Bootable disc eliminates viruses for safer banking
'The viruses that live on your hard drive are not active anymore'
Computerworld Australia - A computer science researcher has developed a secure software application intended to bypass the problem of viruses altogether.
"Viruses are a fact of life. Let's provide a different way of doing certain things which are not affected by viruses," says professor Paddy Krishnan of Bond University.
Krishnan and his team at Bond's Software Assurance Center in Australia have created a secure platform for computing in the form of a live CD.
The software, tentatively called BOSS (Bank on Secure System), was designed with the home user in mind and is limited to specific applications that involve sensitive transactions, such as electronic banking.
Krishnan claims the procedure is easy. The end user simply slips the CD into the PC and reboots it. Instead of the usual operating system loading at boot, the BOSS loads first. Once loaded, a browser opens, followed by a graphical keyboard for added security. Normal online banking can then be conducted on the secure platform. When the user completes his transaction, the original operating system is restored by simply removing the CD and rebooting.
"The advantage of this [technology] is that when you're doing your banking, the viruses that live on your hard drive are not active anymore."
Krishnan described the CD as an engineering achievement, even though the idea of a live CD has been around for several years. "However, most of the work done on it has been to hide the details or charge too much for the software. Our system requires no change from the banks and also no real change in the hardware that is commonly found at homes," he said.
Krishnan continued, "In security-related matters, it is important to identify the vulnerabilities and the ways to protect oneself from the vulnerabilities. One aspect of our system which is not covered in other systems is the customizability of the security aspect. That is, we have added PwdHash -- but we can easily add other tools -- to provide better protection."
At present, the software is available for evaluation. Krishnan is keen to see the results of initial testing, as well as to make progress with his ongoing research into the formal verification of the software.
"Verification is very hard, because you need to mathematize the whole thing and the system is too big for that," he said. "But it is the only way to ensure that something works."
The commercial aspect of the technology is not a high priority, Krishnan said, but he can visualize the government promoting the software for public-good reasons. Banks, too, may wish to customize the solution to provide an additional protective layer for customers. Interested customers can contact the university for a copy of the disc. Krishnan said it would charge a nominal fee to cover the cost of postage and the CD.
- Best iPhone, iPad Business Apps for 2014
- 14 Tech Conventions You Should Attend in 2014
- 10 Desktop Apps to Power Your Windows PC
- How to Add New Job Skills Without Going Back to School
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
Red Hat Enterprise Linux - The Original Cloud Operating System
Linux adoption is growing against a number of measures, such as the
number of supercomputers that run Linux and the size of the contributing...
- OpenStack Hype vs. Reality: CIO Quick Pulse Open-source architecture can enable IT departments to build infrastructure-as-a-service (IaaS) clouds running on standard hardware.
- Building a Bridge to the Next Generation Data Center Selecting a widely adopted operating system is a foundational component of a standardization strategy.
- OpenStack and Red Hat: IDC White paper Most OpenStack deployments are by public cloud providers that are early adopters of technology and use OpenStack in a do-it-yourself deployment and support...
- Live Webcast Best Practices for the Hyperconverged Enterprise Network To the Age of Constant Connectivity and Information overload
- Live Webcast Unmasking the Differences between Consumer and Enterprise File Sync & Share The consumerization of IT combined with the rapid pace of the modern mobile workplace is forcing enterprise IT teams to evaluate file sync...
- Live Webcast Government Agency Webifies Outdated COBOL Applications Let this CTO tell you how his agency converted 1980s-era green screens into an e-filing portal for the 100,000 cases handled each year...
- The New Way to Work Knowledge Vault This Knowledge Vault focuses on how, in today's increasingly virtual world, it's more important than ever to engage deeply with employees, suppliers, partners,...
- Getting Ready for BlackBerry Enterprise Service 10.2 Find out how BlackBerry® Enterprise Service 10 helps organizations address the full spectrum of EMM challenges, while balancing the needs of both the... All Applications White Papers | Webcasts