Return to security98-slides.ps CVS log

Up to [local] / www / papers

more slides

%!PS-Adobe-3.0
%%Creator: groff version 1.10
%%CreationDate: Fri Jan 23 16:22:01 1998
%%DocumentNeededResources: font Palatino-Bold
%%+ font Times-Roman
%%+ font Courier
%%DocumentSuppliedResources: procset grops 1.10 0
%%Pages: 10
%%PageOrder: Ascend
%%Orientation: Landscape
%%EndComments
%%BeginProlog
%%BeginResource: procset grops 1.10 0
/setpacking where{
pop
currentpacking
true setpacking
}if
/grops 120 dict dup begin
/SC 32 def
/A/show load def
/B{0 SC 3 -1 roll widthshow}bind def
/C{0 exch ashow}bind def
/D{0 exch 0 SC 5 2 roll awidthshow}bind def
/E{0 rmoveto show}bind def
/F{0 rmoveto 0 SC 3 -1 roll widthshow}bind def
/G{0 rmoveto 0 exch ashow}bind def
/H{0 rmoveto 0 exch 0 SC 5 2 roll awidthshow}bind def
/I{0 exch rmoveto show}bind def
/J{0 exch rmoveto 0 SC 3 -1 roll widthshow}bind def
/K{0 exch rmoveto 0 exch ashow}bind def
/L{0 exch rmoveto 0 exch 0 SC 5 2 roll awidthshow}bind def
/M{rmoveto show}bind def
/N{rmoveto 0 SC 3 -1 roll widthshow}bind def
/O{rmoveto 0 exch ashow}bind def
/P{rmoveto 0 exch 0 SC 5 2 roll awidthshow}bind def
/Q{moveto show}bind def
/R{moveto 0 SC 3 -1 roll widthshow}bind def
/S{moveto 0 exch ashow}bind def
/T{moveto 0 exch 0 SC 5 2 roll awidthshow}bind def
/SF{
findfont exch
[exch dup 0 exch 0 exch neg 0 0]makefont
dup setfont
[exch/setfont cvx]cvx bind def
}bind def
/MF{
findfont
[5 2 roll
0 3 1 roll
neg 0 0]makefont
dup setfont
[exch/setfont cvx]cvx bind def
}bind def
/level0 0 def
/RES 0 def
/PL 0 def
/LS 0 def
/MANUAL{
statusdict begin/manualfeed true store end
}bind def
/PLG{
gsave newpath clippath pathbbox grestore
exch pop add exch pop
}bind def
/BP{
/level0 save def
1 setlinecap
1 setlinejoin
72 RES div dup scale
LS{
90 rotate
}{
0 PL translate
}ifelse
1 -1 scale
}bind def
/EP{
level0 restore
showpage
}bind def
/DA{
newpath arcn stroke
}bind def
/SN{
transform
.25 sub exch .25 sub exch
round .25 add exch round .25 add exch
itransform
}bind def
/DL{
SN
moveto
SN
lineto stroke
}bind def
/DC{
newpath 0 360 arc closepath
}bind def
/TM matrix def
/DE{
TM currentmatrix pop
translate scale newpath 0 0 .5 0 360 arc closepath
TM setmatrix
}bind def
/RC/rcurveto load def
/RL/rlineto load def
/ST/stroke load def
/MT/moveto load def
/CL/closepath load def
/FL{
currentgray exch setgray fill setgray
}bind def
/BL/fill load def
/LW/setlinewidth load def
/RE{
findfont
dup maxlength 1 index/FontName known not{1 add}if dict begin
{
1 index/FID ne{def}{pop pop}ifelse
}forall
/Encoding exch def
dup/FontName exch def
currentdict end definefont pop
}bind def
/DEFS 0 def
/EBEGIN{
moveto
DEFS begin
}bind def
/EEND/end load def
/CNT 0 def
/level1 0 def
/PBEGIN{
/level1 save def
translate
div 3 1 roll div exch scale
neg exch neg exch translate
0 setgray
0 setlinecap
1 setlinewidth
0 setlinejoin
10 setmiterlimit
[]0 setdash
/setstrokeadjust where{
pop
false setstrokeadjust
}if
/setoverprint where{
pop
false setoverprint
}if
newpath
/CNT countdictstack def
