Information Security Technical Report最新文献_第10页

Smart cards and remote computing: Interaction or convergence? 智能卡与远程计算:交互还是融合?

Information Security Technical Report Pub Date : 2009-05-01 DOI: 10.1016/j.istr.2009.06.008

Serge Chaumette , Damien Sauveron

{"title":"Smart cards and remote computing: Interaction or convergence?","authors":"Serge Chaumette , Damien Sauveron","doi":"10.1016/j.istr.2009.06.008","DOIUrl":"10.1016/j.istr.2009.06.008","url":null,"abstract":"<div><p>Computing power is largely becoming a basic supply which you can envisage to buy from a provider like you buy power or water. This is the result of a now long running trend that consists in connecting computing resources together so as to set up what can globally be referred to as a remote computing platform, the most up-to-date incarnation of which is the notion of a grid (<span>Foster and Kesselman, 2003</span>). These resources can then be shared among users, what means circulating codes and the results of their execution over a network, what is highly insecure. At the other end of the spectrum of computing devices, smart cards (<span>Mayes and Markantonakis, 2008</span>, <span>Hendry, 2001</span>) offer extremely secure but extremely limited computing capabilities. The question is thus to bridge the gap between computational power and high security. The aim of this paper is to show how large and high capacity remote computing architectures can interact with smart cards, which certainly are the most widely deployed, still the smallest computing systems of the information technology era, so as to improve the overall security of a global infrastructure.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"14 2","pages":"Pages 101-110"},"PeriodicalIF":0.0,"publicationDate":"2009-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2009.06.008","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121210249","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Attacking smart card systems: Theory and practice 攻击智能卡系统:理论与实践

Information Security Technical Report Pub Date : 2009-05-01 DOI: 10.1016/j.istr.2009.06.001

Konstantinos Markantonakis , Michael Tunstall , Gerhard Hancke , Ioannis Askoxylakis , Keith Mayes

引用次数: 59

How to defend against smartcard attacks – Or the amazing number of different ways to check a PIN securely 如何防范智能卡攻击——或者有多少种不同的方法可以安全地检查PIN码

Information Security Technical Report Pub Date : 2009-05-01 DOI: 10.1016/j.istr.2009.06.004

Wolfgang Rankl

引用次数: 0

Transport ticketing security and fraud controls 运输票务保安及欺诈管制

Information Security Technical Report Pub Date : 2009-05-01 DOI: 10.1016/j.istr.2009.06.003

Keith E. Mayes, Konstantinos Markantonakis, Gerhard Hancke

引用次数: 21

Smart card security evaluation: Community solutions to intractable problems 智能卡安全评估:解决社区棘手问题

Information Security Technical Report Pub Date : 2009-05-01 DOI: 10.1016/j.istr.2009.06.002

Tony Boswell

{"title":"Smart card security evaluation: Community solutions to intractable problems","authors":"Tony Boswell","doi":"10.1016/j.istr.2009.06.002","DOIUrl":"10.1016/j.istr.2009.06.002","url":null,"abstract":"<div><p>Evaluation of smart card security faced seemingly intractable problems of consistency and repeatability in its early days. The deeply specialised technologies, large parameter spaces for attacks, and the evolving attack types and countermeasures mean that the scope for variation in evaluation practice, and hence in evaluation conclusions, is potentially huge. The situation is further complicated by the fact that countermeasures against some types of attacks depend on both hardware and software, but there is also a need to evaluate hardware without specific software present at the time of evaluation. Stakeholders in the smart card world have formed a Community that has successfully created and applied interpretation of Common Criteria (ISO 15408) to deal with this problem and to achieve international mutual recognition of evaluation results. This paper discusses examples of the smart card security problem in order to illustrate some of the difficulties, and describes some of the interpretation that has been defined for rating the difficulty of an attack via calculation of an attack potential. It also considers the nature of the Community that has enabled the interpretation to be both defined and put into practice successfully.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"14 2","pages":"Pages 57-69"},"PeriodicalIF":0.0,"publicationDate":"2009-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2009.06.002","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130713319","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

Multiapplication smart card: Towards an open smart card? 多用途智能卡:迈向开放智能卡?

Information Security Technical Report Pub Date : 2009-05-01 DOI: 10.1016/j.istr.2009.06.007

Damien Sauveron

{"title":"Multiapplication smart card: Towards an open smart card?","authors":"Damien Sauveron","doi":"10.1016/j.istr.2009.06.007","DOIUrl":"10.1016/j.istr.2009.06.007","url":null,"abstract":"<div><p>Smart cards were invented four decades ago so as to keep data secrets and to process them secretly. Even though their main goal are still the same today, the smart cards have been subject to many evolutions at both their hardware and software levels. Indeed they have been the target of numerous attacks and new demands from the market. These demands have expanded their domains of application. When they were born and during some thirty years smart cards have been monolithic platforms with a fixed piece of software dedicated to one single application. But in the mid 90's, some technologies appeared that have broken this situation by enabling to easily host several applications on the same card. These new technologies have changed the business models and pushed the smart cards towards new domains and to a world where they will integrate lots of new functionalities.</p><p>The aim of this paper is to give an overview of the evolution of the smart cards (and of their application domains) from monolithic static pieces of hardware and software to a flexible multiapplication platforms. This paper also explores the possibilities to see open multiapplication cards in the future and exposes the breakthroughs that are required to achieve in order to produce such cards.</p></div>","PeriodicalId":100669,"journal":{"name":"Information Security Technical Report","volume":"14 2","pages":"Pages 70-78"},"PeriodicalIF":0.0,"publicationDate":"2009-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/j.istr.2009.06.007","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131896427","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 47

Introduction to this issue 问题介绍

Information Security Technical Report Pub Date : 2009-05-01 DOI: 10.1016/j.istr.2009.07.001

Michael J. Ganley

引用次数: 0

Smart card applications and security 智能卡应用和安全

Information Security Technical Report Pub Date : 2009-05-01 DOI: 10.1016/j.istr.2009.06.006

Xuefei Leng

引用次数: 30

Electronic passports – from secure specifications to secure implementations 电子护照——从安全规范到安全实现

Information Security Technical Report Pub Date : 2009-05-01 DOI: 10.1016/j.istr.2009.06.005

Ingo Liersch

引用次数: 10

A look at Portable Document Format vulnerabilities 查看可移植文档格式漏洞

Information Security Technical Report Pub Date : 2009-02-01 DOI: 10.1016/j.istr.2009.04.001

Sami Rautiainen

引用次数: 8