atsec information security

atsec expertise

atsec employees' expertise is in demand: we are members of international boards, speakers on conferences, and authors of books and articles.

Here are some examples of our reports and publications.

Topic   Event / Medium   Author
Speaker
Comparison of CC Functionality & FISMA 800-53 Controls
(more)
White paper Fiona Pattinson
Using SCAP to Detect Vulnerabilities
(more)
White paper S. Weingart
Personal Brokerage of Web Service Access IEEE Security and Privacy, vol. 5, no. 5, pp. 24-31, Sept/Oct, 2007 A. Vassilev
Smart cards and the holy grail of Internet security Keynote presentation at the International symposium on Recent Developments in Cryptography and Information Security, August 29-31, 2007 A. Vassilev
Security benefits from OS virtualization: Real or Virtual?
(more)
White paper A. Vassilev
The futility of secrets? Opinion, Information Security, p.10, March 2007 A. Vassilev
Do federal security regulations help? Opinion, Information Security, p.10, January 2007 A. Vassilev
You say potayto, I say potato: Bridging PKI standards with a .NET smart card E-Smart 2006, September, 2006, Sophia-Antipolis, French Riviera, France A. Vassilev
Microsoft Smart Card Cryptographic Support with Cryptoflex .NET Smart Card Cartes 2005 International Conference, Paris, France A. Vassilev
Authentication Framework for Real People E-Smart 2004, September 22-24, 2004, Sophia-Antipolis, French Riviera, France A. Vassilev
Examining the impact of .NET on smart card middleware Software Architecture and Design Conference, Houston, Texas, September 8-10, 2003 A. Vassilev
Authentication Framework for Smart Cards,” Lecture Notes In Informatics (Gesellschaft für Informatik Edition) BIOSIG 2003: Biometrics and Electronic Signatures vol. P-31, 51-59, 2003. ISBN 3-88579-360-1 A. Vassilev
Physical Security Devices for Computer Subsystems: A Survey of Attacks and Defenses 2008
(more)
Whitepaper Weingart
Backup & Recovery
(more)
Information Security Management, TÜV Media GmbH Abraham
Operating System Evaluations - What security functionality is expected
(more)
8th ICCC, Rome Kurth, Farrel (IBM)
How To Eat A Mammoth
(more)
8th ICCC, Rome Krummeck
Economical Use of Formal Methods
(more)
8th ICCC, Rome Yi Mao
Secure System Design
(more)
8th ICCC, Rome Pattinson
CC in the Real World
(more)
8th ICCC, Rome Pattinson
XML-based Security Targets for tool-supported evaluations
(more)
8th ICCC, Rome Ochel
CC quick reference
(more)
atsec document Pattinson
Dumm gelaufen - Stromausfall am Wochenende
(more)
Behoerdenspiegel, Germany atsec GmbH
A quick quide to the Linux evaluations
(more)
White Paper Mueller, Pattinson
Certifying Information Security Management Systems
(more)
White Paper Fiona Pattinson
Wireless Intrusion Detection und Prevention Systeme – Ein Überblick
(more)
BSI Kongress 2007, Bonn Hofherr
Wireless Intrusion detection
(more)
14. DFN-CERT Workshop "Sicherheit in vernetzten Systemen" Hofherr
Common Criteria Certification in China: A comparison with the schemes of the CCRA
(more)
atsec website Kurth, Liu, Ochel, Pattinson, Li
How to Write Site Security Targets
(more)
7th ICCC Conference, Lanzarote Krummeck
Applying the Draft CC Version 3.0 to Linux - Experience from a Trial Evaluation
(more)
7th ICCC Conference, Lanzarote Kurth
Addressing consumer needs to increase the demand for Common
(more)
7th ICCC Conference, Lanzarote Ochel
IT Security Assurance and Common Criteria
(more)
TickIT International Pattinson
WLAN Sicherheit Book, Heise Verlag Hofherr
atsec publishes Content Description of PAS 56:2003 "Guide to business continuity management"
(more)
atsec website Rauer
Efficient CC Evaluations
(more)
atsec website Mueller
How Useful are Product Security Certifications for Users of Products?
(more)
ZISC Information Security Colloquium SS 2005 Kurth
Information Security Assurance - Why there's no single solution
(more)
Information Storage + Security Journal Pattinson
White Paper zur Zertifizierung der atsec GmbH für die Regelwerke ISO/IEC 9001-2000 und BS 7799-2:2002
(more)
White Paper Abraham
Deriving Security for Mixed IT System Architectures from Evaluated Products
(more)
6th International Common Criteria Conference, Tokyo, 2005 Ochel
"Aktuelle Erfahrungen mit der Evaluierung von Open Source Software" 04/2005 Kurth
Garantiert sicher - Evaluierung von IT-Sicherheit.
(more)
iX Magazin für professionelle Informationstechnik, 05/2005 Ochel
"BS 7799-2 and the CC" Supporting the Business of Software Development
(more)
