IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process...

83
IN2120 Information Security Lecture 8: Computer Security By: Ijlal Loutfi 10.10.2019

Transcript of IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process...

Page 1: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

IN2120 Information Security

Lecture 8: Computer Security

By: Ijlal Loutfi

10.10.2019

Page 2: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Motivation

Let’s say that You are asked to develop a basic mobile payment application

What security mechanisms/measures do you implement?

Page 3: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode
Page 4: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Security Mechanisms-Examples

Application Security-Client side

Only accept strong passwords

Multi-factor authentication

Testing for memory safety vulnerabilities

Application Security-Server side

Hash & Salt passwords

Network Security

End-2-End encrypted traffic

Page 5: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Is this enough to guarantee your customers’ security?

YES? NO? PROVIDE EXAMPLE OF ATTACKS.

Page 6: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

What happens when we run the application on commodity devices?

Page 7: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Examples of Attacks

A firmware keylogger listening on the password’s keystrokes and leaking them

A browser Malware injecting scripts which modify the transaction details & what is being displayed to you: Overlay attack

A malicious operating system dumping the system memory, including the network’s encryption keys?

Page 8: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode
Page 9: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Platform Security Operating system

Virtual Machine Manager

BIOS/UEFI

Peripheral firmware(e.g.: GPU/NIC/SATA/HDD/EC

System software

Execution

Access to memory

Access to hardware

System software manages user-

level application:

Page 10: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

“Computer and Network security, in practice, starts at the hardware and firmware underneath the end points.”

“Their security provides an upper bound for the security of anything built on top”

Page 11: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

The Importance of Endpoint Security

"Using encryption on the Internet is theequivalent of arranging an armored car todeliver credit card information from someoneliving in a cardboard box to someone living on apark bench.“

(Gene Spafford)

Page 12: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Hierarchy of Security Privileges

Privileged System software getsunrestricted access to ring 3resources/manages it:

Memory

Execution

Access to underlying hardware

Page 13: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Why we need Platorm Secrutity

Establish trust in your platform

Local computation

Netflix wants to ensure you are not duplicating the content.

Health Services to ensure that the doctor’s platform is not going to leak patient’s data.

Bank to ensure that it is you who is approving the credit card transaction and not

Remote computation:

Secure Storage.

Secure Computa

You want to establish trust in service provider

platforms:

Page 14: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

OUR DEVICES ARE TRUSTED BUT ARE THEY TRUSTWORTHY?

Page 15: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Let’s Refocus

The platform security is dictated by the security of

system level software

The security of user-level applications relies on the

platform security

Page 16: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

How Secure is System Software?

Page 17: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Assumption

The millions lines of code developed by hundreds of developpers over decades have

no:

Security vulnerabilities

Backdoors

Page 18: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Reality: Monolithic Operating Systems

• Large Code Base• Unsafe languages

1000 OS LOC 16 to 75 bugs

Page 19: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

What should we do about it?

Page 20: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Platform Security Paradigms

I need to know what I am running

I need to know that what I am runnig is what I expect to be running

I need to improve the security of what I am running

Page 21: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode
Page 22: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

TPM Measurement

A measurement is stored by extending a particular PCR:

• The extend operation is:

• PCR := SHA(PCR + measurement)

• A log of events is stored externally

Page 23: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

TPM Measurement

It is unfeasible to find 2 different measurement values such that when extended returns the same value.

It preservers order in which entities' measurement were extended (extending A then B results in a different value than extending B then A).

The operation allows unlimited number of measurement to be stored

Page 24: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

What do we need to implement this securely?

Secure implementation of the hashing algorithm

A secure immutable storage for the measurements

A way to report the final measurement

An immutable first code

Software Vs. Hardware

Page 25: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Trusted Computing

We don’t trust software, thus:

• To implement such measurement of firmware, some help from hardware is needed for storing and reporting of the measurements reliably, as otherwise malicious software could have forged all the results.

Hence: Hardware-enabled security Or Trusted Computing

Page 26: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Trusted Computing

Hardware-rooted mechanism that can allow us to know the state of the platform?

A number that can tell us whether this is a “Good” or “Bad” Platform

Page 27: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Trusted Platform Module

Page 28: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode
Page 29: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

L08 - Computer SecurityIN2120 2019

Page 30: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode
Page 31: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

CRTM

• “The Core Root of Trust for Measurement (CRTM) MUST be animmutable portion of the Host Platform’s initialization code thatexecutes up on a Host Platform Reset” TCG

• Until recently the CRTM was implemented by the BIOS using .

