Operating Systems Security - Revision history

130.113.191.27: /* The Most Secure */

2007-12-06T22:50:47Z

The Most Secure

← Older revision		Revision as of 22:50, 6 December 2007
Line 60:		Line 60:
	===The Most Secure===		===The Most Secure===
	Each operating system has a comparable set of features. Therefore, the 'most secure' can be defined here as the one that is safest from hacker attacks. Since a hacker will tend to focus on the most common or popular operating system, this may be the best measurement of security.		Each operating system has a comparable set of features. Therefore, the 'most secure' can be defined here as the one that is safest from hacker attacks. Since a hacker will tend to focus on the most common or popular operating system, this may be the best measurement of security.
-	Linux is ~~therefore~~ most secure operating system. Apart from having the lowest market share, developers clearly have a focus on security, as it has comparable features to the other operating systems.	+	According to this, Linux is the most secure operating system. Apart from having the lowest market share, developers clearly have a focus on security, as it has comparable features to the other operating systems.
-	<p>Linux is a more advanced operating system, however, and does take some computer knowledge to use it properly. For a casual or beginner computer user, ~~<ref>~~Mac OS X ~~</ref>~~is the better choice, as it is easier to use. It is still quite secure, and having a relatively low market share means that there will be fewer attacks. <br>This does not mean that Windows Vista is the most insecure operating system. The data indicates that, in fact, it is technically better than Mac OS X. But the Windows market share trends must be taken into account. Since Windows Vista will most likely be the most commonly used operating system in the future, it will be the focus of attacks. It is therefore more sensible to pick the Mac OS X instead.	+	<p>Linux is a more advanced operating system, however, and does take some computer knowledge to use it properly. For a casual or beginner computer user, Mac OS X is the better choice, as it is easier to use. It is still quite secure, and having a relatively low market share means that there will be fewer attacks. <br>This does not mean that Windows Vista is the most insecure operating system. The data indicates that, in fact, it is technically better than Mac OS X. But the Windows market share trends must be taken into account. Since Windows Vista will most likely be the most commonly used operating system in the future, it will be the focus of attacks. It is therefore more sensible to pick the Mac OS X instead.
		+
	== References==		== References==

130.113.191.27: /* Mac OS X Security Features */

2007-12-06T22:49:06Z

Mac OS X Security Features

← Older revision		Revision as of 22:49, 6 December 2007
Line 32:		Line 32:
	==Mac OS X Security Features==		==Mac OS X Security Features==
	Mac OS X Leopard is the most recent release of Mac OS X. Some of its major features are:		Mac OS X Leopard is the most recent release of Mac OS X. Some of its major features are:
-	*Open Source[[http://www.apple.com/macosx/features/300.html 8]]	+	*Open and Closed Source[[http://www.apple.com/macosx/features/300.html 8]]
-	Since a portion of the operating system is open source, faults in the code can be found by anyone. This ~~means patches can be found much faster than if the developers were the only ones allowed to view the~~ source code.	+	Since a portion of the operating system is open source, faults in some of the code can be found by anyone. However, most of it is closed source. This mix of open and closed source aids in security as you get obscurity as well as some freely available code.
	*Sandboxing[[http://www.apple.com/macosx/features/300.html 8]]		*Sandboxing[[http://www.apple.com/macosx/features/300.html 8]]
	Gives programs as few resources as possible so as to prevent the program from gaining access to vital areas of the system.		Gives programs as few resources as possible so as to prevent the program from gaining access to vital areas of the system.

