Security Engineering — The Book V2

1066 Pages·2017·5.827 MB·English

by  it-ebooks

Contents
PrefacetotheSecondEdition xxv
ForewordbyBruceSchneier xxvii
Preface xxix
Acknowledgments xxxv
PartI
Chapter1 WhatIsSecurityEngineering? 3
Introduction 3
AFramework 4
Example1–ABank 6
Example2–AMilitaryBase 7
Example3–AHospital 9
Example4–TheHome 10
Definitions 11
Summary 15
Chapter2 UsabilityandPsychology 17
Introduction 17
AttacksBasedonPsychology 18
Pretexting 19
Phishing 21
InsightsfromPsychologyResearch 22
WhattheBrainDoesWorseThantheComputer 23
PerceptualBiasandBehaviouralEconomics 24
DifferentAspectsofMentalProcessing 26
DifferencesBetweenPeople 27
SocialPsychology 28
WhattheBrainDoesBetterThanComputer 30
ix
x Contents
Passwords 31
DifficultieswithReliablePasswordEntry 32
DifficultieswithRememberingthePassword 33
NaivePasswordChoice 34
UserAbilitiesandTraining 35
DesignErrors 37
OperationalIssues 39
Social-EngineeringAttacks 40
TrustedPath 42
PhishingCountermeasures 43
PasswordManglers 43
ClientCertsorSpecialistApps 44
UsingtheBrowser’sPasswordDatabase 44
SoftKeyboards 45
CustomerEducation 45
MicrosoftPassport 46
PhishingAlertToolbars 47
Two-FactorAuthentication 47
TrustedComputing 48
FortifiedPasswordProtocols 49
Two-ChannelAuthentication 49
TheFutureofPhishing 50
SystemIssues 52
CanYouDenyService? 53
ProtectingOneselforOthers? 53
AttacksonPasswordEntry 54
InterfaceDesign 54
Eavesdropping 55
TechnicalDefeatsofPasswordRetryCounters 55
AttacksonPasswordStorage 56
One-WayEncryption 56
PasswordCracking 57
AbsoluteLimits 57
CAPTCHAs 59
Summary 60
ResearchProblems 61
FurtherReading 61
Chapter3 Protocols 63
Introduction 63
PasswordEavesdroppingRisks 65
WhoGoesThere?—SimpleAuthentication 66
ChallengeandResponse 70
TheMIG-in-the-MiddleAttack 73
ReflectionAttacks 76
ManipulatingtheMessage 78
ChangingtheEnvironment 79
Contents xi
ChosenProtocolAttacks 80
ManagingEncryptionKeys 82
BasicKeyManagement 83
TheNeedham-SchroederProtocol 84
Kerberos 85
PracticalKeyManagement 86
GettingFormal 87
ATypicalSmartcardBankingProtocol 87
TheBANLogic 88
VerifyingthePaymentProtocol 89
LimitationsofFormalVerification 90
Summary 91
ResearchProblems 92
FurtherReading 92
Chapter4 AccessControl 93
Introduction 93
OperatingSystemAccessControls 96
GroupsandRoles 98
AccessControlLists 99
UnixOperatingSystemSecurity 100
Apple’sOS/X 101
Windows—BasicArchitecture 102
Capabilities 103
Windows—AddedFeatures 104
Middleware 107
DatabaseAccessControls 107
GeneralMiddlewareIssues 108
ORBsandPolicyLanguages 109
SandboxingandProof-CarryingCode 110
Virtualization 111
TrustedComputing 111
HardwareProtection 113
IntelProcessors,and‘TrustedComputing’ 114
ARMProcessors 116
SecurityProcessors 116
WhatGoesWrong 117
SmashingtheStack 118
OtherTechnicalAttacks 119
UserInterfaceFailures 121
WhySoManyThingsGoWrong 122
Remedies 124
EnvironmentalCreep 125
Summary 126
ResearchProblems 127
FurtherReading 127
xii Contents
Chapter5 Cryptography 129
Introduction 129
HistoricalBackground 130
AnEarlyStreamCipher—TheVigene`re 131
TheOne-TimePad 132
AnEarlyBlockCipher—Playfair 134
One-WayFunctions 136
AsymmetricPrimitives 138
TheRandomOracleModel 138
RandomFunctions—HashFunctions 140
Properties 141
TheBirthdayTheorem 142
RandomGenerators—StreamCiphers 143
RandomPermutations—BlockCiphers 144
PublicKeyEncryptionandTrapdoorOne-WayPermutations 146
DigitalSignatures 147
SymmetricCryptoPrimitives 149
SP-Networks 149
BlockSize 150
NumberofRounds 150
ChoiceofS-Boxes 151
LinearCryptanalysis 151
DifferentialCryptanalysis 152
Serpent 153