• The normal SPI flash memory. The same flash memory the attackercan usually modify after successfully attacked the BIOS. This has onlychanged with the latest Intel processors which implement the socalled Boot Guard technology.

Page 32: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Does this integrity measurement mechanism prevent an entity from misbehaving or being malicious?

Page 33: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Short answer: No.

So, what does TPM Integrity provide?

An unforgeable record of all the entities that have been loaded. One can choose whether to trust the system based on this record

Page 34: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode
Page 35: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Key Management

Page 36: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Sealed Storage/Encryption

Page 37: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Key Management

Page 38: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

How do I prevent Replay attacks?

Page 39: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Key Management

Page 40: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode
Page 41: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Summary of TPM Services

MEASUREMENT SEALING REMOTE ATTESTATION

Page 42: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Measured Boot

Page 43: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Trusted Computing GroupTCG History & Evolution

TCPA formed

Trusted Computing Platform Alliance

Founders: IBM, HP, Compaq, Intel and Microsoft

Oct. 1999

1st TPM specification released

Trusted Platform Module

2001

TCPA changes its name to TCG

Trusted Computing Group

Industry standards organization

2002

TCPA TPM spec. adopted by TCG as TPM 1.2

2003

Draft TPM Specification 2.0 published

TPM 2.0 spec. not compatible with TPM 1.2 spec.

2012

Official TPM specification 2.0

2015

Page 44: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Secure Boot

Page 45: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Secure Boot

Secure Boot

• What is referred to as “UEFI Secure Boot” is not really a newhardware technology, but rather merely a way of writing the BIOS insuch a way that it hands down execution only to code, typically OSloader or kernel, which meets certain requirements.

• These requirements are checked by validating if the hash of this nextblock of code is signed with a select key, itself signed with a keyprovided by the OEM (called a Platform Key).

Page 46: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Secure Boot and Backdoors

Imagine the BIOS vendor was asked to provide a backdoor to local lawenforcement

• All the vendor would have to do would be to sign an additionalcertificate, thus allowing “alternative” code to be booted on theplatform.

Page 47: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Platform Security Paradigms

I need to know what I am running

I need to know that what I am runnig is what I expect to be running

I need to improve the security of what I am running

Page 48: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Virtual Memory

Page 49: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Paging

Page 50: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Process Virtual Address Space

Page 51: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Address privilege levels

Page 52: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

L08 - Computer Security

CPU Access Modes/Rings/Privilege Levels

• Hierarchic security levels were introduced in X86 CPU architecture in 1985 (Intel 80386)

• 4 ordered privilege levels

– Ring 0: highest

– Ring 3: lowest

– Intended usage → see diagram:

IN2120 2019

Page 53: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

What happened to rings 1 & 2 ?

• ... it eventually became clear that the hierarchical protection that rings provided did not closely match the requirements of the system programmer and gave little or no improvement on the simple system of having two modes only. Rings of protection lent themselves to efficient implementation in hardware, but there was little else to be said for them. [...]. This again proved a blind alley...

• Maurice Wilkes (1994)

L08 - Computer SecurityIN2120 2019

Page 54: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

L08 - Computer Security

Controlled Invocation

• The user process executes code in specific code segments.

• Each code segment has an associated mode which dictates theprivilege level the code executes under.

• Simply setting the mode of user process code to Kernel would givekernel-privilege to user process without any control of what theprocess actually does. Bad idea!

• Instead, the CPU allows the user process to call kernel code segmentsthat only execute a predefined set of instructions in kernel mode, andthen returns control back to the user-process code segment in usermode.

• We refer to this mechanism as controlled invocation.

IN2120 2019

Page 55: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

What Can Go Wrong?

Page 56: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Hardware supported Data Execution Prevention

• Mark all memory locations as non-executable unless the locationexplicitly contains executable code.

• Relies on processor hardware to mark memory with an attributethat indicates that code should not be executed from thatmemory.

• Processors that support hardware-enforced DEP are capable ofraising an exception when code is executed from a memorylocation where it should not be executed.