130.113.191.27: /* References */

2007-12-06T22:44:01Z

References

← Older revision		Revision as of 22:44, 6 December 2007
Line 72:		Line 72:
	[http://www.apple.com/macosx/features/300.html Mac OS X Security Features]<br>		[http://www.apple.com/macosx/features/300.html Mac OS X Security Features]<br>
	[http://fedoraproject.org/wiki/Security/Features#head-00b5d3c07f2721bcde9c126e87c3c0712ef0ba85 Linux Security]<br>		[http://fedoraproject.org/wiki/Security/Features#head-00b5d3c07f2721bcde9c126e87c3c0712ef0ba85 Linux Security]<br>
		+	[http://en.wikipedia.org/wiki/Features_new_to_Windows_Vista Windows Vista Features]<br>
	Hacking Exposed. Joel Scambray, Stuart McClure, George Kurtz: 2001 Osborne/McGraw-Hill<br>		Hacking Exposed. Joel Scambray, Stuart McClure, George Kurtz: 2001 Osborne/McGraw-Hill<br>

130.113.191.27: /* Linux Security Features */

2007-12-06T22:35:21Z

Linux Security Features

← Older revision		Revision as of 22:35, 6 December 2007
Line 46:		Line 46:
	Provides mandatory access control and integrity checking of programs and processes.		Provides mandatory access control and integrity checking of programs and processes.
	*Open Source[[http://en.wikipedia.org/wiki/Linux]]		*Open Source[[http://en.wikipedia.org/wiki/Linux]]
-	~~Being~~ open source gives Linux a major advantage security-wise. Instead of just developers fixing bugs, all users are capable of this. ~~Studies have shown that many more bugs are found and fixed in open source software than in closed source software~~.	+	Some believe that being open source gives Linux a major advantage security-wise. Instead of just developers fixing bugs, all users are capable of this. Although this may not always guarantee security, it has worked fairly well so far.
	*Stack Smash Protection, Buffer Overflow Detection, Exec-Shield [[http://fedoraproject.org/wiki/Security/Features#head-00b5d3c07f2721bcde9c126e87c3c0712ef0ba85 11]]		*Stack Smash Protection, Buffer Overflow Detection, Exec-Shield [[http://fedoraproject.org/wiki/Security/Features#head-00b5d3c07f2721bcde9c126e87c3c0712ef0ba85 11]]
	All of these are systems to prevent exploits. Exec-Shield provides address space randomization, while the others are specific features designed to detect specific exploits.		All of these are systems to prevent exploits. Exec-Shield provides address space randomization, while the others are specific features designed to detect specific exploits.

130.113.191.27 at 22:32, 6 December 2007

2007-12-06T22:32:23Z

← Older revision		Revision as of 22:32, 6 December 2007
Line 1:		Line 1:
-	The security of operating systems has always been a concern for users, and especially so with the invention of the Internet. Operating system developers are constantly creating new ways to protect computers from hackers. The three most common operating systems are Linux, Mac OS and Windows~~. They~~ each ~~have~~ a different set of security features. ~~So the question is,~~ which is the most secure?	+	The security of operating systems has always been a concern for users, and especially so with the invention of the Internet. Operating system developers are constantly creating new ways to protect computers from hackers. The three most common operating systems are Linux, Mac OS and Windows, each having a different set of security features. Determining which of these operating systems is the most secure from hackers is not easy as there are many factors that must be taken into consideration.

	==Hacking==		==Hacking==

Ohairek at 06:21, 5 December 2007

2007-12-05T06:21:56Z

← Older revision		Revision as of 06:21, 5 December 2007
Line 56:		Line 56:

	===Open Source vs. Closed Source===		===Open Source vs. Closed Source===
-	There are two schools of thought with security. Some believe that open source is more secure because holes can be found by anyone and a patch can be made by anyone. Others believe in 'security by obscurity' in that, by being closed source, it makes it harder for hackers to exploit. Supporters of closed source state that exploits are made easier because the source code can be seen. Supporters of open source state that closed source software is patched less frequently, the patches do not always fix the problem and can actually cause further problems. Since the patch code cannot be seen, it is never guaranteed to work. Clearly one is not definitely more secure than the other.	+	There are two schools of thought with security [[http://www.linux-watch.com/news/NS7350372195.html 13]]. Some believe that open source is more secure because holes can be found by anyone and a patch can be made by anyone. Others believe in 'security by obscurity' in that, by being closed source, it makes it harder for hackers to exploit. Supporters of closed source state that exploits are made easier because the source code can be seen. Supporters of open source state that closed source software is patched less frequently, the patches do not always fix the problem and can actually cause further problems. Since the patch code cannot be seen, it is never guaranteed to work. Clearly one is not definitely more secure than the other.

