Patch Integrity Verification Method Using Dual Electronic Signatures
0
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
Many organizations today use patch management systems to uniformly manage software vulnerabilities. However, the patch management system does not guarantee the integrity of the patch in the process ofproviding the patch to the client. In this paper, we propose a method to guarantee patch integrity throughdual electronic signatures. The dual electronic signatures are performed by the primary distribution serverwith the first digital signature and the secondary distribution server with the second digital signature. Thedual electronic signature ensures ensure that there is no forgery or falsification in the patch transmissionprocess, so that the client can verify that the patch provided is a normal patch. The dual electronic signaturescan enhance the security of the patch management system, providing a secure environment for clients.
Abstract
Many organizations today use patch management systems to uniformly manage software vulnerabilities. However, the patch management system does not guarantee the integrity of the patch in the process ofproviding the patch to the client. In this paper, we propose a method to guarantee patch integrity throughdual electronic signatures. The dual electronic signatures are performed by the primary distribution serverwith the first digital signature and the secondary distribution server with the second digital signature. Thedual electronic signature ensures ensure that there is no forgery or falsification in the patch transmissionprocess, so that the client can verify that the patch provided is a normal patch. The dual electronic signaturescan enhance the security of the patch management system, providing a secure environment for clients.
참고문헌 (8)
- J. W. Shin, "Status of infringement accidents through major internet accident experiences in South Korea", Internet & Security Focus, (9), pp.36~53 (2013)
- H. Cavusoglu, "Economics of security patch management", Proceedings of 5th Workshop on the Economics of Information Security (WEIS 2006) (2006)
- Centre for the Protection of National Infrastructure, "Good Practice Guide Patch Management", Centre for the Protection of National Infrastructure, ~ (2006)
- S. Lee, "Design the normalized secure patch distribution & management system", Journal of the Korean Institute of Information Scientists and Engineers, 31(21), pp.502~504 (2004)
- 손태식, "안전한 보안패치 분배 구조의 설계 및 구현", 정보보호학회논문지, 13(4), pp.47~62 (2003), 한국정보보호학회
- S. Lee, "Design the multi-platform based automatic distribution method of security patches with RMI and SSL", Journal of the Korean Institute of Information Scientists and Engineers, 31(1A), pp.283~285 (2004)
- T. Bartoletti, "Secure software distribution system", Proceedings of 20th NIST-NCSC National Information Systems Security Conference, pp.191~201 (1997)
- H. Im, "Certificateless based public key infrastructure using a DNSSEC", Journal of Convergence, 6(3), pp.26~33 (2015)