userdict begin
/showpage{}def
}bind def
/PEND{
clear
countdictstack CNT sub{end}repeat
level1 restore
}bind def
end def
/setpacking where{
pop
setpacking
}if
%%EndResource
%%IncludeResource: font Palatino-Bold
%%IncludeResource: font Times-Roman
%%IncludeResource: font Courier
grops begin/DEFS 1 dict def DEFS begin/u{.001 mul}bind def end/RES 72
def/PL 792 def/LS true def/ENC0[/asciicircum/asciitilde/Scaron/Zcaron
/scaron/zcaron/Ydieresis/trademark/quotesingle/.notdef/.notdef/.notdef
/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef
/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef
/.notdef/.notdef/space/exclam/quotedbl/numbersign/dollar/percent
/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen
/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon
/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O
/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/circumflex
/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y
/z/braceleft/bar/braceright/tilde/.notdef/quotesinglbase/guillemotleft
/guillemotright/bullet/florin/fraction/perthousand/dagger/daggerdbl
/endash/emdash/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/hungarumlaut
/dotaccent/breve/caron/ring/ogonek/quotedblleft/quotedblright/oe/lslash
/quotedblbase/OE/Lslash/.notdef/exclamdown/cent/sterling/currency/yen
/brokenbar/section/dieresis/copyright/ordfeminine/guilsinglleft
/logicalnot/minus/registered/macron/degree/plusminus/twosuperior
/threesuperior/acute/mu/paragraph/periodcentered/cedilla/onesuperior
/ordmasculine/guilsinglright/onequarter/onehalf/threequarters
/questiondown/Agrave/Aacute/Acircumflex/Atilde/Adieresis/Aring/AE
/Ccedilla/Egrave/Eacute/Ecircumflex/Edieresis/Igrave/Iacute/Icircumflex
/Idieresis/Eth/Ntilde/Ograve/Oacute/Ocircumflex/Otilde/Odieresis
/multiply/Oslash/Ugrave/Uacute/Ucircumflex/Udieresis/Yacute/Thorn
/germandbls/agrave/aacute/acircumflex/atilde/adieresis/aring/ae/ccedilla
/egrave/eacute/ecircumflex/edieresis/igrave/iacute/icircumflex/idieresis
/eth/ntilde/ograve/oacute/ocircumflex/otilde/odieresis/divide/oslash
/ugrave/uacute/ucircumflex/udieresis/yacute/thorn/ydieresis]def
/Courier@0 ENC0/Courier RE/Times-Roman@0 ENC0/Times-Roman RE
/Palatino-Bold@0 ENC0/Palatino-Bold RE
%%EndProlog
%%Page: 1 1
%%BeginPageSetup
BP
%%EndPageSetup
/F0 23/Palatino-Bold@0 SF(OpenBSD)342.341 164 Q 5.75(Af)168.576 256 S
(ree BSD-copyrighted multi-platform OS)-5.75 E
(with an emphasis on system security)203.421 279 Q(Theo de Raadt)319.973
371 Q(deraadt@openbsd.org)282.311 394 Q .012 LW 72.012 504.001 72.012
108.001 DL 108.012 504.001 36 180.0000 90.0000 DA 273.612 540.001
108.012 540.001 DL 336.603 540.001 273.612 540.001 DL 633.765 540.001
455.421 540.001 DL 684.012 504.001 36 90.0000 0.0000 DA 720.012 108.001
720.012 504.001 DL 684.012 108.001 36 0.0000 -90.0000 DA 108.012 72.001
684.012 72.001 DL 108.012 108.001 36 -90.0000 180.0000 DA/F1 9
/Times-Roman@0 SF(Theo de Raadt\255OpenBSD BOF)338.841 543.001 Q
(Jan 23, 1998)182.844 E/F2 14/Courier@0 SF(Page 1)712.8 588 Q EP
