脆弱性安全vs結(jié)構(gòu)性安全-安全與可信security-展示頁
2025-02-26 22:03本頁面
【正文】 – Best Intrusion Detection – Best Intrusion Prevention – Best Desktop Firewall ? Best Remote Access – Best VPN SSL – Best VPN Ipsec – Best Endpoint Security Solution – Best Web Filtering – Best Encryption ? Best Identity Management Solution – Best Password Management – Best Authentication – Best Single Signon – Best TwoFactor Solution ? Best Unified Threat Solution – Best Integrated Security Software – Best Integrated Security Appliance – Best Managed Security Service – Best Email Managed Service ? Best Network Security Management – Best Event Management – Best Computer Forensics – Best Policy Management – Best Security Audit – Best Security Management Tool ? Best Vulnerability Assessment and Remediation – Best Patch Management – Best Vulnerability Assessment 10脆弱性安全的產(chǎn)業(yè)環(huán)境Vulnerabilityoriented security industrial environment威脅方Threat agents廠商Provider用戶User11木桶原理的迷失Misleading of Cask Rule? 誤導(dǎo)– 將整體結(jié)構(gòu)僅僅簡(jiǎn)化為防御結(jié)構(gòu)– 不考慮防御縱深問題– 只考慮靜態(tài)的結(jié)果狀態(tài)– 沒有成本觀念– … …? Misleading– Only consider prevention structure– Not consider deep prevention– Only consider static state– Not consider costeffective– … …12結(jié)構(gòu)性安全Structural security基本結(jié)構(gòu) basic structure緊密結(jié)構(gòu) tight structure松散結(jié)構(gòu) loose structure13訪問控制的 RM機(jī)制Reference monitor of access control? 訪問控制的 RM機(jī)制是非?；镜陌踩Y(jié)構(gòu)? Reference monitor of access control is a very basic security structure14RM機(jī)制有效的結(jié)構(gòu)性條件Structural conditions of valid RM mechanism? 三個(gè)條件– 不能被繞過– 不可篡改– 足夠小，可以被證明? 3 conditions of VRM– Can not be bypass– Can not be tampered– Be small enough, can be proved15Randomly GeneratedSymmetric Key (seed + PRNG)AlicePublickeyPrivatekeyPrivate keyPublic keyBob密鑰交換過程Key Exchange ProcessmessageX15/^ow83h7ERH39DJ3HmessageX15/^ow83h7ERH39DJ3H16緊密安全結(jié)構(gòu)的代表 —— 可信計(jì)算Tight security structure — Trusted Computing? 可信的定義 Definition of trust– 可信就是，一個(gè)設(shè)備的行為是按照其預(yù)期目標(biāo)和指定方式執(zhí)行的Trust is the expectation that a device will behave in a particular manne
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號(hào)-1