Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working

Kemal Bicakci; Yusuf Uzunay; Mansoor Khan

doi:10.1109/ISCTURKEY53027.2021.9654298

Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working

Kemal Bicakci, Yusuf Uzunay, Mansoor Khan

Bilişim Enstitüsü

Araştırma sonucu: ???type-name??? › Konferans katkısı › bilirkişi

2 Atıf (Scopus)

Özet

COVID-19 pandemic and lockdowns forced employees across the world to work from home. Remote working has become a necessity rather than a choice. However, in order to meet this increasing demand, the most pressing security concerns of organizations should be addressed. In this paper, we present the design and implementation of ProGun, an end-point device (a USB dongle) for remote working. We present the hardware/software co-design of ProGun, by which most security risks due to lack of physical protection could be mitigated. We also discuss choices we made among many alternatives for user authentication and their security and usability implications in a remote working environment.

Orijinal dil	İngilizce
Ana bilgisayar yayını başlığı	14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings
Editörler	Seref Sagiroglu, Sedat Akleylek, Mustafa Alkan, Ferruh Ozbudak, Yavuz Canbay, Ertugrul Karacuha, Ali Aydin Selcuk
Yayınlayan	Institute of Electrical and Electronics Engineers Inc.
Sayfalar	28-33
Sayfa sayısı	6
ISBN (Elektronik)	9781665407762
DOI'lar	https://doi.org/10.1109/ISCTURKEY53027.2021.9654298
Yayın durumu	Yayınlandı - 2021
Etkinlik	14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Ankara, Turkey Süre: 2 Ara 2021 → 3 Ara 2021

Yayın serisi

Adı	14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings

???event.eventtypes.event.conference???

???event.eventtypes.event.conference???	14th International Conference on Information Security and Cryptology, ISCTURKEY 2021
Ülke/Bölge	Turkey
Şehir	Ankara
Periyot	2/12/21 → 3/12/21

Bibliyografik not

Publisher Copyright:
© 2021 IEEE.

Finansman

This research is funded by TUBITAK (The Scientific and Technological Research Council of Turkey) under the grant No: 3200964.

Finansörler	Finansör numarası
TUBITAK
Türkiye Bilimsel ve Teknolojik Araştirma Kurumu	3200964

Belgeye Erişim

10.1109/ISCTURKEY53027.2021.9654298

Diğer Dosyalar ve Linkler

Link to publication in Scopus

Alıntı Yap

Bicakci, K., Uzunay, Y., & Khan, M. (2021). Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working. In S. Sagiroglu, S. Akleylek, M. Alkan, F. Ozbudak, Y. Canbay, E. Karacuha, & A. A. Selcuk (Eds.), 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings (pp. 28-33). (14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ISCTURKEY53027.2021.9654298

Bicakci, Kemal ; Uzunay, Yusuf ; Khan, Mansoor. / Towards Zero Trust : The Design and Implementation of a Secure End-Point Device for Remote Working. 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings. editör / Seref Sagiroglu ; Sedat Akleylek ; Mustafa Alkan ; Ferruh Ozbudak ; Yavuz Canbay ; Ertugrul Karacuha ; Ali Aydin Selcuk. Institute of Electrical and Electronics Engineers Inc., 2021. pp. 28-33 (14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings).

@inproceedings{05ab1c3ebbd846cd888536ca1d4dda49,

title = "Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working",

abstract = "COVID-19 pandemic and lockdowns forced employees across the world to work from home. Remote working has become a necessity rather than a choice. However, in order to meet this increasing demand, the most pressing security concerns of organizations should be addressed. In this paper, we present the design and implementation of ProGun, an end-point device (a USB dongle) for remote working. We present the hardware/software co-design of ProGun, by which most security risks due to lack of physical protection could be mitigated. We also discuss choices we made among many alternatives for user authentication and their security and usability implications in a remote working environment.",

keywords = "authentication, remote working, risk based authentication, security, security device, two-factor authentication, zero trust",

author = "Kemal Bicakci and Yusuf Uzunay and Mansoor Khan",

note = "Publisher Copyright: {\textcopyright} 2021 IEEE.; 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 ; Conference date: 02-12-2021 Through 03-12-2021",

