Bormann, Carsten
Lade...
Preferred name
Bormann, Carsten
Official Name
Bormann, Carsten
Web Site
ORCID
GND
3 Ergebnisse
Gerade angezeigt 1 - 3 von 3
- Some of the metrics are blocked by yourconsent settings
Item-typ:Veröffentlichung, Extended Personal Media Networks (XPMN)(2010-03-04); ; ; The recent years have brought many changes to the way consumers interact with media assets. Today, consumers store their media digitally and access them using multiple devices; the role of the mobile phone as a universal control and playback device is still growing. Yet, there is no generic architecture for the various devices at home and on the Internet to interact with each other.In this thesis, we enhance the Extensible Messaging and Presence Protocol (XMPP) to be the core of an Extended Private Media Network (XPMN). Essentially, we create an end-to-end security layer for XMPP providing confidentiality, data integrity, and peer entity authentication between clients, keeping usability constrains for both the end-user and the developer in mind. In addition, this thesis covers device management, non-relayed TCP connections between peers in a challenging topology, and a generic device architecture - turning XMPP into a powerful peer-to-peer network for inter-device communication.Dissertation324 219 - Some of the metrics are blocked by yourconsent settings
Item-typ:Veröffentlichung, Delegated authenticated authorization in the life cycle of smart objects in the internet of things(2021-07-19); ; ; Equipping everyday objects with microprocessors opens up a new range of applications. These “smart” objects often have sensors and actuators that allow them to monitor their environment and interact with it. Interconnecting smart objects with the help of Internet protocols, thereby creating an Internet of Things, enables the devices to communicate with each other and their users. If smart objects are integrated into all aspects of everyday life, they will be entrusted with vast amounts of data. Due to limited hardware resources, smart objects are hard-pressed to use common security mechanisms. Also, their application scenarios differ from typical Web scenarios: smart objects often need to communicate unsupervised and must protect their user’s security objectives on their own. To establish trust in the new applications, users must be in control of their smart objects, the data handled by them, and their effect on the physical world. This thesis aims at enabling smart objects to enforce their users’ security decisions and participate in the protection of data. To achieve this, we revisit the objectives and design of authentication and authorization solutions. The authenticated authorization model introduced in this thesis identifies the fundamental requirements for authorization and task delegation that effective security solutions must satisfy. From the fundamentals, we derive the tasks that an endpoint must at least be able to perform to communicate securely. The model thus assists solution designers in finding gaps and vulnerabilities in security specifications. It includes the protection of a security objective that was previously missing from the literature, the data destination verifiability; it is needed to avoid attacks that make endpoints believe they are the intended receiver of a message, such as man-in-the-middle attacks. Based on our model, we develop the task delegation architectural style. It supports less powerful, constrained devices by coupling them with a less-constrained authorization manager, to which challenging authentication and authorization tasks are offloaded. We implement the architectural style with the Delegated CoAP Authenticated Authorization Framework (DCAF). As the, to the best of our knowledge, only protocol that implements a separate authorization manager for the client side, it supports unsupervised constrained clients as well as constrained servers, and facilitates RESTful communication across organization boundaries. DCAF’s design offers solutions for important problems such as secure key distribution, simplified time synchronization, and the revocation of authorization and authentication data. By coupling DCAF with common security solutions, smart objects can securely be integrated into the big Internet. Thus, DCAF enables a true Web of Things.Dissertation598 2182 - Some of the metrics are blocked by yourconsent settings
Item-typ:Veröffentlichung, Broadening the Scope of Security Usability from the Individual to the Organizational : Participation and Interaction for Effective, Efficient, and Agile Authorization(2012-06-29); ; ; Restrictions and permissions in information systems -- Authorization -- can cause problems for those interacting with the systems. Often, the problems materialize as an interference with the primary tasks, for example, when restrictions prevent the efficient completing of work and cause frustration. Conversely, the effectiveness can also be impacted when staff is forced to circumvent the measure to complete work -- typically sharing passwords among each other. This is the perspective of functional staff and the organization. There are further perspectives involved in the administration and development of the authorization measure. For instance, functional staff need to interact with policy makers who decide on the granting of additional permissions, and policy makers, in turn, interact with policy authors who actually implement changes. This thesis analyzes the diverse contexts in which authorization occurs, and systematically examines the problems that surround the different perspectives on authorization in organizational settings. Based on prior research and original research in secure agile development, eight principles to address the authorization problems are identified and explored through practical artifacts.Dissertation424 152