Digi Notar Security Breach Essay

2104 words - 9 pages

The basic requirements aimed at the Certificate Authorities (CAs) as issued by the CA/Browser forum state that the CAs ‘must annually develop and update their Certificate Policy’. [13]
It is also important for the CA to state how the Certificate Policy (or the “Practice Statement” for Certification) implements the basic requirements as stated in the latest version of the baseline. ‘The decisions regarding the identity should be taken with utmost care and should not be taken by the business’s or the infrastructure’s convenience.
A general problem as faced by a number of CAs is that the security policies developed by them lack the detailing and have a vague appeal to them. One of the very ...view middle of the document...

’ [13]

4.3 Regulatory Compliance
Regulatory compliance gives the standards, which need to be followed by a particular business. It comprises of guidelines, legalities, requirements and specifications. If a particular business doesn’t adhere to the regulatory compliance, it may result in repercussions like poor customer support or fines imposed by the government. PCI DSS (Payment Card Industry Date Security Standard) is an example of regulatory compliance regulation.
Over the time a number industry regulations have been formulated in order to keeping the standard of Certifications Authorities under a check. Few of these are: -
One of the first set of regulation which were implemented over the CAs was ‘WebTrust for CAs in the year 2000.Under this, a security audit was made a prerequisite for the maintenance of standards. The WebTrust standard was dominant in North America whereas a similar standard named European Telecommunications Standard Institute is accepted elsewhere for CA audits. For the Government CAs, annual or periodic performance audits are recommended as well. Few of the key areas of the audits are: -
• Disclosure of business processes
• Management of business processes and life cycle management
• Control and security of workplace environment
• Subscriber, subordinate and certificate life cycle management
The conformity and compliance to the standards as stated in the WebTrust or ETSI are ensure by the browsers or the applications (like Google and Microsoft), which make use of the trusted CA’s roots. Without a qualifying audit reports, the trust from CA’s root can be evoked.’ [14]
The CA Browser Forum was started in’ 2005 comprising of the CAs and the major browsers with an aim developing and raising the bar set by initial standards for the CAs. The work of this forum is carried on with the help of general meeting and teleconferencing, which are carried out multiple times a year. It also provides a good opportunity for the third parties and auditing bodies for participating in the working groups for the subject matter. The forum had also published a special set of guidelines for the Extended Validation in 2007. These are aimed at the CAs, which issue the Extended Validation certificates (EV). EV offers a higher level of trust and provides a special user interface and helps to display additional information of the websites.
More recently, in 2012, the higher standards offered by the EV guidelines have been extended for the SSL server certificate. The security breaches, which were carried in some of the biggest firms including the DigiNotar breach, the CAs, aimed to develop a higher security standard and infrastructure. This has also become applicable for the authorities that are capable of issuing a certificate through the means of publicly trusted root. Further, this lead to the development of the ”Network and Certificate System Security Requirements” in January 2013. This is one of the means in recent times to tackle the increasing...

Find Another Essay On DigiNotar Security Breach

Enlightenment Thought in New Zealand Schools

1594 words - 6 pages In this essay I will be looking at how the political and intellectual ideas of the enlightenment have shaped New Zealand Education. I will also be discussing the perennial tension of local control versus central control of education, and how this has been affected by the political and intellectual ideas of the enlightenment. The enlightenment was an intellectual movement, which beginnings of were marked by the Glorious Revolution in Britain

Psychological Egoism Theory Essay

2240 words - 9 pages The theory of psychological egoism is indeed plausible. The meaning of plausible in the context of this paper refers to the validity or the conceivability of the theory in question, to explain the nature and motivation of human behavior (Hinman, 2007). Human actions are motivated by the satisfaction obtained after completing a task that they are involved in. For example, Mother Teresa was satisfied by her benevolent actions and

How Celtic Folkore has Influenced My Family

1587 words - 6 pages Every family has a unique background that influences the way they live and interact with other people. My parents, who emigrated from Ireland to the States with my three brothers in 1989, brought over their own Celtic folklore and traditions that have helped shaped the way our family operates and lives. One aspect of folklore that has helped shape my family dynamic is the Celtic cross—both its background and what role it has played in our lives

Julia Margaret Cameron

1406 words - 6 pages At a time when women were looked upon as being homemakers, wives, mothers and such the late 1850's presented a change in pace for one woman in specific. Photography was discovered in 1826 and soon after the phenomenon of photography was being experimented with and in turn brought new and different ways of photo taking not only as documenting real time, but also conceptualizing a scene in which an image would be taken. Julia Margaret Cameron will