5th International Common Criteria Conference, Berlin, 09/2004 Pattinson
The Evaluated Configuration - Defining a user-friendly Target of Evaluation
(more)
5th International Common Criteria Conference, Berlin, 09/2004 Mueller, Ochel
Increased information flow needs for high-assurance composite evaluations
(more)
Second IEEE International Information Assurance Workshop, 2004 Kurth
Security Assurance: Smart Cards and the Bigger Picture
(more)
CardTech Secur tech, 2004 Pattinson
Debian on Handheld Computers
(more)
UKUUG Linux 2003 Conference, Edinburgh, Scotland, 2003 Weidner
PKI soll sichere Kommunikation gewährleisten
(more)
Magazin fuer professionelle Informationstechnik, 09/2001 Ochel, Weissmann
e-business Risk Management with Tivoli Risk Manager
(more)
IBM Redbook, 2001 Wimmer
Revision control using RCS and vic
(more)
Internal Training, 2001 Weidner
Unix tools and software compilation
(more)
Internal Training, 2001 Weidner
Reflections on Trusting Trusted Third Parties 23rd NISSC, Baltimore, 2000 Kurth
KRISIS - Key Recovery in Secure Information Systems The Open Group Security Program Group Meeting, Amsterdam, 1998 Kurth
Business Use of Cryptography
(more)
The Copenhagen Hearing, 1998 Kurth
Falsch Verbunden - Gefahr durch DNS-Spoofing [dangers of DNS spoofing]
(more)
c't, 10/1997 Weidner
The Future of Electronic Commerce 20th NISSC, Baltimore, 1997 Kurth
Kabelsalat: Ethernet für Einsteiger
(more)
Linux Magazin, 05/1996 Weidner
"Backspace und Delete" Linux Magazin, 02/1996 Weidner
Integration of Digital Signatures into the European Business Register 19th NISSC, Baltimore, 1996 Kurth
Security Assurance in Information Systems S. K. Katsikas and D. Gritzalis (ed), Information Systems Security: Facing the Information Society of the of the 21st Centrury, Chapman & Hall, 1996 Kurth
Proceedings of ESORICS `96 ESORICS, Rome, 1996 Kurth
"Newsreader im Vergleich" (Usenet News) Linux Magazin, 11/1995 Weidner
"Linux for Workgroups" (Samba einrichten) Linux Magazin, 08/1995 Weidner
Linux for Workgroups
(more)
Linux Magazin, 08/1995 Weidner
"DOSEMU: Der DOS-Emulator" Linux Magazin, 04/1995 Weidner
"Konfiguration von Taylor UUCP" Linux Magazin, 04/1995 Weidner
"Mailsysteme: Ein Überblick" Linux Magazin, 03/1995 Weidner
"Wie baue ich einen neuen Linux-Kernel" Linux Magazin, 01/1995 Weidner
Security Assurance Issues for TTP Services TEDIS EDITT Workshop, Barcelona, 1995 Kurth u.a.
The TMach Experience 18th NISSC, Baltimore, 1995 Kurth
"Der Weihnachtsmann kommt nicht" (Software selbst installiert) Linux Magazin, 12/1994 Weidner
"Emacs-Zaubereien: GNU Calc"
(more)
Linux Magazin, 11/1994 Weidner
"Emacs-Zaubereien: gcc und gdb" Linux Magazin, 10/1994 Weidner
Security Evaluations in Practice Panel, ESORICS, 1994 Kurth
Apparent Differences Between the US TCSEC and the European ITSEC 14th Nat'l Computer Security Conf., Washington, 1991 Kurth
Formale Spezifikation und Verifikation - Ein Überblick VIS, 1991 Kurth
Security Apects in CALS CALS Europe, 1990 Kurth
Paper Output Labeling in a Dedicated System Running under MVS, Proceedings of the 8th NCSC, Gaithersburg, 1985 Kurth
Design of Public Key Infrastructures for Digital Signature Applications IP Management Forum, Travemünde Abraham
Protecting Networks with SATAN O'Reilly Freiss
Problem areas in electronic signatures
(more)
7. Deutscher Präventionstag, Düsseldorf Ochel
Cryptography European Union, Brussels Abraham
Firewalls - Tasks, Solutions, Trends
(more)
Akademie für Sicherheit, Wiesbaden Abraham
Evaluation Parameters for Public Key Infrastructures - Acceptance and Legal Compliance University Bonn/Rhein-Sieg, St. Augustin Ochel
The AIX Survival Guide Addison-Wesley Siegert
Security Planning and Risk Analysis - a Permanent Process SAVE, Würzburg Freiss
Methods of Hacking FOCUS, Rome Freiss
Penetration Testing NetSiKom, Cologne Freiss
Firewalls NetSiKom, Cologne Freiss
Intrusion Detection Systems NetSiKom, Cologne Freiss
Intrusion Detection Systems C'T Freiss
RESOURCES:
-
CC Evaluations
- FIPS 140-2
- ISO/IEC 27001
- PCI
- PIV
- SCAP
- Algorithm Testing

FAQs
Requests for Quotes

PCI SERVICES
atsec is accredited as a Qualified Security Assessor (QSA) and Approved Scanning Vendor (ASV).
CERTIFICATIONS
Please take a look at our certifications and accreditations
PUBLICATIONS
atsec employees' expertise is in demand: we are members of international boards, speakers on conferences, and authors of books and articles. [more]
JOBS
We are currently looking for new colleagues in US and Europe. [more]
Legal notice ->
Site map ->
   
atsec information security | info@atsec.com