Improving Thomlinson-Walkers Software Patching Scheme Using Standard Cryptographic and Statistical Tools

摘要：

　　This talk will illustrate how standard cryptographic tech niques can be applied to real-life security products and services.This article presents in detail one of the examples given in the talk.It is in tended to help the audience follow that part of our presentation.We chose as a characteristic example a little noticed yet ingenious Microsoft patent by Thomlinson and Walker.The Thomlinson-Walker system dis tributes encrypted patches to avoid reverse engineering by opponents (who would then be able to launch attacks on unpatched users).When the proportion of users who downloaded the encrypted patch becomes big enough, the decryption key is disclosed and all users install the patch.

作者: Michel Abdalla Hervé Chabanne Houda Ferradi Julien Jainski David Naccache

作者单位: (E)cole normale supérieure (E)quipe de cryptographie,45 rue dUlm,F-75230 Paris CEDEX 05,France Morpho 11 boulevard Gallieni,F-92130 Issy-les-Moulineaux,France (E)cole normale supérieure (E)quipe de cryptographie,45 rue dUlm,F-75230 Paris CEDEX 05,France ; Mo Diskrete Security LLC 1679 S.DuPont Highway,Suite 100,Dover,DE 19901.Kent County,USA

会议类型: 国际会议

会议名称: The 10th International Conference on Information Security Practice and Experience(ISPEC 2014)(第十届信息安全实践国际会议)

会议地点: 福州

会议语种:英文

页码: 8-14

在线出版日期: 2014-05-05（万方平台首次上网日期，不代表论文的发表时间）