System Security Fundamentals

📋 Course Outline

1. Security Objectives and Properties
2. Control Hijacking and Buffer Overflows
3. Integer Overflow and Browser Protections
4. Sandboxing, Isolation, and Robustness
5. Program Analysis Methods
6. Privileges and Access Control
7. Operating System Protection
8. Exploitation Techniques
9. Fuzzing Methods and Applications
10. Security Defenses and Terminology

📖 1. Security Objectives and Properties

🔑 Key Concepts & Definitions

• System Security : protects computer systems, operating systems, applications, networks, and data from unauthorized access, modification, destruction, data theft, malware, vulnerability exploitation, and denial of service

📝 Essential Points

• The CIA Triad consists of:
  • confidentiality
  • integrity
  • availability

📌 Authentication verifies who a user is, authorization determines what an authenticated user may do, and accountability tracks actions performed by users.

💡 Memory Hook

CIA: Confidentiality, Integrity, Availability

📖 2. Control Hijacking and Buffer Overflows

🔑 Key Concepts & Definitions