	===The Most Secure===		===The Most Secure===

Ohairek at 06:20, 5 December 2007

2007-12-05T06:20:58Z

← Older revision		Revision as of 06:20, 5 December 2007
Line 65:		Line 65:


-	[http://~~searchenterpriselinux.techtarget~~.com/~~expert~~/~~KnowledgebaseAnswer~~/~~0,289625,sid39_gci1133408,00~~.html ~~Linux SELinux~~]<br>	+	[http://arstechnica.com/news.ars/post/20070903-linux-marketshare-set-to-surpass-windows-98.html Market Share]<br>
-	[http://~~fedoraproject~~.~~org~~/~~wiki~~/~~Security~~/~~Features#head-00b5d3c07f2721bcde9c126e87c3c0712ef0ba85 Linux Security~~]<br>	+	[http://searchenterpriselinux.techtarget.com/expert/KnowledgebaseAnswer/0,289625,sid39_gci1133408,00.html SELinux]<br>
	[http://www.linux-watch.com/news/NS7350372195.html Open and Closed Source Discussion]<br>		[http://www.linux-watch.com/news/NS7350372195.html Open and Closed Source Discussion]<br>
	[http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci212220,00.html Hacker Definition]<br>		[http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci212220,00.html Hacker Definition]<br>
	[http://exchangepedia.com/blog/2007/06/numbers-talk-vista-most-secure-os-of.html Security Report]<br>		[http://exchangepedia.com/blog/2007/06/numbers-talk-vista-most-secure-os-of.html Security Report]<br>
-	~~[http://arstechnica.com/news.ars/post/20070903-linux-marketshare-set-to-surpass-windows-98.html Market Share]<br>~~
-	~~[http://searchenterpriselinux.techtarget.com/expert/KnowledgebaseAnswer/0,289625,sid39_gci1133408,00.html SELinux]<br>~~
	[http://www.apple.com/macosx/features/300.html Mac OS X Security Features]<br>		[http://www.apple.com/macosx/features/300.html Mac OS X Security Features]<br>
		+	[http://fedoraproject.org/wiki/Security/Features#head-00b5d3c07f2721bcde9c126e87c3c0712ef0ba85 Linux Security]<br>
	Hacking Exposed. Joel Scambray, Stuart McClure, George Kurtz: 2001 Osborne/McGraw-Hill<br>		Hacking Exposed. Joel Scambray, Stuart McClure, George Kurtz: 2001 Osborne/McGraw-Hill<br>

Ohairek at 06:17, 5 December 2007

2007-12-05T06:17:59Z

← Older revision		Revision as of 06:17, 5 December 2007
Line 43:		Line 43:
	==Linux Security Features==		==Linux Security Features==
	The number of Linux security features differs with each distribution. Some of the most notable general features are:		The number of Linux security features differs with each distribution. Some of the most notable general features are:
-	*SELinux	+	*SELinux[[http://searchenterpriselinux.techtarget.com/expert/KnowledgebaseAnswer/0,289625,sid39_gci1133408,00.html 9]]
	Provides mandatory access control and integrity checking of programs and processes.		Provides mandatory access control and integrity checking of programs and processes.
-	*Open Source	+	*Open Source[[http://en.wikipedia.org/wiki/Linux]]
	Being open source gives Linux a major advantage security-wise. Instead of just developers fixing bugs, all users are capable of this. Studies have shown that many more bugs are found and fixed in open source software than in closed source software.		Being open source gives Linux a major advantage security-wise. Instead of just developers fixing bugs, all users are capable of this. Studies have shown that many more bugs are found and fixed in open source software than in closed source software.
-	*Stack Smash Protection, Buffer Overflow Detection, Exec-Shield	+	*Stack Smash Protection, Buffer Overflow Detection, Exec-Shield [[http://fedoraproject.org/wiki/Security/Features#head-00b5d3c07f2721bcde9c126e87c3c0712ef0ba85 11]]
	All of these are systems to prevent exploits. Exec-Shield provides address space randomization, while the others are specific features designed to detect specific exploits.		All of these are systems to prevent exploits. Exec-Shield provides address space randomization, while the others are specific features designed to detect specific exploits.

