OS Insecurities
-
Xerroz
OS Insecurities
I was wondering what in your opinion makes an operating system insecure, what specific things can cause security problems? please post any links you think might help in my study of OS Insecurities. Thank you.
-
Heliocentric
RE:OS Insecurities
Finally something in my expertise
What makes an operating system insecure is the assumption that all programs that are run are non-malicious and they are run by the user's request. This leads to viruses disguised as utility programs and programs run without the users knowledge.
In my extensive research on the subject of OS security(listen up, this is the only time you'll get it for free
as led me to the conclusion that in order for an OS to be secure key functions should be handled by the OS ONLY and must require user input before they are completed (Sorry no Partition Magic for you!). This prevents programs from infecting the bootsector or corrupting the system. Furthermore, Their must be a mechanism for preventing programs from being modified while they are in active use. This would prevent a virus from attaching itself to the program and running whenever the program runs.
There should also be a mechanism to handle ignorant users. If a program attempts to do anything malicious and the program attempts it it should NOT simply slap it on the wrist and politely tell the user to get a more recent copy. It SHOULD mark the program as unrunnable due to malicious attempt and tell the user they cannot run the program until this status is maually reset
This is all the information I can reveal now, but soon I will reveal the manifestation of this Revelation.
What makes an operating system insecure is the assumption that all programs that are run are non-malicious and they are run by the user's request. This leads to viruses disguised as utility programs and programs run without the users knowledge.
In my extensive research on the subject of OS security(listen up, this is the only time you'll get it for free
as led me to the conclusion that in order for an OS to be secure key functions should be handled by the OS ONLY and must require user input before they are completed (Sorry no Partition Magic for you!). This prevents programs from infecting the bootsector or corrupting the system. Furthermore, Their must be a mechanism for preventing programs from being modified while they are in active use. This would prevent a virus from attaching itself to the program and running whenever the program runs.There should also be a mechanism to handle ignorant users. If a program attempts to do anything malicious and the program attempts it it should NOT simply slap it on the wrist and politely tell the user to get a more recent copy. It SHOULD mark the program as unrunnable due to malicious attempt and tell the user they cannot run the program until this status is maually reset
This is all the information I can reveal now, but soon I will reveal the manifestation of this Revelation.