TheAdvancedEncryptionStandard(AES) 153
FeistelCiphers 155
TheLuby-RackoffResult 157
DES 157
ModesofOperation 160
ElectronicCodeBook 160
CipherBlockChaining 161
OutputFeedback 161
CounterEncryption 162
CipherFeedback 163
MessageAuthenticationCode 163
CompositeModesofOperation 164
HashFunctions 165
ExtraRequirementsontheUnderlyingCipher 166
CommonHashFunctionsandApplications 167
AsymmetricCryptoPrimitives 170
CryptographyBasedonFactoring 170
CryptographyBasedonDiscreteLogarithms 173
PublicKeyEncryption—DiffieHellmanandElGamal 174
KeyEstablishment 175
DigitalSignature 176
SpecialPurposePrimitives 178
Contents xiii
EllipticCurveCryptography 179
Certification 179
TheStrengthofAsymmetricCryptographicPrimitives 181
Summary 182
ResearchProblems 183
FurtherReading 183
Chapter6 DistributedSystems 185
Introduction 185
Concurrency 186
UsingOldDataVersusPayingtoPropagateState 186
LockingtoPreventInconsistentUpdates 188
TheOrderofUpdates 188
Deadlock 189
Non-ConvergentState 190
SecureTime 191
FaultToleranceandFailureRecovery 192
FailureModels 193
ByzantineFailure 193
InteractionwithFaultTolerance 194
WhatIsResilienceFor? 195
AtWhatLevelIstheRedundancy? 197
Service-DenialAttacks 198
Naming 200
TheDistributedSystemsViewofNaming 200
WhatElseGoesWrong 204
NamingandIdentity 204
CulturalAssumptions 206
SemanticContentofNames 207
UniquenessofNames 207
StabilityofNamesandAddresses 208
AddingSocialContexttoNaming 209
RestrictionsontheUseofNames 210
TypesofName 211
Summary 211
ResearchProblems 212
FurtherReading 213
Chapter7 Economics 215
Introduction 215
ClassicalEconomics 216
Monopoly 217
PublicGoods 219
InformationEconomics 220
ThePriceofInformation 220
TheValueofLock-In 221
AsymmetricInformation 223
xiv Contents
GameTheory 223
ThePrisoners’Dilemma 225
EvolutionaryGames 226
TheEconomicsofSecurityandDependability 228
WeakestLink,orSumofEfforts? 229
ManagingthePatchingCycle 229
WhyIsWindowsSoInsecure? 230
EconomicsofPrivacy 232
EconomicsofDRM 233
Summary 234
ResearchProblems 235
FurtherReading 235
PartII
Chapter8 Multilevel Security 239
Introduction 239
WhatIsaSecurityPolicyModel? 240
TheBell-LaPadulaSecurityPolicyModel 242
ClassificationsandClearances 243
InformationFlowControl 245
TheStandardCriticismsofBell-LaPadula 246
AlternativeFormulations 248
TheBibaModelandVista 250
HistoricalExamplesofMLSSystems 252
SCOMP 252
Blacker 253
MLSUnixandCompartmentedModeWorkstations 253
TheNRLPump 254
LogisticsSystems 255
SybardSuite 256
WiretapSystems 256
FutureMLSSystems 257
Vista 257
Linux 258
Virtualization 260
EmbeddedSystems 261
WhatGoesWrong 261
Composability 261
TheCascadeProblem 262
CovertChannels 263
TheThreatfromViruses 265
Polyinstantiation 266
OtherPracticalProblems 267
BroaderImplicationsofMLS 269
Contents xv
Summary 272
ResearchProblems 272
FurtherReading 272
Chapter9 Multilateral Security 275
Introduction 275
Compartmentation,theChineseWallandtheBMAModel 277
CompartmentationandtheLatticeModel 277
TheChineseWall 281
TheBMAModel 282
TheThreatModel 284
TheSecurityPolicy 287
PilotImplementations 289
CurrentPrivacyIssues 290
InferenceControl 293
BasicProblemsofInferenceControlinMedicine 293
OtherApplicationsofInferenceControl 296
TheTheoryofInferenceControl 297
QuerySetSizeControl 298
Trackers 298
MoreSophisticatedQueryControls 298
CellSuppression 299
MaximumOrderControlandtheLatticeModel 300
AuditBasedControl 300
Randomization 301
LimitationsofGenericApproaches 302
ActiveAttacks 304
TheValueofImperfectProtection 305
TheResidualProblem 306
Summary 309
ResearchProblems 310
FurtherReading 310
