|
Showing 1 - 2 of
2 matches in All Departments
Securing communications is a challenging task. A ?rst attempt at
security involves learning basic cryptography, and applying
encryption algorithms to make messages unintelligible to
adversaries. However, rarely is the task of securing a message -
changesosimple.Whenonestepsbackandcontemplateshowtosecuretheexchange
of communications, one realizes that the challenge is fundamentally
one of bui- ing a complete solution. For example, one must ensure
that all entities involved have proper and authenticated
cryptographic material, or one must ensure that one veri?ably knows
to whom one is communicating, or one must understand how the
communication process takes place so as to make certain there are
no vulnerabilities introduced by the communication process itself.
Thislastissue,
namelythatsecuritymethodsareoftenbuiltwithoutconsideration to how
communication takes place, represents a fundamental gap where much
of modern security research has fallen short.The security
literature is ?lled with a mass of articles on cryptographic
primitives and, although there are still many theoretical
hurdlestobeovercomebythecryptographiccommunity,mostoftheseshortcomings
areacademicandtherearenownumeroustextbooksoncryptographythatcanprovide
thebasicintroductionneededtoemploycryptographicprimitives.
Ontheothersideof
thecoin,thesecurityliteratureisalso?lledwithamassofarticlesdevotedtobuilding
secure protocols and, similarly, there are now numerous textbooks
on computer
securitythatprovidetheinstructionneededtodesignsecureprotocols.Unfortunately,
the issue of how communication takes place or, more speci?cally,
whether there are any speci?c issues that might arise or be
circumvented because message exchanges
aretakingplaceononemediumversusanother(e.g.,
wirelesscommunicationversus wired communication), is generally
neglected.
Securing communications is a challenging task. A ?rst attempt at
security involves learning basic cryptography, and applying
encryption algorithms to make messages unintelligible to
adversaries. However, rarely is the task of securing a message -
changesosimple.Whenonestepsbackandcontemplateshowtosecuretheexchange
of communications, one realizes that the challenge is fundamentally
one of bui- ing a complete solution. For example, one must ensure
that all entities involved have proper and authenticated
cryptographic material, or one must ensure that one veri?ably knows
to whom one is communicating, or one must understand how the
communication process takes place so as to make certain there are
no vulnerabilities introduced by the communication process itself.
Thislastissue,
namelythatsecuritymethodsareoftenbuiltwithoutconsideration to how
communication takes place, represents a fundamental gap where much
of modern security research has fallen short.The security
literature is ?lled with a mass of articles on cryptographic
primitives and, although there are still many theoretical
hurdlestobeovercomebythecryptographiccommunity,mostoftheseshortcomings
areacademicandtherearenownumeroustextbooksoncryptographythatcanprovide
thebasicintroductionneededtoemploycryptographicprimitives.
Ontheothersideof
thecoin,thesecurityliteratureisalso?lledwithamassofarticlesdevotedtobuilding
secure protocols and, similarly, there are now numerous textbooks
on computer
securitythatprovidetheinstructionneededtodesignsecureprotocols.Unfortunately,
the issue of how communication takes place or, more speci?cally,
whether there are any speci?c issues that might arise or be
circumvented because message exchanges
aretakingplaceononemediumversusanother(e.g.,
wirelesscommunicationversus wired communication), is generally
neglected.
|
|