|
Security is big. There's a lot of talk about security, data
protection and identity management lately. But when you think of it,
most security related topics are abstract terms. Security is not
something that you can add later on, but it is a philosophy that
should be taken in consideration at all times, in all stages of
development and in all stages of execution.
Security in software design is something that we are trained to
do. Constantly considering whether information flows can be trusted,
function calls are authorized, and what happens when the 'nearly
impossible' appears to be possible after all? We know.. do you?
When designing a protocol to carry out a specific function or
exchange information with another party, the security side becomes
really obvious. After all, a protocol is very often designed within a
scope where security is relevant. But to make it good, you must know
what is going on, on all layers of transport and processing of data.
Also, what is a good protocol is it is deployed in an insecure
environment?
Cozmanova takes the practical approach in this. Instead of keeping
on talking, we also actually do what we say and while doing it, we
solve problems and open up an entire array of new possibilities as a
side product.
Technologies that we use and have used are
Internet (TCP/IP, HTTP, FTP, SSL, also XML/RPC, SOAP)
Computer to peripherals (RS.232, USB)
OpenBSD, Solaris deployment
Together we can find out if an existing solutions can solve your
needs, or whether it might be necessary to design custom software or
protocols for secure information flows and processing.
This section of the website offers all sorts of information about
problems and solutions concerning secure software and protocol
design.
|