Kincses, Zoltán

Kincses Zoltán

University of Szeged

Questions on complex dynamic securityZoltán KincsesSecurity is the art of conscious risk taking. The meaning of this definition is that it has to be investedmore in a system’s security than the cost of evading this security. It is obvious that there is no 100security,even if the security of the system is increased up to a non-usable level of the system. In case a secureand easy to operate system is needed, the possibility of auditing is an essential feature, in order todetect the invader during or leastwise after the attack. The right tool for solving this problem is the sureidentification.Sure identification means identifying the individuals and not only the terminals or passwords. Thiscan be ensured through biometry.The secure (authenticated) communication between extremities must be alive during the whole life-cycle of the transmitted information. This can be resolved by cryptology. We have different algorithmsproved mathematically that security depends on the key- handling. This key must be secure stored,portable, easy to use, and not detected by any recently known way from the stored format.Due to different platforms the main problem is the platform dependency. The spreading of the Javaprogramming language makes possible to prepare applications based on the idea of "write once, runanywhere!"The requirements can be resolved through a tool, called smart card. Based on ISO 7816 standard it ispossible to use modern smart cards that are able to generate 1024 bit length RSA keys, store biometricsdata for sure identification, etc. Their security is well-organized against both software and hardwareattacks. Due to Java Card specification it is possible to create platform independent applications.In the paper I intend to show some problems and results in comparison of the ideas described aboveby creating the complex dynamic security of a smart card based system.There are several components that have some contact points to other components, but the integrity ofsecurity of the whole system must be ensured during the mixing operation. On the other hand complexsecurity must handle flexibly every arising changes.When analyzing different security systems it can be seen the lack of a general framework descrip-tion in planning - developing - applying processes. Such a framework description should take also intoconsideration some exceptions, like identification of people with different deficiencies. Embedding ex-ceptions handling should not decrease the security of the system.As well the proved functioning a complex security system must have also a representation for betterillustration. Beside the above mentioned this will also be presented in the full paper.

Questions on complex dynamic security : [abstract]

http://acta.bibl.u-szeged.hu/59536/1/cscs_1998_060.pdf

Questions on complex dynamic security

Abstract

Similar works

Full text

Available Versions

University of Szeged