- Published on
KembaraXtra-Case Law- Security in Operating Systems
I. What is Security in the Context of Operating Systems?
I. What is Security in the Context of Operating Systems?
- Definition: Security means that software and users should only access appropriate parts of the system. Access is restricted to minimize damage from mistakes or malicious software.
- Why is it Important?
- Single-User Systems: Even on personal devices, users can make mistakes (e.g., running untrustworthy code). The OS limits damage from accidental execution of malicious software.
- Multi-User Systems: Users should not be able to access or modify other users' data without permission.
- User Mode Bubble:
- Isolates applications, preventing them from interfering with other applications or the kernel.
- Filesystem Security:
- Controls access to files and data, allowing only authorized users and processes to access specific files.
- Virtual Memory Security:
- Memory regions can be marked as read-only or executable.
- Helps prevent memory misuse (e.g., executing data as code).
- Login System:
- Allows the OS to manage security based on user identity.
- Enforces access control based on user permissions.
- Baseline Expectations: The above techniques are basic security measures in modern OS.
- Vulnerabilities: Security flaws are frequently discovered, allowing malicious actors to bypass defenses.
- Importance of Updates: Keeping internet-connected OS updated is essential to address vulnerabilities and maintain security.
0 Comments