Information Security Technical Report最新文献_第10页

Mobile communication security controllers an evaluation paper 移动通信安全控制器评估论文

Information Security Technical Report Pub Date : 2008-08-01 DOI: 10.1016/j.istr.2008.09.004

Keith E. Mayes, Konstantinos Markantonakis

{"title":"Mobile communication security controllers an evaluation paper","authors":"Keith E. Mayes, Konstantinos Markantonakis","doi":"10.1016/j.istr.2008.09.004","DOIUrl":"10.1016/j.istr.2008.09.004","url":null,"abstract":"<div><p>Cellular communication via a traditional mobile handset is a ubiquitous part of modern life and as device technology and network performance continues to advance, it becomes possible for laptop computers, Personal Digital Assistants [PDAs; Note abbreviations will be shown in square brackets to avoid confusion with references.] and even electrical meters to better exploit mobile networks for wireless communication. As the diverse demands for network access and value added services increase, so does the importance of maintaining secure and consistent access controls. A critical and well-proven component of the GSM and UMTS security solution is the smart card in the form of the SIM or USIM respectively. This has also extended into some regions using variants of CDMA standards where the RUIM is specified. However with the enlarged range of communications devices, some manufacturers claim that the hardware selection, chip design, operating system implementation and security concept are different from traditional mobile phones. This has led to a suggestion that types of “Software SIM” should be used as an alternative to the smart card based solution. This paper investigates the suggestion.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"13 3","pages":"Pages 173-192"},"PeriodicalIF":0.0,"publicationDate":"2008-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2008.09.004","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122297189","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

Identity management of e-ID, privacy and security in Europe. A human rights view 欧洲电子身份证的身份管理、隐私和安全。人权观点

Information Security Technical Report Pub Date : 2008-05-01 DOI: 10.1016/j.istr.2008.07.001

Paul De Hert

引用次数: 27

Legal and organizational challenges and solutions for achieving a pan-European electronic ID solution 实现泛欧洲电子身份解决方案的法律和组织挑战和解决方案

Information Security Technical Report Pub Date : 2008-05-01 DOI: 10.1016/j.istr.2008.06.001

Thomas Myhr

引用次数: 8

The benefits and drawbacks of using electronic identities 使用电子身份的好处和缺点

Information Security Technical Report Pub Date : 2008-05-01 DOI: 10.1016/j.istr.2008.07.002

Geraint Price

引用次数: 12

Insights on identity documents based on the Belgian case study 基于比利时案例研究的身份证件透视

Information Security Technical Report Pub Date : 2008-05-01 DOI: 10.1016/j.istr.2008.06.004

Danny De Cock, Koen Simoens, Bart Preneel

引用次数: 6

“Building secure business applications at Microsoft” by J. Steer and A. Popli 《在微软构建安全的商业应用》，作者:J. Steer和A. Popli

Information Security Technical Report Pub Date : 2008-05-01 DOI: 10.1016/j.istr.2008.09.001

引用次数: 0

Building secure business applications at Microsoft 在微软建立安全的商业应用程序

Information Security Technical Report Pub Date : 2008-05-01 DOI: 10.1016/j.istr.2008.04.001

John Steer , Ashish Popli

{"title":"Building secure business applications at Microsoft","authors":"John Steer , Ashish Popli","doi":"10.1016/j.istr.2008.04.001","DOIUrl":"10.1016/j.istr.2008.04.001","url":null,"abstract":"<div><p>Like many global enterprises, Microsoft depends on internally developed and third-party line-of-business (LOB) applications to run its daily business activities. Nearly 4000 LOB applications are in service at Microsoft including a significant number of applications that contain business-sensitive data, customer data, or confidential employee data.</p><p>In 2001 the Microsoft IT organization wanted to make sure that the company's security risk was appropriately managed. The Security Development Life cycle for IT (SDL-IT) was created within Microsoft IT to keep track of, assess, and address potential security and privacy vulnerabilities found in LOB applications. A specialist team called the Application Consulting and Engineering (ACE) Team was formed to manage the program, providing support and oversight ensuring that application development teams adhere to the SDL-IT process.</p><p>This paper contains descriptions of the processes and standards that make up the SDL-IT process and discusses best practices that might be useful to other organizations wishing to create and enforce a security and privacy processes for LOB applications. While this paper describes Microsoft ITs own security and privacy process the authors recognize that every organization is unique and believe that the technology agnostic SDL-IT process and methodologies described can be implemented in other enterprises.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"13 2","pages":"Pages 105-110"},"PeriodicalIF":0.0,"publicationDate":"2008-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2008.04.001","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122875986","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Some thoughts on the underlying logic and process underpinning Electronic Identity (e-ID) 关于电子身份(e-ID)的基本逻辑和流程的一些想法

Information Security Technical Report Pub Date : 2008-05-01 DOI: 10.1016/j.istr.2008.06.002

Tony Collings

引用次数: 7

Identity management throughout one's whole life 贯穿一生的身份管理

Information Security Technical Report Pub Date : 2008-05-01 DOI: 10.1016/j.istr.2008.06.003

Marit Hansen , Andreas Pfitzmann , Sandra Steinbrecher

引用次数: 36

Secure software development: Why the development world awoke to the challenge 安全软件开发:为什么开发界意识到了挑战

Information Security Technical Report Pub Date : 2008-01-01 DOI: 10.1016/j.istr.2008.03.001

Mason Brown, Alan Paller

引用次数: 7