Security

F. Bourdaire

Introduction

Security.
A big word, security aim is to protect the data, and in more genral view Input/Ouput. Like people used to say a secure computer is switched off computer. (*)
What are the main security issue due to the generic I/O that most people forget about ? From statistics the main danger is inside the company. The highest risk for a compani would be financial plan, data on new technology, falsification... this latest risk could be from inside as outside; (explaination) All the security issue known or unexploited yet, should be taken seriously.

Input/Ouput

Samples Right

Samples Right

Samples Right

Samples Right

• Wired
  • Keyboard and Mouse
  • Floppy/CDRom/Boot
  • Network Card
  • USB
  • FireWire
  • Serial/Com/LPT
• Wireless
  • WiFi
  • BlueTooth
  • InfraRed
  • Screen (CRT)
  • Sound Card - Speaker

External Data

• External Data
• USB Key
• Memory card (SD...)
• Website - google - internal search engine

Definition

• Attack
• Exploitation of the security hole in the aim to get some data that would not be accessible otherwise
• Could be used by police/secret services
• Could be a passif attack and will never be detected (technology)
• Protection
• Different technic to protect against the attack
• Mainly used by:

Input/Output: Wired: Keyboard and Mouse

• Definition
• PS/2, ADB,AT,USB,SERIAL
• Attack
• Protection
• Mainly used by:

Input/Output: Wired: Floppy/CDRom/Boot

• Attack
• Need security staff for:
  • User problem
  • Create and remove access right
  • Supervise the access

Installation & Cost

• Smart Card Cost £1 - £5 (1kB-32kB)
• Card holder £1 - £2
• Smart Card Reader Cost. £4 - £25
• Smart Card Reader PinPad Cost. £80 - £150
• Smart Card Writer Cost £30 - £XXX
• Smart Card Implementation Cost

The suitability or the task in hand

The security implications

Other possible uses

References

• Weethet.nl
• Acer
• Tiresias.org
• WatchVision
http://www.smartcardfocus.com
• smartcardfocus