Outline for April 5, 2005

Reading: handout

Discussion

"All warfare is based on deception. Hence, when able to attack, we must seem unable; when using our forces, we must seem inactive; when we are near, we must make the enemy believe we are far away; when far away, we must make him believe we are near. Hold out baits to entice the enemy. Feign disorder, and crush him. If he is secure at all points, be prepared for him. If he is in superior strength, evade him. If your opponent is of a choleric temper, seek to irritate him. Pretend to be weak, that he may grow arrogant. If he is taking his ease, give him no rest. If his forces are united, separate them. Attack him where he is unprepared, appear where you are not expected."¹

1. What does this paragraph say to an attacker who is trying to penetrate a system?
2. What does this paragraph say to a system administrator or security officer seeking insight to defend her system?

Outline

1. Robust programming principles
2. Fragile library
3. Robust library
   1. Interface
   2. Internal structures
   3. Tokens and their generation and analysis
   4. Functions