4040-840 Security and Trust

all-inOne, section 8.

8. Attacks

8.1. IP and Copyrighted Goods

Music
Movies
Books
iPhones
Bags
what ever is worth copying

8.2. Kim Dotcom - Kim Schmitz

8.3. Piracy - SOPA

http://thomas.loc.gov/cgi-bin/query/z?c112:H.R.3261:

--: According to Rep. Goodlatte, "Intellectual property is one of America's chief job creators and competitive advantages in the global marketplace, yet American inventors, authors, and entrepreneurs have been forced to stand by and watch as their works are stolen by foreign infringers beyond the reach of current U.S. laws."
--: "... expand the ability of U.S. law enforcement to fight online trafficking in copyrighted ..."

8.4. Protect IP Act - PIPA

http://leahy.senate.gov/imo/media/doc/BillText-PROTECTIPAct.pdf

--: "... curb access to "rogue websites dedicated to infringing or counterfeit goods ..."
--: " ... Nonauthoritative domain name servers would be ordered to take technically feasible and reasonable steps ..."

8.5. Byzantine Attacks

Definition:

Reliable computer systems must handle malfunctioning components that give conflicting information to different parts of the system. This situation can be expressed abstractly in terms of a group of generals of the Byzantine army camped with their troops around an enemy city. Communicating only by messenger, the generals must agree upon a common battle plan. However, one or more of them may be traitors who will try to confuse the others. The problem is to find an algorithm to ensure that the loyal generals will reach agreement. It is shown that, using only oral messages, this problem is solvable if and only if more than two-thirds of the generals are loyal; so a single traitor can confound two loyal generals. With unforgeable written messages, the problem is solvable for any number of generals and possible traitors. Applications of the solutions to reliable computer systems are then discussed.

From: The Byzantine Generals Problem (1982), Leslie Lamport, Robert Shostak, Marshall PeaseAdvances in Ultra-Dependable Distributed Systems, N. Suri, C. J. Walter, and M. M. Hugue (Eds.), IEEE Computer Society Press

Denial of Service

--: many computer

Scareware

--: http://www.spiegel.de/netzwelt/web/0,1518,809770,00.html

Not identified

http://abcnews.go.com/blogs/politics/2011/10/loss-of-life-in-major-computer-attack-warns-homeland-security/

Phishing

--: www.cnn.c0m vs. www.cnn.com
--: Link Manipulation
--: Website Fogery

Black Hole

--: Stops forwardind data packets
--: continues to forward routing packets

Flood rushing

--: send out wrong routing information

Wormhole

--: More one node must be compromised
--: Two or more nodes collude by tunneling packet to each other in a short cut
--: Tunnel == private network
--: Path appear and disapear

Overlay network wormhole

--: More than one node compromised
--: Tunneling packets through the overlay network
--: Make the compromised nodes appear to be neigbours off all nodes