The Security Team: Mark Bayer - KSG Raghav Chandra - KSG Jaime Chambron - FAS Jamil Ghani - FAS Nanthikesan - KSG Angelina Ornelas - KSG Alex C. Snoeren - MIT

Information Systems Security: Enabling Future Internet Applications through Cryptography

---

As the Internet becomes more and more ubiquitous in today's society, new and innovative applications continue to emerge. These applications have been commonly considered to fall under the broad umbrella of Information Systems. Their security is of utmost importance to the continued market development. Of particular interest to our group is the component of Information Systems Security dealing specifically with information in an electronic medium: digital security.

We believe that digital security is necessary to enable continued diversification and growth of applications for the Internet. As the various stakeholders come together, however, it is important that policy and practice be shaped to best utilize the available technology, taking into account the needs and concerns of all involved. With this in mind, this project attempts to examine the varying aspects of digital security on the Internet, both technical, political, and otherwise. As today's technology for implementing the majority of digital security concerns, cryptography provides an excellent vehicle for framing our discussion.

We first survey the current technology and policy surrounding digital security on the Internet today. Through case studies of contrasting industries, we then attempt to frame the differing concerns of the various players. Finally, after examining what we view as the government's role, we attempt to provide a concise set of recommendations to help guide future legislative, policy, and economic decisions in order to best facilitate the continued development of novel applications for the Internet.

Project Outline

• Introduction
  • Components of Security
  • Defining Digital Security
  • Importance of Digital Security
    • Cryptography's Role in Digital Security
    • Quantifying Digital Security
    • Determining Available Strengths
  • How Secure is Secure Enough?
  • Current Crisis
    • Legislative Landscape
    • Present Policy
• Case Studies
  • Public Sector
    • Virtual Learning
      • The Open University of Cataunya (UOC)
        • Current Architecture
        • Key Contributors
        • Security Issues
      • Beyond UOC
      • Potential Issues
      • Next Steps
        • Legal Issues
        • Business and Government Partnerships
  • Private Sector
    • Policy Debates
    • Legal Issues
    • Big Business
    • Banking
      • ICICI Bank
      • Next Steps
    • Small Business
      • eShop Plaza
      • Next Steps
• Government's Role
  • Domestic Control
  • Feasibility
  • Next Steps
• Recommendations

STP-307 Project Resources

• Project Proposal (2/23/98)
• Division of Labor (4/6/98)
• Additional Resources (3/4/98)
• Presentation Materials (4/6/98)

---

Last Modified: 04/06/98 snoeren@mit.edu