Secure Remote Client Authentication - Finnova

More documents

Recommendations

Info

IBM Zurich Research Laboratory Attacks (1): Phishing/Malicious Software 12 <strong>Finnova</strong> Partner Summit 11/09/2007 ©2007 IBM Corporation
IBM Zurich Research Laboratory Countermeasures (1): Phishing/Malicious Software • Phishing – Short-time codes limit window opportunity – Full protection only with challenge/response or PKI • Malicious Software – Requires separate security token such as a smart card – Directly connected with challenge/response scheme or PKI – With display and keyboard of its own prevents unsolicited usage, especially if combined with transaction signing – Stand-alone if challenge/response are easily to transfer or if an independent secure channel exists (e.g., mobile network) 13 <strong>Finnova</strong> Partner Summit 11/09/2007 ©2007 IBM Corporation
Page 1 and 2: IBM Zurich Research Laboratory Secu
Page 3 and 4: IBM Zurich Research Laboratory Auth
Page 9 and 10: IBM Zurich Research Laboratory Secu
Page 11: IBM Zurich Research Laboratory Secu
Page 15 and 16: IBM Zurich Research Laboratory Coun
Page 17 and 18: IBM Zurich Research Laboratory Conc

Secure Remote Client Authentication - Finnova

Create successful ePaper yourself

Delete template?

Save as template?