平台安全威胁识别

Kyungroul Lee, Hyeungjun Yeuk, Habin Lim, Kangbin Yim
{"title":"平台安全威胁识别","authors":"Kyungroul Lee, Hyeungjun Yeuk, Habin Lim, Kangbin Yim","doi":"10.1109/BWCCA.2015.102","DOIUrl":null,"url":null,"abstract":"In this paper, we analyze security threats against the services that limits allowance only to the registered platforms for their users, of which core technology is called designated platform solution and it has been deployed in several critical services such as on-line banking, financial transactions and so on. In this paper, we classify potential security threats against this solution into four different areas, process, network layer, software module, and terminal environment. Then, we analyze the security threats by deriving the practical vulnerabilities in each area. The results from this work will be helpful for defining new criteria to improve the security level of the services based on the designated platform solution.","PeriodicalId":193597,"journal":{"name":"2015 10th International Conference on Broadband and Wireless Computing, Communication and Applications (BWCCA)","volume":"17 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2015-11-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"3","resultStr":"{\"title\":\"Security Threats to the Platform Identification\",\"authors\":\"Kyungroul Lee, Hyeungjun Yeuk, Habin Lim, Kangbin Yim\",\"doi\":\"10.1109/BWCCA.2015.102\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"In this paper, we analyze security threats against the services that limits allowance only to the registered platforms for their users, of which core technology is called designated platform solution and it has been deployed in several critical services such as on-line banking, financial transactions and so on. In this paper, we classify potential security threats against this solution into four different areas, process, network layer, software module, and terminal environment. Then, we analyze the security threats by deriving the practical vulnerabilities in each area. The results from this work will be helpful for defining new criteria to improve the security level of the services based on the designated platform solution.\",\"PeriodicalId\":193597,\"journal\":{\"name\":\"2015 10th International Conference on Broadband and Wireless Computing, Communication and Applications (BWCCA)\",\"volume\":\"17 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2015-11-04\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"3\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2015 10th International Conference on Broadband and Wireless Computing, Communication and Applications (BWCCA)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/BWCCA.2015.102\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2015 10th International Conference on Broadband and Wireless Computing, Communication and Applications (BWCCA)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/BWCCA.2015.102","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 3

摘要

本文分析了仅允许注册平台为其用户提供服务的安全威胁,其核心技术被称为指定平台解决方案,并已部署在网上银行、金融交易等关键服务中。本文将该解决方案的潜在安全威胁分为流程层、网络层、软件模块和终端环境四个方面。然后,通过推导各个领域的实际漏洞,对安全威胁进行分析。这项工作的结果将有助于定义新的标准,以提高基于指定平台解决方案的服务的安全级别。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
Security Threats to the Platform Identification
In this paper, we analyze security threats against the services that limits allowance only to the registered platforms for their users, of which core technology is called designated platform solution and it has been deployed in several critical services such as on-line banking, financial transactions and so on. In this paper, we classify potential security threats against this solution into four different areas, process, network layer, software module, and terminal environment. Then, we analyze the security threats by deriving the practical vulnerabilities in each area. The results from this work will be helpful for defining new criteria to improve the security level of the services based on the designated platform solution.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信