Security for Ubiquitous Computing

* Ubiquitous computing refers to computers embedded in everyday devices communicating with each other over ad-hoc wireless networks
* Focuses on two very hot topics: ad-hoc wireless networking and security
* Covers security issues for well-established and widely used technologies such as GSM, Bluetooth, and IP
* Presents a framework to make sense of the many and varied issues at stake, a taxonomy of the major problems and in-depth discussion of some specific, cutting-edge solutions
* Includes a primer on security and the basics of cryptography
* Describes the security issues in "peer-to-peer networking," a new technology that is gaining prominence in the media with applications such as Napster and ICQ ChatComputer sind allgegenwärtige Begleiter unseres Alltags - in Telefonen, Waschmaschinen, Fernsehgeräten, Heizungssystemen, Smart Cards und vielen anderen Geräten. In diesem Buch wird beschrieben, wie alle diese Systeme über drahtlose Netzwerke miteinander kommunizieren können. Insbesondere wird auf die derzeit entwickelten Techniken und Protokolle eingegangen, mit denen sich absichern läßt, daß die Systeme vor unberechtigtem Zugriff geschützt sind und die Daten den richtigen Empfänger erreichen. Dieser Band ist weder ein "Kochbuch" mit Anleitungen zur Implementierung noch ein enzyklopädisches Handbuch. Es bietet Ihnen vielmehr einen Rahmen zum Verständnis der Technologie, eine Kategorisierung der wichtigsten Probleme und eine tiefgründige Diskussion einiger spezifischer Lösungen. Nützlich ist die allgemeine, gut verständliche Einführung in die Sicherheitstechnik und die Grundlagen der Kryptographie.
About the Author.

Forward.

Preface.

Acknowledgements.

Contact Information.

1. Introduction.

Scenario.

Essential terminology.

Problems.

Notation.

2. Ubiquitous computing.

Xerox PARC.

Norman's Invisible Computer.

MIT.

HP's Cooltown.

ORL/AT&T Labs Cambridge.

Security issues.

3. Computer security.

Confidentiality.

Integrity.

Availability.

Authentication.

Security policies.

4. Authentication.

New preconditions.

The Resurrecting Duckling security policy model.

The many ways of being a master.

5. Confidentiality.

Cryptographic primitives for peanut processors.

Personal privacy.

6. Integrity.

Message integrity.

Device integrity.

7. Availability.

Threats to the communications channel.

Threats to the battery energy.

Threats from mobile code.

8. Anonymity.

The Cocaine Auction Protocol.

The anonymity layer.

9. Conclusions.

Appendix A: A Short Primer on Functions.

Appendix B: Existing Network Security Solutions.


Annotated bibliography.

Index. "...a remarkably readable introduction to the topic...rich in background material." (IEEE Network, New Books & Multimedia Column, November 2002)

Frank Stajano is the author of Security for Ubiquitous Computing , published by Wiley. Ubiquitous computing (ubicomp) is about networked microprocessors embedded in everyday objects: not just cellphones and home appliances but also books, bookshelves, bus stops and bathtubs. This future is closer than you might imagine.

The insecurity of networked PCs is notorious. If we deployed ubicomp systems as vulnerable as PCs, the risks for society would be catastrophic. How can we do better, and what are the new problems? In a very accessible style, this book provides a coherent framework to make sense of the many issues at stake.

Features include:
* An introduction to the state of the art in ubicomp research.
* A readable primer on security and cryptology.
* An up-to-date technical treatment of ubicomp security, including a sceptical look at Bluetooth and 802.11.
* "Peer-to-peer" and ad-hoc networking.
* An in-depth discussion of specific, cutting-edge solutions.
* An extensively annotated bibliography.
Security for Ubiquitous Computing combines clarity, brevity and authority. It will appeal to developers and researchers in ubiquitous computing, wireless and ad-hoc networking, wearable computing and related areas. Because it is readable and self-contained, it will also prove valuable to managers, analysts, technology watchers and end users who want to understand the new opportunities and risks of ubicomp.