Bao Mat May Tinh Va Mang 5111

  • View
    30

  • Download
    0

Embed Size (px)

Transcript

Bo mt my tnh v mng

Bi: Khoa CNTT HSP KT Hng Yn

Phin bn trc tuyn: < http://voer.edu.vn/content/col10207/1.1/ >

Hoc lieu Mo Vietnam - Vietnam Open Educational Resources

Ti liu ny v s bin tp ni dung c bn quyn thuc v Khoa CNTT HSP KT Hng Yn. Ti liu ny tun th giy php Creative Commons Attribution 3.0 (http://creativecommons.org/licenses/by/3.0/). Ti liu c hiu nh bi: August 5, 2010 Ngy to PDF: August 5, 2010 bit thng tin v ng gp cho cc module c trong ti liu ny, xem tr. 75.

Ni dung1 Gii thiu 1.1 Gii thiu mc tiu, ni dung, phng php hc bo mt my tnh . . . . . . . . . . . . . . . . . . . . . . . . . . 1 1.2 Mt s khi nim c bn trong bo mt thng tin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 1.3 Cc ch lm tiu lun . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 2 Nhn dng, xc thc v kim sot truy xut 2.1 Nhn dng v xc thc in t . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 2.2 Kim sot truy sut . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 3 Cc m hnh bo mt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 4 K thut mt m 4.1 4.2 4.3 4.4 nh ngha h thng mt m . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Mt s h mt m n gin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Mt s phng php thm m . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 L thuyt Shannon v mt m . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . 30

5 Gii thiu l thuyt S-M . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 6 H mt m v s ch k RSA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 7 Phn phi kha v tha thun kha . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . 39 8 Bo mt dch v thng mi in t . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 9 Virus my tnh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 10 Mt s m hnh bo mt x l virus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 11 Mt s loi virus my tnh in hnh 11.1 B-virus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 11.2 Virus ly nhim trn file thi hnh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 11.3 Virus macro . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . 62 11.4 Virus ly nhim qua th in t . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . 63 11.5 Chin lc phng chng virus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 12 Ti liu tham kho-Bo mt my tnh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 Attributions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

iv

Chng 1

Gii thiu1.1 Gii thiu mc tiu, ni dung, phng php hc bo mt my tnh11.1.1 Mc tiuModule Bo mt my tnh v Mng c a vo ging dy nhm gip ngi hc c kh nng: M t cc nguyn l bo mt v cc m hnh bo mt; Phn tch ri ro cho mt h thng thng tin; Trin khai cc k thut bo mt bo v h thng thng tin; T vn v cc vn bo mt cho doanh nghip.

Theo quan im nng lc, module ny gip ngi hc pht trin cc nng lc: Phn tch (4); T vn (4); Thc hin (3) v Bo tr (3).

1.1.2 Ni dungModule gii thiu cc vn bo mt my tnh v mng my tnh. Cc ch (khng hn ch) bao gm: Cc k thut m bo an ton cho cc h thng my tnh a ngi dng v cc h thng my tnh phn tn; S nhn dng v xc thc in t; Cc m hnh bo mt; H mt m: kha b mt, kha cng khai, ch k in t; Bo mt h iu hnh; Bo mt phn mm; Bo mt th in t v WWW; Thng mi in t: giao thc thanh ton, tin in t; Pht hin xm nhp: virus my tnh; Tng la; nh gi ri ro.1 This

content is available online at .

1

2

CHNG 1. GII THIU

1.1.3 Phng php hc tp ng k hc module ny, trc ngi hc phi tch ly tn ch ca cc module Mng my tnh, Kin trc my tnh, C s k thut lp trnh, Ton chuyn ngnh, v K ngh phn mm. Thi lng ca module tng ng 3 tn ch, c kt cu dng l thuyt kt hp lm bi tp ln, do vy ngi hc phi ng k ch nghin cu theo nhm (t 2 n 3 ngi) ngay t bui hc u tin. Trong qu trnh hc tp, sinh vin tham gia hc tp trn lp v lm vic nhm theo cc ch ng k. Sau khi kt thc 11 bui hc l thuyt, cc nhm sinh vin bo co kt qu nghin cu trc lp trong 4 bui cn li.