%%Page: 2 2
%%BeginPageSetup
BP
%%EndPageSetup
/F0 23/Palatino-Bold@0 SF(Focus)365.973 118 Q 10.8<8342>119.262 164 S
(SD-copyrighted where possible)-10.8 E 10.8<834d>119.262 210 S
(ulti-platform)-10.8 E 10.8<834b>119.262 256 S
(ernel reliability and new features)-10.8 E 10.8<8353>119.262 302 S
(tandards)-10.8 E 10.8<8349>119.262 348 S(nnovation)-10.8 E 10.8<8346>
119.262 394 S(ree of US crypto export restrictions)-10.8 E 10.8<8353>
119.262 440 S(ecurity)-10.8 E .012 LW 72.012 504.001 72.012 108.001 DL
108.012 504.001 36 180.0000 90.0000 DA 273.612 540.001 108.012 540.001
DL 336.603 540.001 273.612 540.001 DL 633.765 540.001 455.421 540.001 DL
684.012 504.001 36 90.0000 0.0000 DA 720.012 108.001 720.012 504.001 DL
684.012 108.001 36 0.0000 -90.0000 DA 108.012 72.001 684.012 72.001 DL
108.012 108.001 36 -90.0000 180.0000 DA/F1 9/Times-Roman@0 SF
(Theo de Raadt\255OpenBSD BOF)338.841 543.001 Q(Jan 23, 1998)182.844 E
/F2 14/Courier@0 SF(Page 2)712.8 588 Q EP
%%Page: 3 3
%%BeginPageSetup
BP
%%EndPageSetup
/F0 23/Palatino-Bold@0 SF(Platforms)344.894 118 Q 10.8<834d>119.262 164
S(any platforms supported)-10.8 E 162.3 204.25 5.75 DC .012 LW ST(i386)
180 210 Q 162.3 227.25 5.75 DC ST(alpha)180 233 Q 162.3 250.25 5.75 DC
ST(amiga)180 256 Q 162.3 273.25 5.75 DC ST(hp300)180 279 Q 162.3 296.25
5.75 DC ST(sparc)180 302 Q 162.3 319.25 5.75 DC ST(mac68k)180 325 Q
162.3 342.25 5.75 DC ST(arc)180 348 Q 162.3 365.25 5.75 DC ST(mvme68k)
180 371 Q 162.3 388.25 5.75 DC ST(pmax)180 394 Q 72.012 504.001 72.012
108.001 DL 108.012 504.001 36 180.0000 90.0000 DA 273.612 540.001
108.012 540.001 DL 336.603 540.001 273.612 540.001 DL 633.765 540.001
455.421 540.001 DL 684.012 504.001 36 90.0000 0.0000 DA 720.012 108.001
720.012 504.001 DL 684.012 108.001 36 0.0000 -90.0000 DA 108.012 72.001
684.012 72.001 DL 108.012 108.001 36 -90.0000 180.0000 DA/F1 9
/Times-Roman@0 SF(Theo de Raadt\255OpenBSD BOF)338.841 543.001 Q
(Jan 23, 1998)182.844 E/F2 14/Courier@0 SF(Page 3)712.8 588 Q EP
%%Page: 4 4
%%BeginPageSetup
BP
%%EndPageSetup
/F0 23/Palatino-Bold@0 SF(Standards)342.985 118 Q 10.8<8357>119.262 164
S 5.75(eh)-12.502 G(ave run the NIST FIPS 151-2 \(PCTS - POSIX)-5.75 E
(Certi\214cation T)144 187 Q 5.75(est Suite\))-2.553 F 10.8<834d>119.262
233 S(ostly POSIX compliant \(not accredited by a)-10.8 E(testing lab\))
144 256 Q 10.8<8353>119.262 302 S(tarting to make ef)-10.8 E
(forts at conforming to XPG4)-.414 E .012 LW 72.012 504.001 72.012
108.001 DL 108.012 504.001 36 180.0000 90.0000 DA 273.612 540.001
108.012 540.001 DL 336.603 540.001 273.612 540.001 DL 633.765 540.001
455.421 540.001 DL 684.012 504.001 36 90.0000 0.0000 DA 720.012 108.001
720.012 504.001 DL 684.012 108.001 36 0.0000 -90.0000 DA 108.012 72.001
684.012 72.001 DL 108.012 108.001 36 -90.0000 180.0000 DA/F1 9
/Times-Roman@0 SF(Theo de Raadt\255OpenBSD BOF)338.841 543.001 Q
(Jan 23, 1998)182.844 E/F2 14/Courier@0 SF(Page 4)712.8 588 Q EP
%%Page: 5 5
%%BeginPageSetup
BP
%%EndPageSetup
