information Security & Cryptography (IS&C) book series
coversallrelevanttopics,rangingfromtheorytoadvancedapplications.The
intended audience includes students, researchers and practitioners.
More information about this series at http://www.springer.com/series/4752
Paul C. van Oorschot
Computer Security
and the Internet
Tools and Jewels from Malware
to Bitcoin
Second Edition
123
PaulC. vanOorschot
Schoolof Computer Science
Carleton University
Ottawa, ON,Canada
ISSN 1619-7100 ISSN 2197-845X (electronic)
Information Security andCryptography
ISBN978-3-030-83410-4 ISBN978-3-030-83411-1 (eBook)
https://doi.org/10.1007/978-3-030-83411-1
1st&2ndeditions:©TheAuthor(s)2020,2021
Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeor
part of the material is concerned, specifically the rights of translation, reprinting, reuse of
illustrations,recitation,broadcasting,reproductiononmicrofilmsorinanyotherphysicalway,
andtransmissionorinformationstorageandretrieval,electronicadaptation,computersoftware,
orbysimilarordissimilarmethodologynowknownorhereafterdeveloped.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthis
publication does not imply, even in the absence of a specific statement, that such names are
exemptfromtherelevantprotectivelawsandregulationsandthereforefreeforgeneraluse.
Thepublisher,theauthorsandtheeditorsaresafetoassumethattheadviceandinformationin
thisbookarebelievedtobetrueandaccurateatthedateofpublication.Neitherthepublishernor
the authors or the editors give a warranty, expressed or implied, with respect to the material
containedhereinorforanyerrorsoromissionsthatmayhavebeenmade.Thepublisherremains
neutralwithregardtojurisdictionalclaimsinpublishedmapsandinstitutionalaffiliations.
ThisSpringerimprintispublishedbytheregisteredcompanySpringerNatureSwitzerlandAG
Theregisteredcompanyaddressis:Gewerbestrasse11,6330Cham,Switzerland
ToJ,JandE
forbringingjoytoeveryday
andforunderstandingthatuniversaldecryptionkeysdonotexist
Contents in Brief
TableofContents ..............................................................ix
PrefacetoSecondEdition ......................................................xv
Foreword ....................................................................xix
PrefacetoFirstEdition ...................................................... xxiii
TypesettingConventions ..................................................... xxix
Chapter1: SecurityConceptsandPrinciples ...................................... 1
Chapter2: CryptographicBuildingBlocks .......................................29
Chapter3: UserAuthentication—Passwords,BiometricsandAlternatives ...........55
Chapter4: AuthenticationProtocolsandKeyEstablishment .......................91
Chapter5: OperatingSystemSecurityandAccessControl ....................... 125
Chapter6: SoftwareSecurity—ExploitsandPrivilegeEscalation ..................155
Chapter7: MaliciousSoftware ................................................ 183
Chapter8: Public-KeyCertificateManagementandUseCases ....................213
Chapter9: WebandBrowserSecurity ..........................................245
Chapter10: FirewallsandTunnels .............................................281
Chapter11: IntrusionDetectionandNetwork-BasedAttacks ..................... 309
Chapter12: WirelessLANSecurity: 802.11andWi-Fi ...........................339
Chapter13: Bitcoin,BlockchainsandEthereum .................................375
Epilogue .................................................................... 411
Index ....................................................................... 417
vii
Table of Contents
PrefacetoSecondEdition .................................................... xv
Foreword ....................................................................xix
PrefacetoFirstEdition .................................................... xxiii
TypesettingConventions ....................................................xxix
Chapter1: SecurityConceptsandPrinciples:::1
1.1Fundamentalgoalsofcomputersecurity ....................................2
1.2Computersecuritypoliciesandattacks .....................................4
1.3Risk,riskassessment,andmodelingexpectedlosses .........................6
1.4Adversarymodelingandsecurityanalysis ..................................9
1.5Threatmodeling: diagrams,trees,listsandSTRIDE ........................11
1.6Model-realitygapsandreal-worldoutcomes ...............................16
1.7‡Designprinciplesforcomputersecurity ..................................20
1.8‡Whycomputersecurityishard ..........................................25
1.9‡Endnotesandfurtherreading ...........................................27
References ................................................................ 28
Chapter2: CryptographicBuildingBlocks:::29
2.1Encryptionanddecryption(genericconcepts) ..............................30
2.2Symmetric-keyencryptionanddecryption .................................32
2.3Public-keyencryptionanddecryption .....................................37
2.4Digitalsignaturesandverificationusingpublickeys ........................39
2.5Cryptographichashfunctions ............................................41
2.6Messageauthentication(dataoriginauthentication) ........................ 45
2.7‡Authenticatedencryptionandfurthermodesofoperation ..................47
2.8‡Certificates,ellipticcurves,andequivalentkeylengths .....................49
2.9‡Endnotesandfurtherreading ...........................................51
References ................................................................ 52
Chapter3: UserAuthentication—Passwords,BiometricsandAlternatives:::55
3.1Passwordauthentication .................................................56
