UNIX /Linux versus MAC versus Windows Paper

POS/355

March 11, 2013
Bhupinder Singh

UNIX/Linux versus MAC versus Windows Paper

Introduction Today we live in a world where technology is the way to go. Even in this century there are people that are still clueless on the operating system. It is different, exciting when a new and advance system comes out. But some of us are so confused when it comes to the basics of new technology. Operating systems are programs which manages the computer’s hardware. The systems provide a basic for the applications programs between the computer user and its hardware. When looking, there are so many different types of operating systems that are available. The four main operating systems that are used are Windows, Mac, UNIX, and Linux. For every computer there are many different items that make the system a whole. When it comes to the different operating systems there are different features available, even though when you think of computers a person might think security will all be the same but there are difference between each one. As you read more you will understand the security and the difference between a MAC, UNIX/LINUX and Windows systems and how each one works. Access control goal is to protect a resource from unauthorized access while facilitating seamless and legitimate use of such resources. Presently, each day users hold the need to access to those resources through a broad line of devices, such as PCs, laptops, PDA, smartphones and kiosks. Most organizations need to provide protection for their files and allow the correct people to access. The fundamental goal of an Access management system is to maintain confidentiality of user information and access, integrity of information control, availability of information and resources and accountability for knowing who holds the access to such information. Memory Management for MAC Memory management is the process of allocating memory during your programs runtime.
Memory Management in MAC OS is a multi-core and multi-processor execution that is supported and a programming API, which is called grand central dispatch. It is in the MAC OS. It provides a pool of available threads. There are ways to prevent memory related problems; Freeing data that is still in use, this can cause memory corruption that can result in your application crashing or worse corrupted user data. The MAC operating system can provide most concurrency as possible based on the number of cores available, and those threads depend on the capacity of the system. Security for MAC A Mac system has many components to work properly and also security features to use to keep the operating system working properly and also secure. Four features a Mac system offers are the following: 1. Back up your data with Time Machine 2. New updates Notice, always hit install 3. Enable Keychain 4. Know your source Back up your data with Time Machine is a feature that is installed on the operating system and backs up entire system on an external hard drive; all you have to do is plug it in. Also another option that is convenient is the I Cloud which backs up your data but never fully trust it since it can have errors and hacked easier since after all it is another company. The New updates , always hit install pop up allows you to install all new updates as they become available which helps assist keeping up to date on all features that are required on your operating system when needed. The Enable Keychain option has you changing your password so you will have fewer chances of getting your system hacked by others and also keeping your personal information secured and safe on the system which prevents Identity Theft, bank information etc. becoming known. Know your Source feature allows you to avoid downloading email attachments that have viruses attached to them, or malicious attachments that are opened on your system when you open the email attachments. Access Management for MAC In Mac, the Local User Management is a control that exercises over users of your computer without the use of a separate server. It works by a Multiple User control panel, which started with the Mac OS 9. The system works by setting Capabilities or Limitations, similar to a Parental Control System. The system is set to permit a user to open all system preferences panes, change passwords, burn discs, remove items from the Docks, open individual applications and use the Simple Finder. The system holds a preselected list of what can each user do, and a simple change in this list will allow the admin to control how the information is treated inside the system. Memory Management for Windows Windows memory management system is both physical and has virtual memory. It is mainly controlled by the virtual memory managers and pages. “Windows operating system operates on many platforms then it uses page sizes that can range between 4KB to 64KB. So this means that windows virtual memory can control how memory can allocate paging performance” (Stallings, 2013). Committed, Available, and Reserved are three types of regions of space or memory that the operating system can manage. Committed region is space it’s pages that have been stored either in physical or virtual memory. It also allows the process to access the virtual memory pages. Available region is where the address of the process is not being used. Reserved region is space that is not available for any other use and waits for a processing. Security for Windows For the Windows operating system there are many programs out there you can purchase or download for free to assist in keeping your system safe from intruders. There are many firewall, virus and spyware programs for a person to use, some examples are: Norton, AVG, Window Security Center etc. All are there depending on the type of security you are looking for. For Anti-virus programs you have the following: Bit defender Internet Security Suite, Avira, Kaspersky and F-Secure. Process (Logicchild, 2008). Access Management for Windows Windows Access Management works by using two basic parts for the access control. This is Access Tokens and Security Descriptors. When a user logs on, the system will go thru a process call authentication, which means the user will have to prove he holds access to the server. This goes by using an account name and a password. If the logon is successful, the system will give the user an access token, anything done by the User will be recorded to the access token. When at work, if a securable object is created, the system assigns it a security descriptor that will contain the security information specified by its creator.

Memory Management for UNIX/Linux UNIX is different form Linux when it comes to managing its memory. The process that UNIX uses is swapping, it done by moving chucks of the virtual memory. In order for this to work pages is the main memory and moves others in. the pages are needed to be accessible in the main memory from the demand of the CPU. The CPU will attempt to access a page that is no longer available from the main memory. The main purpose for the memory manager is to minimize the number of page faults that will occur. Another one that memory management uses by UNIX is mapping. Mapping is when a segment of files, virtual memory is designed as a corresponding to the contents of the given file. So the mapping file is accessed actually by pulling data from the file itself. Linux memory management characteristics are basically the same as the UNIX, but the UNIX just has its own features that are a little different. Linux utilizes its virtual memory, in its scheme and kernel memory allocation to handle addressing and allocation of memory to a specifics.

