脆弱性安全vs結(jié)構(gòu)性安全-安全與可信security-資料下載頁
2025-02-20 22:03本頁面
【正文】 ilities from structure itself54? 對于 AR/PEP/PDP的偽裝，可能打破整個結(jié)構(gòu)every role may be spoofed? 所有看似漂亮的結(jié)構(gòu)，其性能和可用性問題可能會非常嚴(yán)重，會輕易被拒絕服務(wù)攻擊擊垮Most beautiful structures have performance and availability problems and may be easy to be kick down by DoS.? 那么多傳統(tǒng)攻擊方式，可能有的還有效Some traditional attacks are still effective結(jié)構(gòu)本身可能就有問題Find vulnerabilities from structure itself55結(jié)構(gòu)性安全還要繼續(xù)博弈We are still in the game? 怎么博弈？How to Play the game?– 你了解對方的結(jié)構(gòu)嗎？Do you know the structure of all players?– 你了解對方了解多少自己的結(jié)構(gòu)嗎？Do you know “how much have the other player known about your structure” ?56結(jié)構(gòu)性威脅Structural threats知識、資源和原則Knowledge, Resources and Principles57知識Knowledge? 尋求對于系統(tǒng)更深層次技術(shù)結(jié)構(gòu)的研究Who know lower?? 尋求對于系統(tǒng)宏觀結(jié)構(gòu)的了解Who know the macrostructure better?? 尋求對于具體對象的全面了解How many details do you know?? … …58資源Resources? 從分布式拒絕服務(wù)攻擊到僵尸網(wǎng)絡(luò)，掌握具有結(jié)構(gòu)和組織的攻擊體Bot is a sample of structural software anization for attacking? 在時序上組成結(jié)構(gòu)，非常有利于攻擊Time sequence spreading is a good thinking of structural attack? … …59結(jié)構(gòu)的一些關(guān)鍵字Key words of structure? Business? Distribution? Hierarchy? Time sequence? Lifecycle? Management– Organization– Regular– Process Control? Value? 業(yè)務(wù)? 分布式? 層次? 時序? 生命周期? 管理– 組織– 制度– 過程控制? 價值60流程化的結(jié)構(gòu)思路Processoriented structureprocessinput outputProcess owneroperatorInfrastructureKnowledgebaseLOGArchiveProcessimprovingMonitor61原則Principles? 安全沒有百分之百 No 100% Security? 安全相對性的三個原則 3 security relativity rule–生存原則 survival rule–風(fēng)險原則 Risk rule–保鏢原則 bodyguard rule自身完備性要求Perfective requirement62總結(jié) Conclusion? 脆弱性安全 Vulnerabilityoriented security? 結(jié)構(gòu)性安全 Structural security? 結(jié)構(gòu)性安全中的脆弱性Vulnerabilities in structures? 結(jié)構(gòu)性威脅 Structural threats63總結(jié)：一個可以持續(xù)研究下去的課題Conclusion: A good problem to keep approaching脆弱性防御. defend結(jié)構(gòu)性防御Structuraldefend脆弱性攻擊. attack結(jié)構(gòu)性攻擊Structuralattack脆弱性和結(jié)構(gòu)性 Vulnerabilityoriented vs. structural攻擊和防守 defend vs. attack64謝謝 …Thanks…大潘 Jordan Pan65
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號-1