Zen and the Art of Breaking Security - Part II Vermont

There are cases in which "gentle" techniques like timing or power analyses are not enough to fulfill the attacker's goal. Or the goal itself is not to break the protection scheme but to break through it, to the end target the mechanism is protecting, in a modern reenactment of Alexander the Great's "solution" to the Gordian knot. Enter failure-inducing attacks, in which the technique is to induce a failure in the very protection mechanism itself.

Local Companies

Csl Software Solutions
(802) 861-2500
7 Kilburn St
Burlington, VT
Straight Forward Software Inc
(802) 865-0480
80 Black Lantern Ln
South Burlington, VT
Computer Repair At R
(802) 658-4143
266 Pine St
Burlington, VT
Aurora North Sofware Inc
(802) 860-7560
3 Main St
Burlington, VT
Advanced Dining Solutions LLC
(802) 878-1577
43 Jackson St
Essex Junction, VT
Csl Software Solutions
(802) 861-2500
7 Kilburn St
Burlington, VT
KGS SOFTWARE ENGINEERING
(802) 860-6045
75 Ethan Allen Dr
South Burlington, VT
Gamestop
(802) 862-3022
5 Burlington Sq
Burlington, VT
RedLeaf Software LLC
802-735-0730
P.O.B. 201
Colchester, VT
Data Systems Inc
(802) 862-1289
431 Pine St Ste 215
Burlington, VT

provided by: 
Originally published at Internet.com


By Razvan Peteanu for SecurityPortal -----------------------------------

Today we will continue our journey into the less explored ways to break security. Part one has explained what Zen has to do with the topic.

There are cases in which "gentle" techniques like timing or power analyses are not enough to fulfill the attacker's goal. Or the goal itself is not to break the protection scheme but to break through it, to the end target the mechanism is protecting, in a modern reenactment of Alexander the Great's "solution" to the Gordian knot. Enter failure-inducing attacks, in which the technique is to induce a failure in the very protection mechanism itself.

Since computing equipment uses electrical power to function, manipulating the voltage becomes an obvious target. A handy but coarse attack would be to blow the circuit up into smoke by applying the 110/220V voltage to it. Not elegant and a bit dangerous, but perfectly valid in the real world if this is what it takes to access a bank safe.

This is the very reason security systems should have a fail-safe operation: the failure of the protection mechanism should leave the rest of the system in a secure state. A power lock should keep the door locked in the event of a power outage, and a firewall should be designed so that if its software crashes, all traffic is blocked between its interfaces...

Read article at Internet.com site

Featured Local Company

Csl Software Solutions

(802) 861-2500
7 Kilburn St
Burlington, VT


Topics: 
Architecture & Design Languages & Tools Project Management Web Services
Database Microsoft & .NET Security Wireless
Java Open Source Techniques XML