Saša Adamović

Fuzzy commitment scheme for generation of cryptographic keys based on iris biometrics

This work presents a method based on information-theoretic analysis of iris biometric that aims to extract homogeneous regions of high entropy. Successful extraction of these regions facilitates the development of effective systems for generation of cryptographic keys of lengths up to 400 bits per iris. At the same time, this approach allows for the application of simpler error correction codes with equal false accept rate levels, which reduces the overall complexity of this class of systems.

Optimizacija zaštite turističkih agencija od kompjuterskog kriminala

Nauka i praksa bezbednosti informacija na Internetu usla je u svoju zreliju fazu. Dostupni su brojne metodologije za procenu rizika (preko 200), standardi zastite, katalozi ranjivosti, pretnji i mera (kontrola) zastite. Metodologija za procenu rizika informacija (ISO/IEC 27005:2008) usvojena je i u finansijskom sektoru u sporazumu BASEL II za procenu operativnog rizika. Iako standardizacija znacajno smanjuje kompleksnost uvođenja sistema zastite, implementacija osnovnih mera zastite za smanjenje rizika na prihvatljiv nivo, jos uvek je složena, skupa i zahteva specificna znanja i iskustva. Problem online krađe licnih podataka i brojeva platnih kartica odnosi se upravo na turisticke agencije gde klijenti masovno placaju racune platnim karticama. U ovom radu autori sugerisu optimalan okvir za upravljanje zastitom informacija u Internet okruženju u turistickim agencijama, sa ciljem da se smanji kompleksnost i da se iste ohrabre da organizovano uvode sistem i praksu zastite informacija, prema svojim potrebama i resursima.

Low-cost portable TRNG, implementation and evaluation

This paper will show one of many possible hardware implementations of random sequence generators and give a short survey on existing work related to techniques used for producing true random bits. By using cheap electronic components found in every specialized store such as 8-bit RISC microcontroler, double analogue comparator chip and USB to RS232 interface integrated circuit, we were able to produce a low cost, higly portable device that outputs random sequences with excellent statistical characteristics and high entropy. The source of randomness is a mix of techniques such as electronic noise, phase noise and oscillator jitter. The device in question has a built-in debiasing algorithm similar to [1] and a security mechanism that protects the end user by constantly monitoring the quality of digitized noise signal. Finaly, we will show the results of comparative analysis of data acquired from our device and „random.org“ online service.

Case study: DNS service protection methods

This paper describes security problems in communication between DNS service and its clients. It describes the use of new technologies that provide increased safety in terms of communication, and their application to a specific case. The paper is based on the experiences gained during the implementation of security solutions in CPU Ltd., specifically the section relating to the protection of DNS service from abuse. This paper will describe some practical solutions that have been implemented.