ArticlePDF Available

Die Bedeutung organisatorischer Maßnahmen für die Informationssicherheit

July 2018

Authors:

Karl-Heinz Niemann

Hochschule Hannover

Christopher Tebbe

Hochschule Hannover

Organisatorische Maßnahmen sind ein wesentlicher Bestandteil und Voraussetzung eines guten Informationssicherheitskonzepts. Basierend auf den Erfahrungen der Expertenfabrik IT-Sicherheit des Mittelstand 4.0-Kompetenzzentrums Hannover beleuchtet dieser Beitrag den Nutzen organisatorischer Maßnahmen unter ausgewählten rechtlichen Aspekten sowie den Umsetzungsaufwänden für kleine und mittlere Unternehmen (KMU).

Content uploaded by Karl-Heinz Niemann

Content may be subject to copyright.

Kostenloser Download unter:

URL: http://www.mittelstand-digital.de/MD/Redaktion/DE/PDF/wissenschaft-trifft-praxis-ausgabe-

10,property=pdf,bereich=md,sprache=de,rwb=true.pdf

ResearchGate has not been able to resolve any citations for this publication.

ResearchGate has not been able to resolve any references for this publication.

Article

On the Improper Use of CRC for Cryptographic Purposes in RFID Mutual Authentication Protocols

August 2017 · International Journal of Communication Networks and Information Security

Eyad Taqieddin

Mutual authentication is essential to guarantee the confidentiality, integrity, and availability of an RFID system. One area of interest is the design of lightweight mutual authentication protocols that meet the limited computational and energy resources of the tags. These protocols use simple operations such as permutation and cyclic redundancy code for cryptographic purposes. However, these ... [Show full abstract] functions are cryptographically weak and are easily broken. In this work, we present a case against the use of these functions for cryptographic purposes, due to their simplicity and linear properties, by analyzing the LPCP protocol. We evaluate the claims of the LPCP resistance to de-synchronization and full disclosure attacks and show that the protocol is weak and can be easily broken by eavesdropping on a few mutual authentication sessions. This weakness stems from the functions themselves as well as the improper use of inputs to these functions. We further offer suggestions that would help in designing more secure protocols.

Chapter

Looking at Information Security Through an Interdisciplinary Lens

October 2009

Conference Paper

Full-text available

Security design and evaluation in a VoIP secure infrastracture: A policy based approach

May 2005

This paper aims at defining security levels of a voice over IP infrastructure during its design phase. The proposed technique uses security policies to express the security statements that could be adopted, and the policy evaluation is based on security metrics to compare policies. The technique first step consists of policy structure definition; the proposed approach is applied on the target ... [Show full abstract] VoIP infrastructure. In the second step of the technique, the policy is used to define reference levels against which a security designer can evaluate his design choice or compare the adopted security solution with existing ones.

Conference Paper

Developing the BS-ISA: lessons learned and future directions - sponsored by NSF grant # DUE-0516192

September 2006

In April 2004, Kennesaw State University was designated as a National Center of Academic Excellence in Information Assurance Education by the DHS and the NSA. As a benefit of the program CAE institutions are eligible for a special NSF Grant program: the Federal Cyber Service: Scholarship for Service program which provides funds to CAE schools to a) support capacity building, and b) to provide ... [Show full abstract] scholarships for information security students. In Fall 2005, KSU received its first capacity building grant. Working collaboratively with Savannah State University, KSU's project was to fully develop and implement the BS in Information Security and Assurance at KSU and to assist in the development of an InfoSec concentration at Savannah State. This paper presents some of the preliminary lessons learned from the project, and expectations for future directions.