This summer vacation, I will go to a company for practical training.This company is named Townowner Real Estate(滕王阁地产)，it will sell the houses called Xiamen Straits International Community(厦门海峡国际社区)。This community is on the north of the Xiamen International Convention and Exhibition Center(厦门国际会展中心)。The community is very big, it has 380,000 square meters.The houses are expensive,everyone cost about 4,000,000yuan,and the furniture are famous brand in the world. I have some photos about it,but for the internet has some problems , so ,I will upload these photos in other time.I am lucky for the chance to work in the company for a month. I think that I can study a lot of things in the month,it will be help for me to look for work when I graduate from school.

Finished by :lizhonggan(李忠淦)，huangyisheng(黄义声),lidonghua(李东华)

Number.:(lizhonggan)23020062203773

Main Points and Definitions of Trusted Computing

What is trust?

The willingness of a party to be vulnerable to the actions of another party based on the expectation that the other would perform a particular action important to the trustor, irrespective of the ability to monitor or control that other party

Describe an example of how to enable trust in E-Commerce.

trust could be built if favorable technical, business,

regulatory, and legal environments are present online

Describe Trusted Computing – past and present.

In the late 1960s,research and development efforts focused on computer security for the United States military which hadbeen the dominant computer user since the 1940s

in the early 1980s, the United States Department of Defense (DoD) developed the Computer Security Initiative (CSI)

The current computing environment is increasingly global and open, fueled by the explosive growth of

the Internet

What is the Trusted Computing Base?

The heart of a trusted computer system is the Trusted Computing Base (TCB) which contains all of the

elements of the system responsible for supporting the security policy and supporting the isolation of

objects (code and data) on which the protection is based

What is a Trusted Platform?

The heart of a trusted computer system is the Trusted Computing Base (TCB) which contains all of the

elements of the system responsible for supporting the security policy and supporting the isolation of

objects (code and data) on which the protection is based

Define RTM

A software release is the distribution (whether public or private) of an initial or upgraded  version of a computer  software product. The software engineers  and company doing the work decide on how to distribute the program or system, or changes to that pre downloads and compact discs

Define RTS and Protected Storage

A run-time system ,also called runtime system or just runtime , is a collection of software designed to support the execution of computer programs written in some computer language. The run-time system may provide software services such as subroutines and libraries for common operations, implementation of programming language commands, type checking, debugging.

Define RTR

Real Time Reliable  。A version called Duplex Multi Environment Real Time  was the operating system for the minicomputer

What is attestation?

Attestation clause, which is the verification of a document, especially a pleading or will (law), by oath or affirmation

Define a TPM.

a general term for technologies used to control access to information, especially in the context of copyright

What is TSS?

which encompasses the software on the platform that supports

the platform’s TPM

List some of the issues surrounding Trusted Computing.

• Having a TPM will keep me from using open source software

• Stop the use of open source operation systems, e.g. Linux

• TCG, Palladium/NGSCB, and DRM are all the same

• Loss of Internet Anonymity

List some solutions enabled by Trusted Computing.

• Security Solution Areas: Other areas where TC can enhance current security implementation include

(Sprague, 2006, p. 17):

o Data protection: Protects private keys in hardware. Allows workgroup access to

encrypted secure drives.

o Simplified Sign-On: TC protects and automatically supplies passwords and personal

information.

o Strong Network Access: Adds authentication factor to or replace passwords for network

access.

o Strong Remote Access: Uses TPM as a fixed hardware token for access to VPN.

o Secure Email: Adds hardware-based encryption.

o PKI: Protects private keys in hardware.

o Platform Policy Management: Allows IT management of security policies, TPM keys,

and certificates.

o Platform State or Condition: Allows for granting network access by type or state of PC in

addition to user credentials.

List some adopters of Trusted Computing.

• The NSA adopted a standard for full-disk encryption based on the TPM since it judged that TCG’s

architecture would foster compatibility among and reliability across heterogeneous PC clients

• U.S. Department of Defense (DoD) issued a mandate requiring all new purchases of computing

devices (e.g., servers, desktops, laptops, and PDAs) to include a TPM or higher to support DoD

enterprises

• The Federal Deposit Insurance Corporation (FDIC) issued a strong recommendation to include

trusted platform modules to enable device and user authentication

• The Japanese Ministry of Economy, Trade and Industry (METI) is sponsoring projects (health care

and infrastructure) that build upon the capabilities of the TP as the foundation for a new security

model

• A large Japanese pharmaceutical company uses the TPM to enable VPN client authentication with

multi-factor authentication of biometric fingerprint and password

• A U.S. Pizza chain with more than 340 stores, an automobile rental company, a manufacturing

company based in Chicago, Michigan State University, an IT company, as well as a Canadian

Health care provider all use TPM enhanced software to manage the company’s desktops and

laptops, to backup keys, to authenticate users, and to encrypt important customer data

What are some of the trends of Trusted Computing?