Evaluation of School Improvement

1403 words - 6 pages The evaluation process should be progressive to incorporate overall planning, implement changes, which contribute to success. In order to focus on school climate and norms, the evaluation design must include the students, instructions, and outcomes to improve communication and building-level concerns to be address in this response. School Climate and Social Norms The school principal, other staff leaders, and personnel set the tone and the

Case Study: The Benefits of Animal Testing

1757 words - 7 pages Nine year old Amy has already had a rough start in life. She was born with an abnormal heart that hinders her everyday activities. Amy is unable to keep up with kids her own age because she often tires out easily. As a consequence, she has very little friends and is often alone. Amy is forced to take different medications everyday just to survive. Amy’s life consists of medicine, doctors, and constant hospital visits. However, Amy is due for a

Myth and Magic: Realism in "One Hundred Years of Solitude"

1531 words - 6 pages “He enjoyed his grandmother's unique way of telling stories. No matter how fantastic or improbable her statements, she always delivered them as if they were the irrefutable truth” (Wikipedia, 2011). Experiences are particular instances of one personally encountering or undergoing something and in these moments of time life changes for the best or the worst and memories are formed. These recollections such as riding your first bicycle, going to

Adiponectin: a Novel Indicator of Malnutrition and Inflammation in Hemodialysis Patients

2384 words - 10 pages Objective Protein-Energy malnutrition (PEM) and inflammation are common and overlapping conditions in hemodialysis patients which are associated with increased risk of morbidity and mortality. Adiponectin is an adipocytokine which is exclusively produced by adipose tissue. Few studies in hemodialysis patients have demonstrated that serum levels of adiponectin were significantly higher in malnourished patients compared to well-nourished ones. The

The Congo Free State: A Legacy of Apathy, Exploitation and Brutality

2298 words - 9 pages Between 1885 and 1908, Belgium’s Leopold II ruled Congo, a region in central Africa, as his personal colony, exploiting the resources and inhabitants for his own gain. Leopold allowed and encouraged Europeans and other Westerners to enter Congo and set up companies whose primary purpose was to gather rubber, which was abundant but difficult to get to in the Congo, using the Congolese as the laborers for the Europeans. Rubber gathering in Congo

Selective Exposition in The Lottery, by Shirley Jackson

1073 words - 4 pages Usually when someone hears the word “lottery” the first thing that comes to mind is a large sum of cash that people compete against highly impractical odds to win. Shirley Jackson’s story The Lottery might imply a similar conception based on the title alone, but the story is filled with unknowns never revealing exactly when and where the story takes place, or why the lottery exists; even what the lottery is isn’t revealed until the very end. Yet


1857 words - 7 pages INTRODUCTION I remember when I was a young child; I would always be scared whenever there was a severe storm outside that included thunder and lightning. This was especially true in the hours of darkness, when you could really see the lightning. As I grew older this so-called fear of lightning turned into a fascination for this weather phenomena. One of my most vivid memories of lightning as a young man was when I was flying to Florida, the

Similar Essays

Smartphones: Developers And Applications Essay

817 words - 4 pages time all of this took place, DigiNotar had lost the trust of thousands of users worldwide. The company declared bankruptcy in September 2011(ch. 6). There are a few countermeasures to prevent a breach in security that will not require the user to enter a username and/or password. The OAuth protocol allows third-party sites or applications to use enduser data on a web application called a service provider. OAuth works by using request tokens. Sites

When The Bubble Burst Essay

1539 words - 6 pages of wired trading and large volume of security transactions happening every millisecond the market was taking a nosedive. Lewis also contends the government let the large bond trader Bear Sterns fail to prove a point, but this only accelerated the market panic. (Lewis 259) TARP has been a profitable endeavor for the government; however, it failed to teach the banks a lesson about making poor investments. The credit market may take years to recover

Phase Diagram Essay

4456 words - 18 pages Introduction: Chemical equilibrium is a crucial topic in Chemistry. To represent and model equilibrium, the thermodynamic concept of Free energy is usually used. For a multi-component system the Gibbs free energy is a function of Pressure, Temperature and quantity (mass, moles) of each component. If one of these parameters is changed, a state change to a more energetically favorable state will occur. This state has the lowest free energy

Revolutionary Work Of Art Essay

1890 words - 8 pages Walter Benjamin emphasizes in his essay, “The Work of Art in the Age of its Technological Reproducibility” that technology used to make an artwork has changed the way it was received, and its “aura”. Aura represents the originality and authenticity of a work of art that has not been reproduced. The Sistine Chapel in the Vatican is an example of a work that has been and truly a beacon of art. It has brought a benefit and enlightenment to the art