year = "2021",

doi = "10.1109/ISCTURKEY53027.2021.9654298",

language = "English",

series = "14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "28--33",

editor = "Seref Sagiroglu and Sedat Akleylek and Mustafa Alkan and Ferruh Ozbudak and Yavuz Canbay and Ertugrul Karacuha and Selcuk, {Ali Aydin}",

booktitle = "14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings",

address = "United States",

}

Bicakci, K, Uzunay, Y & Khan, M 2021, Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working. in S Sagiroglu, S Akleylek, M Alkan, F Ozbudak, Y Canbay, E Karacuha & AA Selcuk (eds), 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings. 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings, Institute of Electrical and Electronics Engineers Inc., pp. 28-33, 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021, Ankara, Turkey, 2/12/21. https://doi.org/10.1109/ISCTURKEY53027.2021.9654298

Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working. / Bicakci, Kemal; Uzunay, Yusuf; Khan, Mansoor.
14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings. ed. / Seref Sagiroglu; Sedat Akleylek; Mustafa Alkan; Ferruh Ozbudak; Yavuz Canbay; Ertugrul Karacuha; Ali Aydin Selcuk. Institute of Electrical and Electronics Engineers Inc., 2021. p. 28-33 (14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings).

Araştırma sonucu: ???type-name??? › Konferans katkısı › bilirkişi

TY - GEN

T1 - Towards Zero Trust

T2 - 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021

AU - Bicakci, Kemal

AU - Uzunay, Yusuf

AU - Khan, Mansoor

PY - 2021

Y1 - 2021

N2 - COVID-19 pandemic and lockdowns forced employees across the world to work from home. Remote working has become a necessity rather than a choice. However, in order to meet this increasing demand, the most pressing security concerns of organizations should be addressed. In this paper, we present the design and implementation of ProGun, an end-point device (a USB dongle) for remote working. We present the hardware/software co-design of ProGun, by which most security risks due to lack of physical protection could be mitigated. We also discuss choices we made among many alternatives for user authentication and their security and usability implications in a remote working environment.

AB - COVID-19 pandemic and lockdowns forced employees across the world to work from home. Remote working has become a necessity rather than a choice. However, in order to meet this increasing demand, the most pressing security concerns of organizations should be addressed. In this paper, we present the design and implementation of ProGun, an end-point device (a USB dongle) for remote working. We present the hardware/software co-design of ProGun, by which most security risks due to lack of physical protection could be mitigated. We also discuss choices we made among many alternatives for user authentication and their security and usability implications in a remote working environment.

KW - authentication

KW - remote working

KW - risk based authentication

KW - security

KW - security device

KW - two-factor authentication

KW - zero trust

UR - http://www.scopus.com/inward/record.url?scp=85124376936&partnerID=8YFLogxK

U2 - 10.1109/ISCTURKEY53027.2021.9654298

DO - 10.1109/ISCTURKEY53027.2021.9654298

M3 - Conference contribution

AN - SCOPUS:85124376936

T3 - 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings

SP - 28

EP - 33

BT - 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings

A2 - Sagiroglu, Seref

A2 - Akleylek, Sedat

A2 - Alkan, Mustafa

A2 - Ozbudak, Ferruh

A2 - Canbay, Yavuz

A2 - Karacuha, Ertugrul

A2 - Selcuk, Ali Aydin

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 2 December 2021 through 3 December 2021

ER -

Bicakci K, Uzunay Y, Khan M. Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working. In Sagiroglu S, Akleylek S, Alkan M, Ozbudak F, Canbay Y, Karacuha E, Selcuk AA, editörler, 14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings. Institute of Electrical and Electronics Engineers Inc. 2021. p. 28-33. (14th International Conference on Information Security and Cryptology, ISCTURKEY 2021 - Proceedings). doi: 10.1109/ISCTURKEY53027.2021.9654298

Towards Zero Trust: The Design and Implementation of a Secure End-Point Device for Remote Working

Özet

Yayın serisi

???event.eventtypes.event.conference???

Bibliyografik not

Finansman

Belgeye Erişim

Diğer Dosyalar ve Linkler

Parmak izi

Alıntı Yap