Line 53:		Line 53:
	===Overall Comparison===		===Overall Comparison===
	[[Image:Vista-90day-vuln-compare.PNG\|thumb\|350px\|right\|Security vulnerabilities within 3 months of release]]		[[Image:Vista-90day-vuln-compare.PNG\|thumb\|350px\|right\|Security vulnerabilities within 3 months of release]]
-	A study was done that compared the number of security problems found in each operating system within 3 months of release. Windows Vista had by far the lowest number of bugs, while Linux distributions had the highest. This data cannot be taken at face value, however, due to the open source nature of Linux. Clearly many more bugs will be found in an operating system where everyone can view the code. This may actually be better for security, even though according to the chart it would seem not to be. <br>Comparing Windows Vista and Mac OS X, however, is relevant. Since Mac OS X is mostly closed source, this study indicates that Windows Vista is more secure than Mac OS X seeing as it had the least number of security problems. However, since Windows has a history of always having the highest market share, it is most likely that hackers will continue to focus their attacks on Windows. Even though the current market share of Vista is about 8%, based on previous trends that will most likely rise in the future.	+	A study was done that compared the number of security problems found in each operating system within 3 months of release[[http://exchangepedia.com/blog/2007/06/numbers-talk-vista-most-secure-os-of.html 12]]. Windows Vista had by far the lowest number of bugs, while Linux distributions had the highest. This data cannot be taken at face value, however, due to the open source nature of Linux. Clearly many more bugs will be found in an operating system where everyone can view the code. This may actually be better for security, even though according to the chart it would seem not to be. <br>Comparing Windows Vista and Mac OS X, however, is relevant. Since Mac OS X is mostly closed source, this study indicates that Windows Vista is more secure than Mac OS X seeing as it had the least number of security problems. However, since Windows has a history of always having the highest market share, it is most likely that hackers will continue to focus their attacks on Windows. Even though the current market share of Vista is about 8%, based on previous trends that will most likely rise in the future.

	===Open Source vs. Closed Source===		===Open Source vs. Closed Source===

Ohairek: /* Mac OS X Security Features */

2007-12-05T06:14:56Z

Mac OS X Security Features

← Older revision		Revision as of 06:14, 5 December 2007
Line 32:		Line 32:
	==Mac OS X Security Features==		==Mac OS X Security Features==
	Mac OS X Leopard is the most recent release of Mac OS X. Some of its major features are:		Mac OS X Leopard is the most recent release of Mac OS X. Some of its major features are:
-	*Open Source[[http://www.apple.com/macosx/features/300.html 9]]	+	*Open Source[[http://www.apple.com/macosx/features/300.html 8]]
	Since a portion of the operating system is open source, faults in the code can be found by anyone. This means patches can be found much faster than if the developers were the only ones allowed to view the source code.		Since a portion of the operating system is open source, faults in the code can be found by anyone. This means patches can be found much faster than if the developers were the only ones allowed to view the source code.
-	*Sandboxing[[http://www.apple.com/macosx/features/300.html 9]]	+	*Sandboxing[[http://www.apple.com/macosx/features/300.html 8]]
	Gives programs as few resources as possible so as to prevent the program from gaining access to vital areas of the system.		Gives programs as few resources as possible so as to prevent the program from gaining access to vital areas of the system.
-	*File Tagging and Signed Applications [[http://www.apple.com/macosx/features/300.html 9]]	+	*File Tagging and Signed Applications [[http://www.apple.com/macosx/features/300.html 8]]
	If a program has not been run before, it is tagged. The first time it is opened, the user is asked if the file is OK to be run. Signed applications are ones that have a digital signature. These help identify the integrity and trustworthiness of the program.		If a program has not been run before, it is tagged. The first time it is opened, the user is asked if the file is OK to be run. Signed applications are ones that have a digital signature. These help identify the integrity and trustworthiness of the program.
-	*Library Randomization [[http://www.apple.com/macosx/features/300.html 9]]	+	*Library Randomization [[http://www.apple.com/macosx/features/300.html 8]]
	Same idea as the Windows address space randomization, this helps protect against exploits.		Same idea as the Windows address space randomization, this helps protect against exploits.

