Perimeter
2/8/2012
11:10 PM
Taher Elgamal
Taher Elgamal
Commentary
Connect Directly
RSS
E-Mail
50%
50%

Online And Physical User Identities

Some data-owning businesses are getting into the Internet authentication market -- and that's good news

The desire to have a strong authentication mechanism that Internet businesses can use to authenticate their users is becoming more of a necessity than a pure desire. The growth of cybercrime is creating opportunities for the data that some businesses keep on individuals to become much more valuable.

When a user enters certain information in a Web form to conduct business, the website can consult with businesses that maintain information about individuals, such as credit bureaus, to make sure that the data provided is at least consistent. This type of service can protect against a large number of fraudulent uses of personal information where the cybercriminal has some information about the victim and tries to use it for financial gain. Higher levels of identity theft would not be affected if the criminal has a lot of information that is, in fact, consistent.

I think these types of services are very useful in detecting and preventing many of the forms of fraud we see today. We are observing that some of the data-owning businesses are getting into the Internet authentication market -- which adds a lot of value to all involved. I think the initial collaboration we are starting to see today among many companies, small and large, in this type of authentication will end up producing a much better business environment that we will feel comfortable to use for more transactions.

Recognized in the industry as the "inventor of SSL," Dr. Taher Elgamal led the SSL efforts at Netscape. He also wrote the SSL patent and promoted SSL as the Internet security standard within standard committees and the industry. Dr. Elgamal invented several industry and government standards in data security and digital signatures area, including the DSS government standard for digital signatures. He holds a Ph.D. and M.S. in Computer Science from Stanford University.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading, September 16, 2014
Malicious software is morphing to be more targeted, stealthy, and destructive. Are you prepared to stop it?
Flash Poll
Title Partner’s Role in Perimeter Security
Title Partner’s Role in Perimeter Security
Considering how prevalent third-party attacks are, we need to ask hard questions about how partners and suppliers are safeguarding systems and data.
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-0985
Published: 2014-09-20
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter.

CVE-2014-0986
Published: 2014-09-20
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter.

CVE-2014-0987
Published: 2014-09-20
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName2 parameter.

CVE-2014-0988
Published: 2014-09-20
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter.

CVE-2014-0989
Published: 2014-09-20
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter.

Best of the Web
Dark Reading Radio