1.2 Mt s khi nim c bn trong bo mt thng tin2Bo mt (security) l vic bo v nhng th c gi tr [1]. Bo mt thng tin (information security) l mt ch rng bao gm tt c cc vn bo mt c lin quan n lu tr v x l thng tin. Lnh vc nghin cu chnh ca bo mt thng tin gm cc vn php l nh h thng chnh sch, cc quy nh, yu t con ngi; cc vn thuc t chc nh kim ton x l d liu in t, qun l, nhn thc; v cc vn k thut nh k thut mt m, bo mt mng, cng ngh th thng minh. . . Bo mt my tnh (computer security) l lnh vc lin quan n vic x l ngn nga v pht hin nhng hnh ng bt hp php/tri php (i vi thng tin v ti nguyn h thng) ca ngi dng trong mt h thng my tnh. C nhiu nh ngha khc nhau v bo mt my tnh nhng hu ht u cp n ba kha cnh sau y: S b mt (confidentiality): ngn nga vic lm l tri php thng tin S ton vn (Integrity): ngn nga vic sa i tri php i vi thng tin S sn sng (Availability): ngn nga vic chim dng tri php thng tin hoc ti nguyn. Trn thc t, k thut mt m c trin khai rng ri m bo tnh b mt v ton vn ca thng tin c lu tr hay truyn nhn nhng k thut ny khng bo m cho tnh sn sng ca h thng. Mng my tnh c trin khai nhm gip my tnh m rng giao tip vi mi trng bn ngoi ng ngha vic tng nguy c ri ro. Chng ta v th mun kim sot cch ngi dng h thng truy cp vo mng, cch ngi dng trn mng truy cp vo h thng ca chng ta v cch thng tin c bo v trn ng truyn. Do vy, bo mt mng (network security) khng ch n gin l mt m m cn i hi nhiu yu cu mi v kim sot truy xut

1.3 Cc ch lm tiu lun3Sinh vin c th chn cc ch theo gi (trong danh mc) hoc ch ng la chn cc ch nghin cu khc nhng phi c s ng ca gio vin hng dn. Danh mc cc ch bao gm: Mng ring o (Virtual Private Network) Tng la (Hard and Soft-Firewall) Tm hiu k thut lm gi Email (Forged Email) Nghin cu phng php chng th rc (Spam Email) Tm hiu IPSec trong b giao thc Ipv6 Tm hiu mt s cng c (phn mm) dng tn cng h thng t xa Tm hiu mt s cng c (phn mm) bo v h thng Tm hiu mt s k thut tn cng trn mng (V tn cng doanh nghip TMT Viet Co Ltd, v tn cng din n Hacker Vit Nam - HVA) Tm hiu k thut bo mt trong Windows2 This 3 This

content is available online at . content is available online at .

3 Tm hiu k thut bo mt trong Linux Tm hiu k thut kim sot truy xut trong bo v mng ni b Tm hiu vn bo mt trong mng khng dy v in thoi di ng Tm hiu h mt m DES Tm hiu h mt m IDEA Tm hiu h mt m AES Tm hiu h mt m RC5 Tm hiu gii thut chia MD5, SHA Xy dng chng trnh DEMO mt s h mt m c in Xy dng chng trnh DEMO mt s h mt m s dng kha cng khai Bo mt cc chng trnh CHAT ng dng ch k in t cho cc chng trnh Email Truy tm du vt trn mng Tm l hng ca cc Website Cng c tn cng t xa Cng c bo v h thng Tm hiu Spam Tm hiu Phishing Tm hiu mng botnet Tm hiu Keyloger Tm hiu Malware Tm hiu Spyware Tm hiu Trojan horse Tm hiu Internet worm Tm hiu virus Macro Tm hiu Mobile code Tm hiu mt s k thut s dng trong cc chng trnh dit virus Xy dng ngn hng cu hi v Virus Phn tch virus Bo v an ton mng LAN Nghin cu gii php phng, chng tn cng DDOS Tnh ton tin cy Thy vn s v du vn tay Bo mt vt l Tn cng truyn hnh k thut s qua v tinh Xc thc ngi dng trong h thng file m ha Giu tin trong th rc Bo v phn mm da trn vic thc thi Giu tin trong trng TCP timestamps Xc thc bo mt da trn danh ting Xc thc Cookie Phn tch c ch bo mt ca mng khng dy 802.11 Cc vn bo mt ca Unicode Ch k in t cho th tay Thanh ton qua in thoi GSM Bo v bn quyn truyn thng s Bo mt cc h thng lu tr trn mng Kim tra li bo mt phn mm Thit k mt h thng xc thc th nghim Cc h thng pht hin xm nhp Bo mt in thoi di ng

4

CHNG 1. GII THIU H thng kim tra my tnh K thut bo v bn quyn trong DVD + DIVx Cc vn bo mt trong h thng CGI Kim sot truy xut trn mng Tin in t - kh nng dung li trong h thng ngn hng M hnh chnh sch bo mt Tng quan v cng ngh sinh trc hc v ng dng thc tin Tm hiu giao thc bo mt Secure Sockets Layer 3.0 Lc m ha All-or-Nothing bo mt knh phn phi thng tin a ngi dng Tc ng ca l thuyt lng t ti mt m Bo mt cng ngh v in t Bo mt tr chi in t Poker Tm hiu so snh PGP v S/MIME Tm hiu SSH ATM: Mt ci my tin cy? Khung chnh sch bo mt cho Mobile Code S thanh ton in t Tnh ton trn d liu m ha Bo mt h thng bu c t do Tnh kh thi ca tnh ton lng t B phiu in t.

Chng 2

Nhn dng, xc thc v kim sot truy xut2.1 Nhn dng v xc thc in t1Mt h thng bo mt phi c kh nng lu vt nhn dng hay danh tnh (i