Usability Related Observations Practical Security Hints Danny De - PowerPoint PPT Presentation

Usability Related Observations Practical Security Hints Danny De Cock, PhD, sr. Research Manager Applied Cryptography 25 March 2018, #hackatonamring, Nürburg, Germany Slides: http://godot.be/slides

While establishing correct location Latitude 50.335567515 Live view Longitude 6.945383879 Battery: 67% Frame rate: 30 FPS Camera Camera on/off Front/Rear Flash Rotate on/off Image Audio Take on/off Snapshot Large Map, Small video Address at coordinates: Small map, Large video • 1350 Massachusetts Ave, Harvard University, Cambridge, MA 02138 Thema des Vortrags · Name Referent · 12.10.2017 · Seite 2

Once correct location has been established Latitude 50.335567515 Live view Longitude 6.945383879 Battery: 67% Frame rate: 30 FPS Camera Camera on/off Front/Rear Flash Rotate on/off Image Snapshot Audio Take view on/off Snapshot Large Map, Small video Address at coordinates: Small map, Large video • 1350 Massachusetts Ave, Harvard University, Cambridge, MA 02138 Thema des Vortrags · Name Referent · 12.10.2017 · Seite 3

Alternative Extra PODO, Kickstarter project Size: 1.5" x 1.5" x 1.3" (4.5 x 4.5 x 3 cm) Weight: 1.5 oz (43 g) Sensor: 5 MP (2.2 μ m pixels) Video: 720p 30fps Lens: 90° wide-angle, glass Memory: 8 GB 8-LED ring Bluetooth connectivity Accelerometer Rechargeable battery (up to 1.5 hrs. video) Thema des Vortrags · Name Referent · 12.10.2017 · Seite 4

Practical Security Hints • Never hard code any security features Security algorithms + protocols + keys should be configurable • Security ‘out of the box’ is impossible Goal: nearly-zero configuration, granny proof user interface • All secure applications require the installation of a code-signed app Application should be certified and originate from trustworthy source + same applies to over-the-air updates • Registration of device is critical Device authentication is more important than user authentication Thema des Vortrags · Name Referent · 12.10.2017 · Seite 5

• Contact details: Danny.DeCock@esat.kuleuven.be Thema des Vortrags · Name Referent · 12.10.2017 · Seite 6