Questions tagged [security]

Questions about matters of computer, software and communication security, that is how to protect systems against attacks.

19 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
102 views

How does a vpn connection work?

I have been looking into vpn (virtual private network). And I wanted to know more about the theory, how does it work really: what does it do with the packages? why is it secure? (or why can it be ...
3
votes
0answers
257 views

How is Chinese Remainder Theorem used in the proof of correctness for RSA

Question At the very end of (most) proofs of RSA's correctness we have something like $$m^{ed}\equiv m\pmod p$$ $$m^{ed}\equiv m\pmod q$$ Therefore by the Chinese Remainder Theorem (CRT) $$m^{ed}\...
2
votes
0answers
44 views

Agreeing on a Time in a Trustless Network

Imagine a chord-like network $N$. each machine $m \in N$ is directly connected to $N_m \subset N$. Without relying on official timeservers, I want all machines to synchronize to some time with ...
2
votes
0answers
75 views

Could an OS relinquish control back to the bootloader?

I'm wondering if it is feasible for an OS to return control back to the bootloader, and boot a second OS after itself. Reason being -- I've been musing on bootkits, and wondering if it would be ...
1
vote
1answer
20 views

Is “capability-based security” vs “hierarchical-protection-domain based security” a false dichotomy?

The wikipedia page on capability-based security states: Capability-based security is to be contrasted with an approach that uses hierarchical protection domains. However, in order to implement ...
1
vote
0answers
14 views

In Baggy Bounds Checking, why is an error raised when accessing more than half the slot size of the end boundary of an allocated memory?

In the second notes of MIT's Computer Systems Security class (6.858), there is this particular (slightly modified) snippet. ...
1
vote
0answers
43 views

L1 Cache Missing Timing Attack

I'm trying to understand Section 3: L1 Cache Missing in the paper Cache Missing for Fun and Profit. I'm stuck on trying to figure out how the covert channel is ...
1
vote
0answers
18 views

Are Physical 2-Person Lock Systems Informed by The Byzantine Generals Problem

The Byzantine Generals Problem says a set of generals who are greater than 2/3rds loyal is required to guarantee that securely issuing an order is possible the loyal generals. Because of this, I am ...
1
vote
0answers
76 views

Importance of Needham–Schroeder Protocol

I'm working on a paper about model checking on cryptographic protocols and many of the papers I have read, base their approaches in the Needham-Schroeder protocol. I undestand this was one of the ...
1
vote
0answers
110 views

What is an access control graph?

A question I came across describes a scenario of an information system in a clerical office and states- "Identify the sets of S={subjects}, O={objects} and P={privileges} for the above systems of the ...
1
vote
0answers
470 views

How Can a Network Server Identify a Specific Computer, Is There a Computer Fingerprint?

Most of websites put some restrictions on how to use their services; the following paragraphs are taken from “Terms of Service” of such website: Only one account per computer is allowed to view ads. ...
1
vote
0answers
452 views

How does one guarantee that the commutative, associative and distributive properties hold for a type?

While most main stream programming languages allow for user defined types that can have the following properties: associative commutative distributive the only way I know of that this can be ...
0
votes
0answers
27 views

Protecting a specific sized message with some limitations

So I make a research on my own. I have a device it allows a 64bit message. I wanted to secure it but I 64bits arent just enough to hash it and encrypt it. Is there really any good Hash function out ...
0
votes
0answers
24 views

Database that contains timespans of cyber attacks in the web

for a project I need to evaluate a model, that tries to predict wether a certain cyber-attack (i.e. connection to a low level honeypot) is just a random access, a new attack-wave or an already known ...
0
votes
0answers
24 views

Is there any kind of secure computer system on the horizon?

I'm going to attempt to be as concise as possible, given this highly complicated subject. However, some basic things need to be said here to properly "paint the picture", so kindly don't see it as a "...
0
votes
1answer
41 views

Historical examples of bad security policies/mechanisms that we got stuck with through switching costs?

The following process seems to be a recurring one: Initial design. Commercial organisations invent and implement a design that seems at the time to work. Problem discovered, new design suggested. Due ...
0
votes
0answers
6 views

Miner violation in Securify Tool: Transaction Ordering Vulnerability Detection

For the following paper, I can’t understand the text written below: Securify Research Paper Our violation pattern checks that the amount of the call instruction is determined by a value read from the ...
0
votes
1answer
74 views

Matrix to Multi-level security

How to convert access control matrix to Bell-LaPadula. Can teach me step by step What best way to control converting Bell-LaPadula Model lattice using Access Control Matrix Matrix GIVEN $\quad\quad\...
0
votes
0answers
29 views

Secrecy rate of eavesdropper channel?

I want to find secrecy rate of a main channel in case of Gaussian broadcast channel. e.g. I have a single transmitter and a receiver where eavesdropper wants to eavesdrop the communication over ...