Chapter10 Banking andBookkeeping 313
Introduction 313
TheOriginsofBookkeeping 315
Double-EntryBookkeeping 316
ATelegraphicHistoryofE-commerce 316
HowBankComputerSystemsWork 317
TheClark-WilsonSecurityPolicyModel 319
DesigningInternalControls 320
WhatGoesWrong 324
WholesalePaymentSystems 328
SWIFT 329
WhatGoesWrong 331
AutomaticTellerMachines 333
ATMBasics 334
xvi Contents
WhatGoesWrong 337
IncentivesandInjustices 341
CreditCards 343
Fraud 344
Forgery 345
AutomaticFraudDetection 346
TheEconomicsofFraud 347
OnlineCreditCardFraud—theHypeandtheReality 348
Smartcard-BasedBanking 350
EMV 351
StaticDataAuthentication 352
DynamicDataAuthentication 356
CombinedDataAuthentication 356
RFID 357
HomeBankingandMoneyLaundering 358
Summary 361
ResearchProblems 362
FurtherReading 363
Chapter11 PhysicalProtection 365
Introduction 365
ThreatsandBarriers 366
ThreatModel 367
Deterrence 368
WallsandBarriers 370
MechanicalLocks 372
ElectronicLocks 376
Alarms 378
HownottoProtectaPainting 379
SensorDefeats 380
FeatureInteractions 382
AttacksonCommunications 383
LessonsLearned 386
Summary 387
ResearchProblems 388
FurtherReading 388
Chapter12 Monitoring andMetering 389
Introduction 389
PrepaymentMeters 390
UtilityMetering 392
HowtheSystemWorks 393
WhatGoesWrong 395
TaxiMeters,TachographsandTruckSpeedLimiters 397
TheTachograph 398
WhatGoesWrong 399
HowMostTachographManipulationIsDone 400
Contents xvii
TamperingwiththeSupply 401
TamperingwiththeInstrument 401
High-TechAttacks 402
TheDigitalTachographProject 403
SystemLevelProblems 404
OtherProblems 405
TheResurrectingDuckling 407
PostageMeters 408
Summary 412
ResearchProblems 413
FurtherReading 414
Chapter13 NuclearCommandandControl 415
Introduction 415
TheEvolutionofCommandandControl 417
TheKennedyMemorandum 418
Authorization,Environment,Intent 419
UnconditionallySecureAuthentication 420
SharedControlSchemes 422
TamperResistanceandPALs 424
TreatyVerification 426
WhatGoesWrong 427
SecrecyorOpenness? 429
Summary 430
ResearchProblems 430
FurtherReading 430
Chapter14 SecurityPrinting andSeals 433
Introduction 433
History 434
SecurityPrinting 435
ThreatModel 436
SecurityPrintingTechniques 437
PackagingandSeals 443
SubstrateProperties 443
TheProblemsofGlue 444
PINMailers 445
SystemicVulnerabilities 446
PeculiaritiesoftheThreatModel 447
Anti-GundeckingMeasures 448
TheEffectofRandomFailure 449
MaterialsControl 450
NotProtectingtheRightThings 451
TheCostandNatureofInspection 451
EvaluationMethodology 453
Summary 454
ResearchProblems 454
FurtherReading 455
xviii Contents
Chapter15 Biometrics 457
Introduction 457
HandwrittenSignatures 458
FaceRecognition 461
Bertillonage 464
Fingerprints 464
VerifyingPositiveorNegativeIdentityClaims 466
CrimeSceneForensics 469
IrisCodes 472
VoiceRecognition 475
OtherSystems 476
WhatGoesWrong 477
Summary 481
ResearchProblems 482
FurtherReading 482
Chapter16 PhysicalTamperResistance 483
Introduction 483
History 485
High-EndPhysicallySecureProcessors 486
Evaluation 492
MediumSecurityProcessors 494
TheiButton 494
TheDallas5000Series 495
FPGASecurity,andtheClipperChip 496
SmartcardsandMicrocontrollers 499
History 500
Architecture 501
SecurityEvolution 501
TheStateoftheArt 512
DefenseinDepth 513
StopLoss 513
WhatGoesWrong 514
TheTrustedInterfaceProblem 514
Conflicts 515
TheLemonsMarket,RiskDumpingandEvaluation 516
Security-By-Obscurity 517
InteractionwithPolicy 517
FunctionCreep 518
SoWhatShouldOneProtect? 518
Summary 520
ResearchProblems 520
FurtherReading 520
Chapter17 EmissionSecurity 523
Introduction 523
History 524