Page 57: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Other CPU Modes

Page 58: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Virtualization

Page 59: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Hardware-assisted virtualization

Page 60: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Type 1 VM Architecture (native)

• No host OS

• Hypervisor runs directly on hardware

• High performance

• Traditionally limited GUI, but is improved in modern versions

• HW support can be an issue

Hardware (X86 CPU from Intel or AMD)

Hypervisor

Guest OS VM

e.g. Linux

App.

Guest OS VM

e.g. Mac OS

Virtual

Machines

App. App. App.

Guest OS VM

e.g. Windows

App. App.

IN2120 2019 L08 - Computer Security

Page 61: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

• Guest OS VMs are less privileged than the hypervisor.

• Hypervisor is well protected from the VMs.

• Good performance and good security !

Type 1 VM Architecture Ring Allocation

Ring 3

Ring 0

Hardware

Hypervisor

Guest OS VM

App.

Guest OS VM

App. App. App.

Ring -1

VMX Non-Root, Ring 0

VMX Root – Ring -1

IN2120 2019 L08 - Computer Security

VMX Non-Root, Ring 3

Page 62: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Type 2 VM Architecture (hosted)

Host OS (e.g. Windows, Linux or Mac OS)

Hardware (X86 CPU from Intel or AMD)

Hypervisor

Guest OS VM

e.g. Linux

App.

Guest OS VM

e.g. Windows

Virtual

Machines

App. App. App.App. App.

• Hypervisor runs on top of host OS

• Performance penalty, because hardware access goes through 2 OSs

• Traditionally good GUI

• Traditionally good HW support, because host OS drivers available

IN2120 2019 L08 - Computer Security

Page 63: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

• Guest OS VMs run in Ring 3.

• Guest OS VMs call privileged instructions that are forbidden in Ring 3.

• Forbidden instructions cause exceptions that are handled by interrupt/exception handler to be executed.

• Slow performance !

Type 2 VM Architecture Ring Allocation

Ring 3

Host OS

Hardware

Hypervisor

Guest OS VM

App. App.App. App.

Ring 0

Run VMs in Ring 3

Run Hypervisor in Ring 3

Run Host OS in Ring 0

Guest OS VM

IN2120 2019 L08 - Computer Security

Page 64: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Platform Virtualisation Products

IN2120 2019 L08 - Computer Security

• Microsoft Hyper-V

• VMWare ESX

• Citrix XenServer (Xen)

• ORACLE VM Server (Xen)

• Amazon EC2 (Xen)

• IBM System Z Hypervisor

Type 1

(Native)

• Microsoft Virtual PC

• VMWare Workstation

• Citrix XenClient

• VirtualBox

Type 2

(Hosted)

Hypervisor types

Page 65: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Operating system level virtualization

IN2120 2019 L08 - Computer Security

https://www.slideshare.net/GiacomoVacca/docker-from-scratch

Page 66: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

More CPU Modes

Page 67: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

All the Modes?

Page 68: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode
Page 69: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Platform Security Paradigms

I need to know what I am running

I need to know that what I am runnig is what I expect to be running

I need to improve the security of what I am running

Page 70: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Security by Isolation

Page 71: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Isolation

Run the security-sensitive subset of an application within a separateExecution Environments:

Isolated from the rich vulnerable execution environment.

Trusted Execution Environment

Page 72: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

TEE Realization

Full Physical Hardware Isolation

Logical Multiplexed

Isolation

Page 73: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Full hardware isolation

The code runs within a physically isolated processor Does not share any context with the untrusted execution environment:

1. Co-processors2. Smart card3. Secure elements:

Isolated: Universal Integrated Circuit Card (UICC), SD Card

Embedded

1. Trusted Platform Modules, TPM

Page 74: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Multiplexed Logical Isolation

The security sensitive functions run within the same host commodityprocessor

They share its physical execution context.

Additional CPU-based hardware access control mechanisms areintroduced in order to enforce strict logical isolation of resources.

Page 75: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Intel Software Guard Extensions

Security extensions for the X86 Intel processor family.

Page 76: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode
Page 77: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

TEEs are an Old Primitive

Commodity laptop:

1. TPM

2. Embedded secure element,

3. Removable secure elements

4. A system management mode,

5. A CPU based-TEE such as Intel SGX.

6. Intel management engine

Page 78: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Security-sensitive user-level applications should be leveraging TEE functionalities to protect the integrity and confidentiality of their code

and data.

