Share these talks and lectures with your colleagues
Invite colleaguesPractice paper
The fight within encryption
Cyber Security: A Peer-Reviewed Journal,
1
(1),
44-47
(2017)
Abstract
Powered by rapid growth in hardware capabilities and easy availability of encryption technologies, network traffic is entering a phase of ‘encrypt everything’. Encryption protects network traffic from interception by intruders. It also renders the traffic unintelligible to Infosec teams, who are hindered by the inability to detect and distinguish the good traffic from the evil. In recent times we have witnessed a sharp spike in encrypted malware attacks. Do technical security problems have straightforward technical solutions? ‘It depends’, as the seasoned security professional would say. This paper discusses the various types of encrypted attacks along with the legal and ethical aspect of the proposed technical solutions.
Keywords: encryption; malware; ransomware; https attacks; endpoint security; SSL decryption; security ethics; internet security legal concerns
The full article is available to subscribers to the journal.
Author's Biography
Sammy Basu works in the Risk and Vulnerability Management team of Warner Bros. Information and Content Security team. He has 16 years’ experience in information security across public and private sectors. Sammy’s diverse experience has taken him from the locked-down high-pressure work environment of Wall Street to the confidential research requirements of pharmaceutical scientists. He has helped secure processoriented insurance organisations built on redundancy and availability as well as the fast-changing gaming environment that emphasises performance and security. He has first-hand experience of security being shaped by the culture of the company as much as the process and technology. He enjoys networking with other security professionals and has presented at multiple security conferences. He has a BS degree in engineering and MS in information security.
