• DocumentCode
    1303900
  • Title

    Is information security an oxymoron?

  • Author

    Knight, John C.

  • Author_Institution
    Virginia Univ., Charlottesville, VA, USA
  • Volume
    13
  • Issue
    2
  • fYear
    1998
  • fDate
    2/1/1998 12:00:00 AM
  • Firstpage
    6
  • Lastpage
    7
  • Abstract
    Although weaknesses have been demonstrated in some security techniques (encryption, protocols, mobile code such as Java, etc.), current security technology is quite strong in many areas. Despite this, information security has proved difficult to achieve in large modern software systems. Many problems have been reported in which supposedly secure systems have been penetrated and, in some cases, significant damage done. One problem considered is a buffer-overrun attack. The idea called a ⟨wrapper⟩ which is a layer of software that logically surrounds a software artifact and enhances the functionality of the artifact in some way, is then discussed. Most proposals for the use of wrappers assume that their presence is transparent to the artifact being wrapped. In other words, the artifact sees its operating environment as unchanged and the artifact does not have to be modified in i order to permit it to be wrapped. Wrappers have been proposed as an approach to dealing with deficiencies in existing systems, deficiencies in security for example. The use of shells as a feasible solution to the problem of security is also considered
  • Keywords
    computer crime; security of data; Java; encryption; information security; mobile code; protocols; shells; software systems; wrapper; Availability; Buffer storage; Computer security; Cryptography; Degradation; Information security; Java; Protocols; Software engineering; Software systems;
  • fLanguage
    English
  • Journal_Title
    Aerospace and Electronic Systems Magazine, IEEE
  • Publisher
    ieee
  • ISSN
    0885-8985
  • Type

    jour

  • DOI
    10.1109/62.656324
  • Filename
    656324