/F0 23/Palatino-Bold@0 SF(Innovation)337.856 95 Q 10.8<834e>119.262 141
S(ot afraid to steal free code from other projects)-10.8 E 10.8<8357>
119.262 187 S(atch all NetBSD and FreeBSD changes, merge)-12.502 E
(good changes)144 210 Q 10.8<8344>119.262 256 S 5.75(ol)-10.8 G
(ots of our own work as well)-5.75 E .012 LW 72.012 504.001 72.012
108.001 DL 108.012 504.001 36 180.0000 90.0000 DA 273.612 540.001
108.012 540.001 DL 336.603 540.001 273.612 540.001 DL 633.765 540.001
455.421 540.001 DL 684.012 504.001 36 90.0000 0.0000 DA 720.012 108.001
720.012 504.001 DL 684.012 108.001 36 0.0000 -90.0000 DA 108.012 72.001
684.012 72.001 DL 108.012 108.001 36 -90.0000 180.0000 DA/F1 9
/Times-Roman@0 SF(Theo de Raadt\255OpenBSD BOF)338.841 543.001 Q
(Jan 23, 1998)182.844 E/F2 14/Courier@0 SF(Page 5)712.8 588 Q EP
%%Page: 6 6
%%BeginPageSetup
BP
%%EndPageSetup
/F0 23/Palatino-Bold@0 SF(Cryptography)322.515 118 Q 10.8<834f>119.262
164 S(penBSD is based out of Canada)-10.8 E 10.8<8350>119.262 210 S
(ermitted to re-export free non-US crypto software)-10.8 E
(to the world at large)144 233 Q 10.8<8343>119.262 279 S
(ontains much crypto, KerberosIV)-10.8 E 5.75(,I)-2.967 G(PSEC)-5.75 E
10.8<8341>119.262 325 S(ll crypto written by developers outside the USA)
-10.8 E .012 LW 72.012 504.001 72.012 108.001 DL 108.012 504.001 36
180.0000 90.0000 DA 273.612 540.001 108.012 540.001 DL 336.603 540.001
273.612 540.001 DL 633.765 540.001 455.421 540.001 DL 684.012 504.001 36
90.0000 0.0000 DA 720.012 108.001 720.012 504.001 DL 684.012 108.001 36
0.0000 -90.0000 DA 108.012 72.001 684.012 72.001 DL 108.012 108.001 36
-90.0000 180.0000 DA/F1 9/Times-Roman@0 SF(Theo de Raadt\255OpenBSD BOF)
338.841 543.001 Q(Jan 23, 1998)182.844 E/F2 14/Courier@0 SF(Page 6)712.8
588 Q EP
%%Page: 7 7
%%BeginPageSetup
BP
%%EndPageSetup
/F0 23/Palatino-Bold@0 SF(Security)352.564 118 Q 10.8<8343>119.262 164 S
(ompleted a comprehensive security audit of the)-10.8 E(source tree)144
187 Q 162.3 227.25 5.75 DC .012 LW ST
(Found security issues in just about every part of)180 233 Q(the system)
180 256 Q 162.3 273.25 5.75 DC ST(Roughly 10 developers involved)180 279
Q 162.3 296.25 5.75 DC ST(Found many new holes)180 302 Q 162.3 319.25
5.75 DC ST(Many proactive changes too \("W)180 325 Q 5.75<658c>-1.702 G
5.75(xt)-5.75 G(he holes)-5.75 E(before we \214nd them"\))180 348 Q
162.3 365.25 5.75 DC ST(Found and \214xed many non-security bugs at the)
180 371 Q(same time.)180 394 Q 10.8<8342>119.262 440 S
(UGTRAQ rarely catches us with our pants down)-10.8 E(\(CER)144 463 Q
(T? Never)-1.265 E(.\))-1.265 E 72.012 504.001 72.012 108.001 DL 108.012
504.001 36 180.0000 90.0000 DA 273.612 540.001 108.012 540.001 DL
336.603 540.001 273.612 540.001 DL 633.765 540.001 455.421 540.001 DL
684.012 504.001 36 90.0000 0.0000 DA 720.012 108.001 720.012 504.001 DL
684.012 108.001 36 0.0000 -90.0000 DA 108.012 72.001 684.012 72.001 DL
108.012 108.001 36 -90.0000 180.0000 DA/F1 9/Times-Roman@0 SF
(Theo de Raadt\255OpenBSD BOF)338.841 543.001 Q(Jan 23, 1998)182.844 E
