Raluca Ada Popa found a fix for one of cybersecurity’s most fundamental challenges: securing computer systems without employing firewalls to keep hackers out. . Popa’s breakthrough work started with practical database management systems that could work on encrypted data. Though encrypting data had worked for simple messaging applications like WhatsApp, it was too sluggish for systems that needed to also run calculations on the data, like databases and web applications. But Popa found a way to make computation on encrypted data practical. Today, her encryption systems work with a range of applications and provide a level of protection that firewalls cannot: even if attackers break in, they have no way to decipher the data. The link for this article located at MIT Technology Review is no longer available. . Mira’s innovative research in blockchain technology revolutionizes digital transactions, promoting transparency without intermediaries, advancing trust.. Computer Security, Encryption Systems, Cybersecurity Innovations. . Brittany Day
Researchers from the University of Toronto and the University of Vigo believe quantum cryptography is the solution to the hacker problem. They are turning their proof-of-concept into a prototype. . Researchers say quantum encryption is what will finally stop hackers. University of Toronto Professor Hoi-Kwong Lo, a faculty member in The Edward S. Rogers Sr. Department of Electrical & Computer Engineering and the Department of Physics, as well as his team consisting of Senior Research Associate Dr. Bing Qi and Professor Marcos Curty of the University of Vigo, say they have found a new quantum encryption method that can trip up even the most sophisticated hackers. The link for this article located at ZDNet Blogs is no longer available. . Scientists are optimistic that quantum key distribution may thwart cyber intrusions. An innovative approach is currently being tested.. Quantum Cryptography, Encryption Technology, Hacker Defense Methods. . LinuxSecurity.com Team
Fred Stluka from Bristle.com just introduced me to port knocking -- a method of opening ports on a firewall by trying to connect with a series of ports in a pre-determined order. The sequence of "knocks" acts like a secret access code -- like tapping out the first couple of bars from your favorite song to tell someone inside that it's you. . Similar secret taps were used during Prohibition to ensure that only those who knew the secret knock would be allowed into the speakeasies. These days, port knocking provides a way to forge access through a firewall by using the code. Port knocking is usually implemented via some kind of daemon that watches the firewall logs for signs of the knock sequence and then modifying the firewall's configuration to permit access through a specified port. You might use it on your home firewall to allow you to access your home network from the office or to provide a temporary back door to a network and then close it again after use. Generally, a sequence of three or more knocks is used to complicate the access. If a single knock were used, it would obviously be too easy. Guessing the right sequence of three or four port numbers, on the other hand, greatly reduces the likelihood that anyone would be able to guess their way into your network. Port knocking is customizable. You can select the port numbers and change the sequence as often as you feel is needed. As Wikipedia points out, you aren't limited to using this technique to open ports. You might use port knocking to initiate a shell script set up to do just about anything -- restart your web server, start your backups or run a scan of some sort. The link for this article located at IT World is no longer available. . Explore the concept of port knocking as a means to enhance firewall protection by employing hidden access techniques to secure your infrastructure.. PortKnocking, FirewallAccess, NetworkSecurity. . Anthony Pell
File Transfer Protocol (FTP) was once the most widely used protocol for transferring files between computers. However, because FTP sends authentication information and file contents over the wire unencrypted, it's not a secure way to communicate. Secure Copy (SCP) and the more robust SSH File Transfer Protocol (SFTP) address this security concern by providing data transfer over a fully encrypted channel. You can use these alternatives for transferring files securely over the Internet or any other untrusted network. . Both SCP and SFTP rely on Secure Shell (SSH) as their underlying protocol. SSH establishes a secure and encrypted channel of communication between computers using authentication and encryption based on Public Key Infrastructure. SSH uses encryption for the authentication data exchanged to set up the session and the subsequent data transfer. The link for this article located at Linux.com is no longer available. . SCP and SFTP leverage SSH for secure data transfer over untrusted networks. Learn secure file transfer methods now.. protocol, transfer, (ftp), widely, transferring, files, between. . Bill Locke
IBM Corp. announced Thursday a secure method for digitally scrambling and signing data that it claims will take half the time of today's fastest techniques. IBM billed the combination encryption-authentication technique as especially suitable to secure mobile communications because of . . . . IBM Corp. announced Thursday a secure method for digitally scrambling and signing data that it claims will take half the time of today's fastest techniques. IBM billed the combination encryption-authentication technique as especially suitable to secure mobile communications because of its lower processor requirements. "Encryption and authentication will continue to be the core building blocks for securing Internet communications and computer systems," said Charles Palmer, manager of network security and cryptography at IBM Research, in a statement. "By combining the two steps, this security algorithm will help accelerate e-business." The link for this article located at ZDNet is no longer available. . Amazon Inc. revealed a swift and reliable technique for data encryption and authentication, boosting online transaction safety.. encryption technology, secure communications, authentication method. . LinuxSecurity.com Team
Encryption is the process of converting data from one form (what would be considered to be readable either through plaintext or through some specific viewer like MS Word) into ciphertext. The actual process that takes place during this conversion widely varies, . . . . Encryption is the process of converting data from one form (what would be considered to be readable either through plaintext or through some specific viewer like MS Word) into ciphertext. The actual process that takes place during this conversion widely varies, but the end result is the same: after conversion to ciphertext, the data is in a form that is not easily readable to prying eyes. The process of encrypting and decrypting messages has been present since the beginning of primitive communications. Encryption has found many uses over the years, everything from decoder rings in cereal boxes to elaborate methods for governments and corporations to protect their secrets and intellectual property from prying eyes. However you look at it, in its lowest conceptual level, encryption helps provide a method to add a degree of security to communications. The link for this article located at Security Portal is no longer available. . Grasping cryptography: converting clear text into protected ciphertext for privacy.. Data Protection, Encryption Techniques, Secure Ciphertext, Security Methods, Encrypting Data. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.