Security for UNIX/Linux Then UNIX/LINUX system has the following security features installed on the operating system and also available to you when using the system: 1. User Accounts 2. File Permission 3. Data Verification 4. Encrypted Storage 5. Secured Remote Access with OPENSSH 6. Software Management 7. Host Integrity Testing 8. System Recovery 9. Resource Allocation Controls 10. Monitoring and Audit Facilities 11. The System Firewall 12. Application Isolation 13. A Note on Virus and Malware

For the User Account, an option has its root account that is there at all time with full access to all the features in the operating system and also has sub accounts that are there but not as much file permission. The File Permission is a feature that is marked with three options and allows a user depending on whom the user is to be able to access and modify depending on what they are seeking and wanting to do with the file. Data Verification allows you to use a checksum for files and also create GNU Privacy Guard for encrypting files and data, also has evolution email application which assists you to both signing and encrypting emails. The Encrypted Storage feature allows a person to create volume of encrypted files for your sensitive files to keep safer, always remember in order to access these though you will have to remember the password you created. Secured Remote Access with OPENSSH has the following options: • Remote command-line access • Remote command execution • Remote access to graphical software • File transfers

Software Management is helps identify what software is outdate and allows a person to update the needed software when needed. Using this will always make sure you have the most current software needed on your operating system. Host Integrity Testing assists you to in verifying the system is working correctly and also not tampered with, also works side by side with the data verification process since it tests against the checksum files. System Recovery option allows you to be able to bring your system and all your data back on operating system that you saved when your system crashes by malicious attack or by accident depending on what is all saved. Resource Allocation Controls assist to configure several mechanisms to limit the resources that an application or user account may consume. On systems with multiple users, enforce resource limits to ensure that no user may accidental or deliberately cause facilities to fail by using all of the available resources. ("Pc Mag", 2012). Monitoring and Audit facilities allows you to records activities on your system and reports changes that are being done on the system, so it will always explain what was done and also what is running on system etc. The System Firewall will restrict incoming and outgoing network connections depending on the set of rules that are defined by the administrator; you can use the default type or program your own depending on what you want the system to run. Application Isolation allows usage of what programs are being used and ran on the system so they are working together rather than against each other. The following is how it is determine and used: • Mandatory Access Control (MAC) supplements the normal UNIX security facilities of a system by enforcing absolute limits that cannot be circumvented by any program or account. • Virtualization enables you to assign a limited set of hardware resources to a virtual machine, which may be monitored and backed up by separate processes on the host system. • Virtualization enables you to assign a limited set of hardware resources to a virtual machine, which may be monitored and backed up by separate processes on the host system. ("Pc Mag", 2012). A Note of Virus and Malware is the program designed to watch malicious attacks and also keep an eye on virus to safe guard your system from attacks and still keep everything safe. Access Management for UNIX/Linux On the other hand, Linux Access controls work slightly differently. The Linux system always has require the su and sudo tools to delegate authority. Also, the system works by using the traditional contain password in the form of the /ect/passwd file, as well as the shadow passwords, in the /ect/shadow. In the system, the user database contains not only the passwords, but also, holds information about the users, such as the names, home directories and login shells. This information is set as public, in order for anyone who may require reading it. The password is store encrypted. This does hold a drawback that anyone with access to the encrypted password can use various cryptographic methods, without the need to log into the computer. File Management There are many ways to manage files better and also organize the current information that you have already. The first way to manage files is to use documents, with the document feature or notepad features. My documents is an easy way to store all of you information, and for windows 7 there is the libraries section which is the easiest way to section off your music, videos, documents and also photos. Backing up your information should be done all the time to make sure that your information is safe and secure. While backing up all your information makes sure you are naming your files and folders to remind you of the exact information that are on those documents. When naming your files and folders make sure to keep them all short and sweet so that they are easier to read and find when searching for the folders. So when you are making folders for your files you need to make sure that your subfolders are put into alphabetized folders so that it will be easier to look and find what you are looking for. The other thing is using shortcut and shortcut links instead of multiple copies. The reason for this is you will not have so much information everywhere within your system. This way it will also allow you to get to the files and folders that you use every day. There is also one last reason that can make it easier for file management and this is to store documents online. Thing like Microsoft SharePoint 2010 site and also Windows Live SkyDrive.

In conclusion In today’s world technology is everywhere and with the new and existing technology it can be scary when you don’t know the basic. Starting from how the computer works is a good start in what is needed for you. Starting with trying to understanding the basics of an operating system.

References
Logicchild, (25 September, 2008). Windows Memory Management. Retrieved from www.codeproject.com

Mary Landesman, (n.d.) Top Windows Antivirus. Retrieved from: www. http://antivirus.about.com/od/antivirussoftwarereviews/tp/aatpavwin.htm

Sara Yin. (21 August, 2012). 8 Simple Tips for MAC Security. Retrieved from: www. http://www.pcmag.com/article2/0,2817,2408621,00.asp

Stallings, W. (2012). Operating Systems: Internals and Design Principles. Retrieved from www.University of Phoenix.

StuartEllis.eu. (06 February, 2011). Linux and UNIX Security Features. Retrieved From: https://ecampus.phoenix.edu/secure/aapd/cwe/citation_generator/web_01_01.asp