Ohairek: /* Windows Security Features */

2007-12-05T06:14:36Z

Windows Security Features

← Older revision		Revision as of 06:14, 5 December 2007
Line 20:		Line 20:
	==Windows Security Features==		==Windows Security Features==
	Vista, will be the focus here since it is the newest. Some of the more major security features include the following:		Vista, will be the focus here since it is the newest. Some of the more major security features include the following:
-	*User Account Control[[http://en.wikipedia.org/wiki/Security_and_safety_features_new_to_Windows_Vista#User_Account_Control 5]]	+	*User Account Control[[http://en.wikipedia.org/wiki/Security_and_safety_features_new_to_Windows_Vista#User_Account_Control 4]]
	[[Image:180px-User_Account_Control_administrator_dialog.png\|frame\|An example of User Account Control‎]]		[[Image:180px-User_Account_Control_administrator_dialog.png\|frame\|An example of User Account Control‎]]
	Each time the something occurs that may affect the systems security, a prompt will appear that asks whether or not it should be allowed.		Each time the something occurs that may affect the systems security, a prompt will appear that asks whether or not it should be allowed.
-	*Address Space Randomization[[http://en.wikipedia.org/wiki/Security_and_safety_features_new_to_Windows_Vista#Preventing_exploits 6]]	+	*Address Space Randomization[[http://en.wikipedia.org/wiki/Security_and_safety_features_new_to_Windows_Vista#Preventing_exploits 5]]
	Many hacker exploits involve overflows into other portions of system memory in order to manipulate certain pieces of code. Vista has randomized memory in order to prevent this. By having memory more scattered, overflows often will not modify the correct address in memory, thereby preventing an exploit.		Many hacker exploits involve overflows into other portions of system memory in order to manipulate certain pieces of code. Vista has randomized memory in order to prevent this. By having memory more scattered, overflows often will not modify the correct address in memory, thereby preventing an exploit.
-	*Integrity-Level Access[[http://en.wikipedia.org/wiki/Security_and_safety_features_new_to_Windows_Vista#Application_isolation 7]]	+	*Integrity-Level Access[[http://en.wikipedia.org/wiki/Security_and_safety_features_new_to_Windows_Vista#Application_isolation 6]]
	Everything that is running in Vista is given a certain trust level. For example, something with lower trust cannot modify something with a higher trust level, but something with higher trust may be able to modify something with a lower trust level.		Everything that is running in Vista is given a certain trust level. For example, something with lower trust cannot modify something with a higher trust level, but something with higher trust may be able to modify something with a lower trust level.
-	*Improved Firewall and Address Stack [[http://en.wikipedia.org/wiki/Security_and_safety_features_new_to_Windows_Vista#Windows_Firewall 8]]	+	*Improved Firewall and Address Stack [[http://en.wikipedia.org/wiki/Security_and_safety_features_new_to_Windows_Vista#Windows_Firewall 7]]
	Some updates and improvements from the XP firewall and network security.		Some updates and improvements from the XP firewall and network security.