The Hard(er?) Problems Phillip Hallam-Baker Comodo Group Inc. - - PowerPoint PPT Presentation

▶

Jan 22, 2023 168 likes •245 views

The Hard(er?) Problems Phillip Hallam-Baker Comodo Group Inc. 'Four' Box Model Overt Covert Increase Work Traffic Factor Meta Make Attack Prevent Content Visible Compromise Blocking Constraints Usability Security must not

SLIDE 1

The Hard(er?) Problems

Phillip Hallam-Baker Comodo Group Inc.

SLIDE 2

'Four' Box Model

Overt Covert Traffic

Increase Work Factor

Meta Content

Make Attack Visible Prevent Compromise

SLIDE 3

Blocking Constraints

 Usability

− Security must not require extra effort

 [And can't make sending insecure email harder]

− Security must make sense

 User has to think they understand what is going on

 Business model

− Infrastructure must have a business model

 Viral Marketing

− Chicken and egg problem before critical mass

SLIDE 4

Defeating Traffic Analysis?

 Routers must see routing information

− Can't protect at IP layer − How about

 encrypting hop by hop  Flood fill all lit fiber with encrypted bits

SLIDE 5

Message Security

 Asynchronous is harder than Synchronous

− Recipient can't provide keys in-band

 Email Problems:

1 Send encrypted email to people we know well 2 Send encrypted email to a stranger

− Don't insist that we solve 2 to solve 1!

SLIDE 6

The Trust Problem

 Can't be solved without infrastructure

− Can we fuse PGP and S/MIME trust models? − Can we do better? − Work factor analysis − What should the work factor be?

 GDP of adversary x 100 years  Global military budget / Number of Internet users