3.2Password-guessingstrategiesanddefenses ................................ 59
3.3Accountrecoveryandsecretquestions ....................................65
3.4One-timepasswordgeneratorsandhardwaretokens ........................67
3.5Biometricauthentication .................................................71
3.6‡Passwordmanagersandgraphicalpasswords .............................76
3.7‡CAPTCHAs(humans-in-the-loop)vs. automatedattacks ..................79
3.8‡Entropy,passwords,andpartial-guessingmetrics ..........................81
3.9‡Endnotesandfurtherreading ...........................................86
References ................................................................ 88
ix
x TableofContents
Chapter4: AuthenticationProtocolsandKeyEstablishment:::91
4.1Entityauthenticationandkeyestablishment(context) .......................92
4.2Authenticationprotocols: conceptsandmistakes ...........................97
4.3Establishingsharedkeysbypublicagreement(DH) .......................100
4.4Keyauthenticationpropertiesandgoals ..................................104
4.5Password-authenticatedkeyexchange: EKEandSPEKE .................. 105
4.6‡Weaksecretsandforwardsearchinauthentication .......................111
4.7‡Singlesign-on(SSO)andfederatedidentitysystems .....................113
4.8‡CyclicgroupsandsubgroupattacksonDiffie-Hellman ...................115
4.9‡Endnotesandfurtherreading ..........................................120
References ...............................................................122
Chapter5: OperatingSystemSecurityandAccessControl:::125
5.1Memoryprotection,supervisormode,andaccountability ..................127
5.2Thereferencemonitor,accessmatrix,andsecuritykernel ..................130
5.3Objectpermissionsandfile-basedaccesscontrol ..........................133
5.4Setuidbitandeffectiveuserid(eUID) ....................................137
5.5Directorypermissionsandinode-basedexample ..........................138
5.6Symboliclinks,hardlinksanddeletingfiles ..............................142
5.7Role-based(RBAC)andmandatoryaccesscontrol ........................144
5.8‡Protectionrings: isolationmeetsfiner-grainedsharing ....................146
5.9‡Relatingsubjects,processes,andprotectiondomains .....................149
5.10‡Endnotesandfurtherreading .........................................151
References ...............................................................153
Chapter6: SoftwareSecurity—ExploitsandPrivilegeEscalation:::155
6.1Raceconditionsandresolvingfilenamestoresources ......................157
6.2Integer-basedvulnerabilitiesandC-languageissues .......................159
6.3Stack-basedbufferoverflows ............................................166
6.4Heap-basedbufferoverflowsandheapspraying ...........................168
6.5‡Return-to-libcexploits ................................................171
6.6Bufferoverflowexploitdefensesandadoptionbarriers .................... 172
6.7Privilegeescalationandthebiggerpicture ................................174
6.8‡Background: processcreation,syscalls,shells,shellcode ................. 176
6.9‡Endnotesandfurtherreading ..........................................178
References ...............................................................180
TableofContents xi
Chapter7: MaliciousSoftware:::183
7.1Definingmalware ......................................................184
7.2Virusesandworms .....................................................186
7.3Virusanti-detectionandworm-spreadingtechniques ...................... 191
7.4Stealth: Trojanhorses,backdoors,keyloggers,rootkits .................... 194
7.5Rootkitdetail: installation,objectmodification,hijacking ..................197
7.6‡Drive-bydownloadsanddroppers ......................................200
7.7Ransomware,botnetsandotherbeasts ...................................202
7.8Socialengineeringandcategorizingmalware .............................205
7.9‡Endnotesandfurtherreading ..........................................207
References ...............................................................209
Chapter8: Public-KeyCertificateManagementandUseCases:::213
8.1Certificates,certificationauthoritiesandPKI ............................. 214
8.2Certificatechainvalidationandcertificateextensions ......................217
8.3‡Certificaterevocation ................................................. 221
8.4CA/PKIarchitecturesandcertificatetrustmodels .........................224
8.5TLSwebsitecertificatesandCA/browsertrustmodel .....................229
8.6Secureemailoverviewandpublic-keydistribution ........................235
8.7‡Secureemail: specifictechnologies .....................................238
8.8‡Endnotesandfurtherreading ..........................................241
References ...............................................................242
Chapter9: WebandBrowserSecurity:::245
9.1Webreview: domains,URLs,HTML,HTTP,scripts ...................... 246
9.2TLSandHTTPS(HTTPoverTLS) ......................................252
9.3HTTPcookiesandDOMobjects ........................................255
9.4Same-originpolicy(DOMSOP) ........................................ 257
9.5Authenticationcookies,maliciousscriptsandCSRF .......................260
9.6Moremaliciousscripts: cross-sitescripting(XSS) ........................ 262
9.7SQLinjection .........................................................266
9.8‡Usablesecurity,phishingandwebsecurityindicators .................... 269
9.9‡Endnotesandfurtherreading ..........................................274
References ...............................................................276
