The Zurich Trusted Information Channel – An Efficient Defence Against Man-in-the-Middle and Malicious Software Attacks

Autor: Thomas D. Weigold, Michael Baentsch, Frank Höring, Thorsten Kramp, Reto Hermann, Peter Buhler
Rok vydání: 2008
Předmět:
Zdroj: Trusted Computing-Challenges and Applications ISBN: 9783540689782
TRUST
Popis: This paper introduces the Zurich Trusted Information Channel (ZTIC, for short), a cost-efficient and easy-to-use approach to defend online services from man-in-the-middle and malicious software attacks. A small, cheap to manufacture and zero-installation USB device with a display runs a highly efficient security software stack providing the communications endpoint between server and customer. The insecure user PC is used solely to relay IP packets and display non-critical transaction information. All critical information is parsed out of the mutually-authenticated SSL/TLS connections that the ZTIC establishes to the server and shown on the display for explicit user approval.
Databáze: OpenAIRE