/F2 14/Courier@0 SF(Page 7)712.8 588 Q EP
%%Page: 8 8
%%BeginPageSetup
BP
%%EndPageSetup
/F0 23/Palatino-Bold@0 SF(Security Examples)299.227 118 Q 10.8<8354>
119.262 164 S(he run of the mill buf)-10.8 E(fer over\215ow)-.414 E 10.8
<832f>119.262 187 S(tmp races, 800 or so)-10.8 E 10.8<838d>119.262 210 S
(awed protocols, ie. ftp, DNS, RPC, NFS)-10.8 E 10.8<8344>119.262 233 S
(enial of service issues)-10.8 E 10.8<8349>119.262 256 S
(nformation gathering)-10.8 E .012 LW 72.012 504.001 72.012 108.001 DL
108.012 504.001 36 180.0000 90.0000 DA 273.612 540.001 108.012 540.001
DL 336.603 540.001 273.612 540.001 DL 633.765 540.001 455.421 540.001 DL
684.012 504.001 36 90.0000 0.0000 DA 720.012 108.001 720.012 504.001 DL
684.012 108.001 36 0.0000 -90.0000 DA 108.012 72.001 684.012 72.001 DL
108.012 108.001 36 -90.0000 180.0000 DA/F1 9/Times-Roman@0 SF
(Theo de Raadt\255OpenBSD BOF)338.841 543.001 Q(Jan 23, 1998)182.844 E
/F2 14/Courier@0 SF(Page 8)712.8 588 Q EP
%%Page: 9 9
%%BeginPageSetup
BP
%%EndPageSetup
/F0 23/Palatino-Bold@0 SF(Future)361.5 118 Q 10.8<8343>119.262 164 S
(ontinue emphasis on integration of crypto)-10.8 E 10.8<8343>119.262 210
S(ontinue assimilating free code)-10.8 E 10.8<8343>119.262 256 S
(ontinued search for security problems)-10.8 E 10.8<8353>119.262 302 S
(oon, full IPv6 integration and completion of)-10.8 E(IPSEC)144 325 Q
.012 LW 72.012 504.001 72.012 108.001 DL 108.012 504.001 36 180.0000
90.0000 DA 273.612 540.001 108.012 540.001 DL 336.603 540.001 273.612
540.001 DL 633.765 540.001 455.421 540.001 DL 684.012 504.001 36 90.0000
0.0000 DA 720.012 108.001 720.012 504.001 DL 684.012 108.001 36 0.0000
-90.0000 DA 108.012 72.001 684.012 72.001 DL 108.012 108.001 36 -90.0000
180.0000 DA/F1 9/Times-Roman@0 SF(Theo de Raadt\255OpenBSD BOF)338.841
543.001 Q(Jan 23, 1998)182.844 E/F2 14/Courier@0 SF(Page 9)712.8 588 Q
EP
%%Page: 10 10
%%BeginPageSetup
BP
%%EndPageSetup
/F0 23/Palatino-Bold@0 SF(OpenBSD)342.341 118 Q 5.75(Af)168.576 164 S
(ree BSD-copyrighted multi-platform OS)-5.75 E
(with an emphasis on system security)203.421 187 Q 10.8<8346>119.262 256
S(or more information start at)-10.8 E(http://www)144 279 Q
(.OpenBSD.org)-2.116 E 10.8<8343>119.262 325 S(heck http://www)-10.8 E
(.OpenBSD.org/ftp.html for a list)-2.116 E(of FTP mirrors)144 348 Q
(Most recent release OpenBSD 2.2, CDROM')108 394 Q 5.75(sa)-1.265 G
(vailable)-5.75 E(for $30 USD.)119.5 417 Q
(\(The project is completely funded by)11.5 E(CD sales\))119.5 440 Q
.012 LW 72.012 504.001 72.012 108.001 DL 108.012 504.001 36 180.0000
90.0000 DA 273.612 540.001 108.012 540.001 DL 336.603 540.001 273.612
540.001 DL 633.765 540.001 455.421 540.001 DL 684.012 504.001 36 90.0000
0.0000 DA 720.012 108.001 720.012 504.001 DL 684.012 108.001 36 0.0000
-90.0000 DA 108.012 72.001 684.012 72.001 DL 108.012 108.001 36 -90.0000
180.0000 DA/F1 9/Times-Roman@0 SF(Theo de Raadt\255OpenBSD BOF)338.841
543.001 Q(Jan 23, 1998)182.844 E/F2 14/Courier@0 SF(Page 10)704.4 588 Q
EP
%%Trailer
end
%%EOF