Security Engineering

The efficiency of software cannot only be determined by the performance and business efficiency, but also the security and bug free characteristics Even after all the software planning and tests,…

What is open source software? Open source software is a solution where not only the complied version of the product is provided, but also the source code So advanced users…

Internet has opened new market ways and gave a new vision and new methods of selling products PayPal micropayment is an example of many other platforms of micropayment, and the…

Protecting images is not obvious, considering the wide spread of images especially after the appearance of Internet Images are used in different areas (products, banners, logos …etc.) and sometimes it’s…

Previously suggested digital content copyright protection systems (e.g., Pay-TV, DVD) are generally all broken Do you think it is possible to protect the copyright of digital contents The goals of…

Since the appearance of ARPANET and the interconnection of networks, security was in most debates for new network design, existing networks audit or systems design Some of the tools are…

Different kind of attacks exist nowadays, such the viruses, spams, phishing, DOS or DDOS …etc. If we think about phishing in another context rather than computing, the first image I…

OS hardening To protect against misconfiguration-based attacks, install the very good hardening utility Bastille (http://sourceforge.net) Bastille essentially closes all the doors left open in a default installation. Network services access…

0-    Introduction to physical tamper-resistant devices Anti-tamper device contains tamper detection, tamper resistance, tamper response and tamper detection (Rannenberg et.al, 2010). Different types of physical tamper-resistant devices exist Physical Tamper…

Another method or implementation of cryptography is the Identity based which derives from the public-key cryptography If we deploy Identity Based Cryptosystem, do we still need password? Will identity based…

One of the interesting aspects of security is the tamper resistance, which are couple of technics and approaches aiming to avoid data, software or devices getting changed or altered by…

One of the security concerns is the access control, which consists in managing who (person or system) could access which object and how (operation) In the context of multi users…

Authentication code In a military system, authentication should be secure unconditionally In order for Alice to send an authenticated message m to Bob (we assume that m is also an…

The Clark-Wilson Model The Clark-Wilson (CW) model consists of subject/program/object triples and rules about data, application programs and triples Data modified by transformational procedures are called constrained data items (CDI)

One of the widely used methods for securing web sites and the data transferred between sites, browsers and users is the PKC standards The PKCS has 15 standards each of…

Different applications have been used to secure data, most of them have been cracked after some time. Hard drives and USB drives can holds very sensitive and confidential data, loosing…

Microsoft plays a major role in the computing domain and is considered one of the leaders in term of solutions and software development Microsoft has developed couple of protocols and…

Security as a major concern can be addressed from different angles, even the security specialists might have different definitions and visions In the past, data was stored locally, no inter-connexion,…

One of the most used attacks targeting the systems and applications using TCP protocol is known as the MITM (Man in the middle) or bucket-brigade attack and sometimes Janus attack.…