The Zurich Trusted Information Channel – An Efficient Defence Against Man-in-the-Middle and Malicious Software Attacks
Autor: | Thomas D. Weigold, Michael Baentsch, Frank Höring, Thorsten Kramp, Reto Hermann, Peter Buhler |
---|---|
Rok vydání: | 2008 |
Předmět: | |
Zdroj: | Trusted Computing-Challenges and Applications ISBN: 9783540689782 TRUST |
Popis: | This paper introduces the Zurich Trusted Information Channel (ZTIC, for short), a cost-efficient and easy-to-use approach to defend online services from man-in-the-middle and malicious software attacks. A small, cheap to manufacture and zero-installation USB device with a display runs a highly efficient security software stack providing the communications endpoint between server and customer. The insecure user PC is used solely to relay IP packets and display non-critical transaction information. All critical information is parsed out of the mutually-authenticated SSL/TLS connections that the ZTIC establishes to the server and shown on the display for explicit user approval. |
Databáze: | OpenAIRE |
Externí odkaz: |