امنیت تجارت الکترونیک

:
:

http://ceit.aut.ac.ir
Security in computing; fourth edition

By Charles P.Pfleeger et al.
http://ceit.aut.ac.ir/~shahriari
:
o
100 20

100
100 100
!!

-
o
Tiger Team
.

.

-
o
4 :
n
.

.

-
o
) (vulnerability ) (flaw
) (fault ) (failure .
) (flaw ) (fault ) (failure

) (vulnerability ) (flaw .
) (vulnerability ) (flaw :

-
o
:
n
10

-
o
11

-
o
.
:
n
.

.
.
12
:
n
n
:
n
n
n
n
n
n
:
:
:

13
) (error
.
:
n
)(buffer overflow
)(incomplete mediation
)(time-of-check to time-of-use errors
14
-
o
2 1
.
:
o
15
-
:
]Char sample [10
o
10 ] sample [0
] sample [9 .
o
] sample [10 .
Sample [10] = B
16
-
o
)For (i=0; i<=9 ; i++

;sample [i] = A
Sample [10] = B
17
18
-
:
o
19
-
:
o
20
-
:
o
) (stack pointer .
21
-
o

.
http://www.somesite.com/subpage/userinput.asp?parm1=(808)555-1212 &parm2=2009Jan17
1212-555 1 .
22

:
o
2 .

. 2048Min32 .

!!
23

:
o
Things .
URL .
.
http://www.things.com/order.asp?custID=101&part=555A&qy=20&price=10&ship=boat&shipcost=5
&total=205
205 25 .
24

:
o
25
my-file
change byte 4 to A .

your-file .
26

:
o
.
:
n
27
-
o
:
.

.
28
29
30
.1 :
o
.
...

... .
31
.2
o
32
-
)(malicious code or rogue program
o
33
-
)(virus
o
:
n
:
.
: .
34
-
)(Trojan horse
o
:

.
35
-
)(logic and time bomb
o
.
.
)(trap door or back door

o
36
-
)(worm
o
:
n
Rabbit
o rabbit
.
37
-
o

.
: ...
38
-

o
39
-

o
.
.
40
-
o

...
command
.
command
.
41
-

o
) (V ) (T :
n
I am T
call me instead of T
invoke me
. :
n
42
-
-
43
) (back door
.
:
n
....
44

salami
o

. .
man in the middle
timing
45

covert channel
o

.
:
46
rootkit
o
Rootkit
.
.
Sony XCP :
n
n

xcp.
Mark Russinovich .
.
47
:
n
)(development
48
module
.
.

.
encapsulation .
49
modularization
. :
50

- modularization
o
) (cohesion ) (coupling .
. :
51

- modularization
o

. :
52
-
o
:
n

. .
.
.

. .
53
-
n
o :
n
Black box test
Clear box test or white box
.
54

:
o
.
o
.
.
55

امنیت تجارت الکترونیک

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

امنیت تجارت الکترونیک

Uploaded by

Copyright:

Available Formats

:

Security in computing; fourth edition

) (flaw ) (fault ) (failure

)For (i=0; i<=9 ; i++

)(trap door or back door

man in the middle

Black box test

Clear box test or white box

You might also like