Skip to content
lectern.tv
MIT 6.858: Computer Systems Security →0/22
1

1. Introduction, Threat Models

1:17:12
2

2. Control Hijacking Attacks

1:27:38
3

3. Buffer Overflow Exploits and Defenses

1:21:37
4

4. Privilege Separation

1:23:29
5

6. Capabilities

1:21:57
6

7. Sandboxing Native Code

1:23:21
7

8. Web Security Model

1:22:48
8

9. Securing Web Applications

1:22:08
9

Lecture 10: Symbolic Execution (6.858)

1:22:16
10

Lecture 11: Ur/Web (6.858)

1:20:04
11

Lecture 12: Network Security (6.858)

1:18:26
12

Lecture 13: Network Protocols (6.858)

1:21:03
13

Lecture 14: SSL and HTTPS (6.858)

1:18:18
14

Lecture 15: Medical Software (6.858)

1:15:31
15

Lecture 16: Side-Channel Attacks (6.858)

1:22:16
16

Lecture 17: User Authentication (6.858)

1:19:48
17

Lecture 18: Private Browsing (6.858)

1:20:13
18

Lecture 19: Anonymous Communication (6.858)

1:20:13
19

Lecture 20: Mobile Phone Security (6.858)

1:22:00
20

Lecture 21: Data Tracking (6.858)

1:19:38
21

Lecture 22: Information Security at MIT IS&T (6.858)

1:26:51
22

Lecture 23: Security Economics (6.858)

1:17:25

4. Privilege Separation

Nickolai ZeldovichMIT

Professor of Electrical Engineering and Computer Science

1:23:29·2017·graduate level

This lecture introduces the architectural principles and practical implementations of privilege separation, examining how operating systems and applications can isolate components to mitigate security vulnerabilities and enforce the principle of least privilege.

Systems & CSSystems SecurityOperating SystemsSystem SecurityAccess Control

MIT 6.858 Computer Systems Security, Fall 2014

View the complete course: http://ocw.mit.edu/6-858F14

Instructor: Nickolai Zeldovich

Previous · Lecture 3

3. Buffer Overflow Exploits and Defenses

Next · Lecture 5

6. Capabilities

Seminar notes & discussion

Sign in to comment

No public seminar notes on this lecture yet.