Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working

Kemal Bicakci; Yusuf Uzunay; Mansoor Khan

doi:10.1109/ISCTURKEY53027.2021.9654298

Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working

Kemal Bicakci, Yusuf Uzunay, Mansoor Khan

Informatics Institute

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

2 Citations (Scopus)

Abstract

COVID-19 pandemic and lockdowns forced employees across the world to work from home. Remote working has become a necessity rather than a choice. However, in order to meet this increasing demand, the most pressing security concerns of organizations should be addressed. In this paper, we present the design and implementation of ProGun, an end-point device (a USB dongle) for remote working. We present the hardware/software co-design of ProGun, by which most security risks due to lack of physical protection could be mitigated. We also discuss choices we made among many alternatives for user authentication and their security and usability implications in a remote working environment.

Original language	English
Title of host publication	14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings
Editors	Seref Sagiroglu, Sedat Akleylek, Mustafa Alkan, Ferruh Ozbudak, Yavuz Canbay, Ertugrul Karacuha, Ali Aydin Selcuk
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	28-33
Number of pages	6
ISBN (Electronic)	9781665407762
DOIs	https://doi.org/10.1109/ISCTURKEY53027.2021.9654298
Publication status	Published - 2021
Event	14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Ankara, Turkey Duration: 2 Dec 2021 → 3 Dec 2021

Publication series

Name	14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings

Conference

Conference	14th International Conference on Information Security and Cryptology, ISCTURKEY 2021
Country/Territory	Turkey
City	Ankara
Period	2/12/21 → 3/12/21

Bibliographical note

Publisher Copyright:
© 2021 IEEE.

Funding

This research is funded by TUBITAK (The Scientific and Technological Research Council of Turkey) under the grant No: 3200964.

Funders	Funder number
TUBITAK
Türkiye Bilimsel ve Teknolojik Araştirma Kurumu	3200964

Keywords

authentication
remote working
risk based authentication
security
security device
two-factor authentication
zero trust

Access to Document

10.1109/ISCTURKEY53027.2021.9654298

Cite this

Bicakci, K., Uzunay, Y., & Khan, M. (2021). Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working. In S. Sagiroglu, S. Akleylek, M. Alkan, F. Ozbudak, Y. Canbay, E. Karacuha, & A. A. Selcuk (Eds.), 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings (pp. 28-33). (14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ISCTURKEY53027.2021.9654298

Bicakci, Kemal ; Uzunay, Yusuf ; Khan, Mansoor. / Towards Zero Trust : The Design and Implementation of a Secure End-Point Device for Remote Working. 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings. editor / Seref Sagiroglu ; Sedat Akleylek ; Mustafa Alkan ; Ferruh Ozbudak ; Yavuz Canbay ; Ertugrul Karacuha ; Ali Aydin Selcuk. Institute of Electrical and Electronics Engineers Inc., 2021. pp. 28-33 (14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings).

@inproceedings{05ab1c3ebbd846cd888536ca1d4dda49,

title = "Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working",

abstract = "COVID-19 pandemic and lockdowns forced employees across the world to work from home. Remote working has become a necessity rather than a choice. However, in order to meet this increasing demand, the most pressing security concerns of organizations should be addressed. In this paper, we present the design and implementation of ProGun, an end-point device (a USB dongle) for remote working. We present the hardware/software co-design of ProGun, by which most security risks due to lack of physical protection could be mitigated. We also discuss choices we made among many alternatives for user authentication and their security and usability implications in a remote working environment.",

keywords = "authentication, remote working, risk based authentication, security, security device, two-factor authentication, zero trust",

author = "Kemal Bicakci and Yusuf Uzunay and Mansoor Khan",

note = "Publisher Copyright: {\textcopyright} 2021 IEEE.; 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 ; Conference date: 02-12-2021 Through 03-12-2021",

year = "2021",

doi = "10.1109/ISCTURKEY53027.2021.9654298",

language = "English",

series = "14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "28--33",

editor = "Seref Sagiroglu and Sedat Akleylek and Mustafa Alkan and Ferruh Ozbudak and Yavuz Canbay and Ertugrul Karacuha and Selcuk, {Ali Aydin}",

booktitle = "14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings",

address = "United States",

}

Bicakci, K, Uzunay, Y & Khan, M 2021, Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working. in S Sagiroglu, S Akleylek, M Alkan, F Ozbudak, Y Canbay, E Karacuha & AA Selcuk (eds), 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings. 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings, Institute of Electrical and Electronics Engineers Inc., pp. 28-33, 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021, Ankara, Turkey, 2/12/21. https://doi.org/10.1109/ISCTURKEY53027.2021.9654298

Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working. / Bicakci, Kemal; Uzunay, Yusuf; Khan, Mansoor.
14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings. ed. / Seref Sagiroglu; Sedat Akleylek; Mustafa Alkan; Ferruh Ozbudak; Yavuz Canbay; Ertugrul Karacuha; Ali Aydin Selcuk. Institute of Electrical and Electronics Engineers Inc., 2021. p. 28-33 (14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Towards Zero Trust

T2 - 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021

AU - Bicakci, Kemal

AU - Uzunay, Yusuf

AU - Khan, Mansoor

PY - 2021

Y1 - 2021

N2 - COVID-19 pandemic and lockdowns forced employees across the world to work from home. Remote working has become a necessity rather than a choice. However, in order to meet this increasing demand, the most pressing security concerns of organizations should be addressed. In this paper, we present the design and implementation of ProGun, an end-point device (a USB dongle) for remote working. We present the hardware/software co-design of ProGun, by which most security risks due to lack of physical protection could be mitigated. We also discuss choices we made among many alternatives for user authentication and their security and usability implications in a remote working environment.

AB - COVID-19 pandemic and lockdowns forced employees across the world to work from home. Remote working has become a necessity rather than a choice. However, in order to meet this increasing demand, the most pressing security concerns of organizations should be addressed. In this paper, we present the design and implementation of ProGun, an end-point device (a USB dongle) for remote working. We present the hardware/software co-design of ProGun, by which most security risks due to lack of physical protection could be mitigated. We also discuss choices we made among many alternatives for user authentication and their security and usability implications in a remote working environment.

KW - authentication

KW - remote working

KW - risk based authentication

KW - security

KW - security device

KW - two-factor authentication

KW - zero trust

UR - http://www.scopus.com/inward/record.url?scp=85124376936&partnerID=8YFLogxK

U2 - 10.1109/ISCTURKEY53027.2021.9654298

DO - 10.1109/ISCTURKEY53027.2021.9654298

M3 - Conference contribution

AN - SCOPUS:85124376936

T3 - 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings

SP - 28

EP - 33

BT - 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings

A2 - Sagiroglu, Seref

A2 - Akleylek, Sedat

A2 - Alkan, Mustafa

A2 - Ozbudak, Ferruh

A2 - Canbay, Yavuz

A2 - Karacuha, Ertugrul

A2 - Selcuk, Ali Aydin

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 2 December 2021 through 3 December 2021

ER -

Bicakci K, Uzunay Y, Khan M. Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working. In Sagiroglu S, Akleylek S, Alkan M, Ozbudak F, Canbay Y, Karacuha E, Selcuk AA, editors, 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings. Institute of Electrical and Electronics Engineers Inc. 2021. p. 28-33. (14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings). doi: 10.1109/ISCTURKEY53027.2021.9654298

Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working

Abstract

Publication series

Conference

Bibliographical note

Funding

Keywords

Access to Document

Other files and links

Fingerprint

Cite this