Unfortunately, this is not the case

User applications still rely on the default software-based protection mechanisms provided by the untrusted commodity system software

Page 79: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Who Uses TEEs?

Commodity TEEs are used by premium stakeholders:

Original Equipment Manufacturers (OEMs), Mobile Network Operators (MNOs), Operating system vendors.

Protect their assets from being compromised by the platform’s system software and end-users:

(MNOs, SIM cards): carrier locking, (OEMs, embedded secure elements, TPMs ): Boot-loader locking, Digital Rights

Management

Page 80: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

OffPAD

Page 81: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Commodity hardware TEEs have been designed to primarily satisfy the security requirements for select few premium stakeholders

They have thus underprioritized the requirements for end-users and other application developers.

Monolithic closed provisioning ecosystem No security multiplexing.

Page 82: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Confidential Computing

• There are ways to secure data at rest and in transit, but you need toprotect your data from threats as it’s being processed.

• TEE hardware provides a protected container by securing a portion ofthe processor and memory. Only authorized code is permitted to runand to access data, so code and data are protected against viewingand modification from outside of TEE.

Page 83: IN2120 Information Security · L08 - Computer Security Controlled Invocation •The user process executes code in specific code segments. •Each code segment has an associated mode

Confidential Computing Consortium

• CCC is a project community at the Linux Foundation dedicated todefining and accelerating the adoption of confidential computing. Itwill embody open governance and open collaboration that has aidedthe success of similarly ambitious efforts.

• The effort includes commitments from Alibaba Cloud, Arm, Baidu,Google Cloud, IBM, Intel, Microsoft, Red Hat, Swisscom and Tencent.

• It will establish open source software and standards and providetools for developers working on securing data in use.


L08 power amplifier (class a)

L08 power amplifier (class a)

L08 architecture considerations

L08 architecture considerations

L08 - SUBSEA CONTROL SYSTEMS

L08 - SUBSEA CONTROL SYSTEMS

L08 Over Fitting

L08 Over Fitting

L08 Interpolation

L08 Interpolation

Verilog l08 Mit

Verilog l08 Mit

Maxwell v16 L08 Optimetrics

Maxwell v16 L08 Optimetrics

IN2120 Information Security · • Authentication frameworks for e-Government User Authentication IN2120 2. Taxonomy of Authentication User Authentication IN2120 3 Authentication

IN2120 Information Security · • Authentication frameworks for e-Government User Authentication IN2120 2. Taxonomy of Authentication User Authentication IN2120 3 Authentication

IN2120 Information Security Lecture 7: Computer Security · IN2120 2018 L07 - Computer Security 6 Approaches to strengthening platform security • Harden the operating system –SE

IN2120 Information Security Lecture 7: Computer Security · IN2120 2018 L07 - Computer Security 6 Approaches to strengthening platform security • Harden the operating system –SE

L08 Disruptive Technology

L08 Disruptive Technology

IN2120 Information Security University of Oslo Autumn 2019 Lecture 2 Cryptography · IN2120 Information Security University of Oslo Autumn 2019 Lecture 2 Cryptography University of

IN2120 Information Security University of Oslo Autumn 2019 Lecture 2 Cryptography · IN2120 Information Security University of Oslo Autumn 2019 Lecture 2 Cryptography University of

L08 Frame.pdf

L08 Frame.pdf

L08 protein metabolism

L08 protein metabolism

Specificatio Shee In-grad L08 L08 - MP Lighting · L08 Application Exterior/Interior directional in-grade light for lighting walls, columns, architectural features or landscape features.

Specificatio Shee In-grad L08 L08 - MP Lighting · L08 Application Exterior/Interior directional in-grade light for lighting walls, columns, architectural features or landscape features.

Q922+re2+l08 v1

Q922+re2+l08 v1

Q922+de1+l08 v1

Q922+de1+l08 v1

L08 Sputtering b

L08 Sputtering b

L08 - Motions, Kempecourses.csail.mit.edu/6.849/fall10/lectures/L08.pdf · L08 - Motions, Kempe.jnt Author: edemaine Created Date: 10/4/2010 9:06:10 PM ...

L08 - Motions, Kempecourses.csail.mit.edu/6.849/fall10/lectures/L08.pdf · L08 - Motions, Kempe.jnt Author: edemaine Created Date: 10/4/2010 9:06:10 PM ...

Delicious E L08

Delicious E L08

l08 09 Lime Soft

l08 09 Lime Soft