Secure Remote Client Authentication - Finnova

More documents

Recommendations

Info

IBM Zurich Research Laboratory Attacks (2): Man in the Middle 14 <strong>Finnova</strong> Partner Summit 11/09/2007 ©2007 IBM Corporation
IBM Zurich Research Laboratory Countermeasures (2): Man in the Middle • PKI-certificate with SSL/TLS connection – Users tend to ignore warning messages about invalid or untrusted server certificates • Full protection requires… – Identification of the information channel by client and server – Challenge/response or PKI authentication scheme that uses the channel identification as additional input • Partial protection by transaction signing – MITM can “sniff” but not manipulate transactions or take over the communication channel 15 <strong>Finnova</strong> Partner Summit 11/09/2007 ©2007 IBM Corporation
Page 1 and 2: IBM Zurich Research Laboratory Secu
Page 3 and 4: IBM Zurich Research Laboratory Auth
Page 13: IBM Zurich Research Laboratory Coun
Page 17 and 18: IBM Zurich Research Laboratory Conc

Secure Remote Client Authentication - Finnova

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?