Threat modelling for security tokens in web applications

IFIP Advances in Information and Communication Technology

Volumn 175, Issue , 2005, Pages 183-193

  De Cock, Danny ^a   Wouters, Karel ^a   Schellekens, Dries ^a   Singelee, Dave ^a   Preneel, Bart ^a  

^a UNIVERSITY OF LEUVEN   (Belgium)

Author keywords

Security; Smart card applications; Threat modeling

Indexed keywords

SMART CARDS;

ATTACK SCENARIOS; ELECTRONIC IDENTITY CARDS; ELECTRONIC SIGNATURES; EUROPEAN COUNTRIES; EUROPEAN DIRECTIVE; SECURITY; SMART-CARD APPLICATION; THREAT MODELING;

NETWORK SECURITY;

EID: 84870699962     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/11382324_14     Document Type: Conference Paper

References (11)

1. D. W. Chadwick. Threat Modelling for Active Directory. Eighth IFIP TC-6 TC-11 Conference on Communications and Multimedia Security (CMS 2004), September 2004, UK, pp 203-212
2. R. Grimm and H. Eichstädt. Threat Modelling for ASP. NET-Designing Secure Applications. In Eighth IFIP TC-6 TC-11 Conference on Communications and Multimedia Security (CMS 2004), September 2004, UK, pp 175-187.
3. E. Bertino, D. Bruschi, S. Franzoni, I. Nai-Fovino, and S. Valtolina. Threat modelling for SQL Server. In Eighth IFIP TC-6 TC-11 Conference on Communications and Multimedia Security (CMS 2004), September 2004, UK, pp 189-201
4. L. Desmet, B. Jacobs, F. Piessens, and W. Joosen. Threat Modelling for Web Services Based Web Applications. In Eighth IFIP TC-6 TC-11 Conference on Communications and Multimedia Security (CMS 2004), September 2004, UK, pp 161-174.
5. Designing Secure Application project (DeSecA). final report, May 2004.
6. nd edition. Microsoft Press, 2003
7. Microsoft Patterns and Practices, Improving Web application security: Threats and Countermeasures. Microsoft Press, June 2003.
8. P. Kocher. Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems. In Advances in Cryptology-CRYPTO '96, pages 104-113, Lecture Notes in Computer Science 1109, N. Koblitz, Ed., Springer-Verlag, 1996.
9. P. Kocher, J. Jaffe, and B. Jun. Differential power analysis. In Advances in Cryptology Conference-CRYPTO '99, pages 388-397, Lecture Notes in Computer Science 1666, M. Wiener, Ed., Springer-Verlag, 1999.
10. D. Boneh, R.A. DeMillo and R.J. Lipton. On the importance of eliminating errors in cryptographic computations, J. Cryptology, 14(2): 101-119, 2001.
11. European Parliament. Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community Framework for Electronic Signatures. Official Journal L 013, p.0012-0020, January 2000.