PRO+ Premium Content/Information Security magazine
Access your Pro+ Content below.
Adrian Perrig: Improve SSL/TLS Security Through Education and Technology
This article is part of the Information Security magazine issue of October 2009
Despite much recent progress in the area of user-centric design of secure systems, user error continues to cause a large number of security vulnerabilities in current systems. Both user education and technology can help to improve this situation. At CyLab at Carnegie Mellon University, our goal is to improve security in all aspects of society. First, we developed educational programs to train students in security. Second, CyLab researchers also engage in several efforts to design systems that continue to remain secure despite human errors, as well as develop technologies that provide improved situational awareness to the user. Using the Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols for secure https Web connections as a case study, we will first describe how education has helped improve Web security, followed by a description of the Perspectives project, which provides additional information for users to make better security decisions. To provide some background for our discussion, we briefly revisit some ...
Access this PRO+ Content for Free!
By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers.
You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.
Features in this issue
-
Melissa Hathaway: Government Must Keep Pace with Cybersecurity Threats
Securing the Internet means to much to the future of the U.S. economy and national security.
-
Bruce Jones: Report Security and Risk Metrics in a Business-Friendly Way
Security metrics must, not only provide a view of security posture, but must support security budgeting and investment processes.
-
Tony Spinelli: Prioritize Information Security over Compliance
Organizations need to prioritize security over compliance to ensure comprehensive risk mitigation.
-
Information Security magazine 2009 Security 7 Award winners
Information Security magazine annouces the winners of its fifth annual Security 7 Awards.
-
Jerry Freese: Make Critical Infrastructure Protection a Priority
Critical infrastructure protection must be addressed today to protect our country tomorrow.
-
Developers Need Help with Security Errors
SQL injection attacks continue to plague Web applications. Companies need to invest in technology and education to hold off hackers.
-
Jon Moore: Build a Security Control Framework for Predictable Compliance
Health care provider Humana Inc., has developed a security controls framework that addresses all of the industry and federal regulations it must comply with.
Columns in this issue
-
Editor's Desk: Security 7 Winners Chronicle Trends That Shape The Industry
Looking back at five years of award winners provides a timeline of security trends that you need to absorb.
-
How to avoid Internet liability lawsuits
Enterprises face numerous potential liabilities online. Avoiding lawsuits requires a sound cyber risk management plan.