System Security Fundamentals

📋 Course Outline

1. Security Objectives and Properties
2. Control Hijacking and Buffer Overflows
3. Integer Overflow and Memory Safety
4. Browser Defenses and Isolation
5. Robust Software Development
6. Program Analysis Methods
7. Privileges and Access Control
8. Operating System Protection
9. Exploitation Techniques and Defenses
10. Fuzzing and Vulnerability Detection
11. Vulnerability Exploit and Attack

📖 1. Security Objectives and Properties

🔑 Key Concepts & Definitions

• System Security : the protection of computer systems, operating systems, applications, networks, and data from unauthorized access, modification, destruction, data theft, malware, vulnerability exploitation, and denial of service

📝 Essential Points

• The CIA triad consists of:
  • confidentiality
  • integrity
  • availability

📌 Authentication verifies who a user is, authorization determines what an authenticated user may do, and accountability tracks actions performed by users.

💡 Memory Hook

CIA: Confidentiality, Integrity, Availability