To stay ahead, innovative security solutions will need to be developed to advance global information assurance for a more secure future in cyberspace.

Teacher: Jeffteo

           Today’s class is reserved for the treasure hunt. You may work in groups of up to three. Your goal is to uncover the four secret words. The first student/group to successfully obtain these secret words will win a prize.

       To uncover the four secret words,I had used OpenStego+v0[1].3.1,TrueCrypt  and  wbs43open-win32. Use these tools I can get the four secret words,but  I foget what are the four secret words.

        Now,I just have two secret words :

Secret word number 2 is

steganography

Clue for next secret:

The truecrypt volume RANDOM where you found this file also has a hidden volume.  Open RANDOM with the password “thisisveryverysecret”.

Secret word number 3 is

encryption

Clue for next secret:

You found secret word number 1 in a file named RANDOM that was really a PDF file. This PDF file contains the last secret word hidden using the program wbStego4 and the password “lastsecret”.  This hidden file is a very small text file that only contains one word.  This one word is secret word number 4.

      This class is funy.I know that how to use these tools to uncover the secret words.

Finished time: June 28

Number:23020062203773

Question 1) Before you ran Secunia, how many problem applications did you think you might have?

Answer: Before I ran Secunia PST,  I think my computer was safe for my computer being installed ESET NOD 32. So, I think that my computer maybe not have problem.

Question 2) How many vulnerable applications did Secunia find?

Answer: After I ran Secunia PST, the Secunia PST have found a vulnerable application. The vulnerable application is the WinRAR 3.x

Question 3) How many of the vulnerable applications have you updated/patched?

Answer: I haven’t updated the WinRAR 3.x ,I think it doesn’t matter. My computer have ESET NOD 32 and 360 Safe, they have not found this problem. So, I think the WinRAR 3.x‘s problem is just for the edition is low, but the WinRAR 3.x is running well and my computer is safety. That is OK

Writen By：LiZhongGan(李忠淦)

Number:23020062203773

History of Computing

The history of computing is a long process. There have many scientists trying their best to developing the computing.  

The first computing device allowed you to do some fairly rudimentary rithmetic on it, but it actually was something that allowed people to compute a lot faster than they could by keeping track of stuff in their head. The real sort of advances in what we think of as computing actually came around in the 1800’s. That was someone by the name Charles Babbage. Anyone heard of Charles Babbage, by the way, a just quick show of hands. he designed something called the Difference Engine and then he designed something called the Analytic Engine, which was supposed to be even more powerful, and interestingly enough neither one of them was actually built during his lifetime.

Computing turns out the first programmer was a woman by the name of Ada Byron, she was actually very taken by the designs of Charles Babbage’s machines and actually wrote programs.

In 1930’s and 40’s, There was a computer that was built at Iowa State by Atanasoff and Berry. Really it was in 1971, that the first  microprocessor came around.

Then,it turns out that the computer actually understands zeros and ones,but people are real bad at writing ones and zeros in a form that computers can understand. So we program what’s known as a high-level language, such as java, C or C++ or Basic or Fortran or whatever the case may be.

From next time,the scientists are developing the high-level language.They make the computer working more and more fast.

      My name is lizhonggan,I am from LianCheng of FuJian province in China. LianCheng is beautiful. There is a famous mountain, Guan Zai Shan (冠豸山) .

There also have many delicious food, such as 包粄,

苞米花,

地瓜干 and so on. If you have chance, you could visit it and you will get some move.

      When I was young, my parents left me at home with my grandma and they went out to making money with my two sisters. Though my parents left me alone, I also love them. My family is poor, my parents do their best to make their three children studing well at school. Now, it seems that my parents are very old,. Actually, they are less than 50. So, I have a dream that I will make a lot of money to live my parents comfortable when I graduated from university. I respect my parents. Though they read a little of books, they also big men in my heart. I have two sisiters, one is studing in Xiamen University of Technology, the other one is studing in hospital school(卫生学校). We are studing hard.