RSD-XPS — Ein Expertensystem für die Internet-Sicherheitskonzeption

Security Requirements of E-Business Processes

“…Since typically in an EBP the information and telecommunication systems on the company's side are more complex and numerous, research has focused on this area. Damm et al [3] give an overview. …”

Towards a Secure Web-Based Healthcare Application

“…Integrity -Data transferred over the Internet not only are read easily but are also manipulated as easily. Even though the data are protected against transmission errors on the lower layers of the TCP/IP 2 protocol family, intentional damage can not be prevented as an attacker may easily recompute checksums to forge data [9].…”

“…The main threats to confidentiality for data on the Internet are presented in [9]. Integrity -Data transferred over the Internet not only are read easily but are also manipulated as easily.…”

“…However, the current implementations of TCP/IP allow attackers to disturb the operation of computers or parts of the network, e.g. through denial-ofservice (DoS) attacks like SYN-flooding [9]. A well-known example of how the availability of a major part of the Internet may be compromised is the Morris Worm Incident of November 1988 where a self-replicating program used design flaws of BSD-derived versions of UNIX and disrupted normal Internet connectivity for days [10].…”

“…The CA's own public key may in turn be signed by another CA, thereby creating either a hierarchy of CAs or a cross-certification structure. An infrastructure where trust is established and users can access and check other user's keys is called a PKI 9 . Another task of a CA is the management of cryptographic keys.…”