Logo des Repositoriums

P325 - Open Identity Summit 2022

https://dl.gi.de/handle/20.500.12116/38695
Auflistung nach:

Auflistung P325 - Open Identity Summit 2022 nach Autor:in "Fähnrich, Nicolas"

1 - 2 von 2
  • Konferenzbeitrag
    Online tool for matching company demands with IT-security offerings
    (Open Identity Summit 2022, 2022) Fähnrich, Nicolas; Roßnagel, Heiko
    Small and medium sized companies (SMEs) are often insufficiently protected against cyberattacks although there is a wide range of cybersecurity guidelines, products and services availableIn this paper, we present an online tool to support SMEs in improving their IT-security level by enabling them to identify critical business processes and to identify the most pressing protection needs by using a lightweight value chain-based approach. For using the online tool, no expert knowledge of the company’s IT-infrastructure or implemented IT-security measures is required, since no assessment of cybersecurity threats but of the impact of potential damage scenarios on business processes is carried out. Based on a generated set of recommendations, companies are provided with suitable IT-security measures and corresponding offerings in a prioritized order. These offerings include services and products to implement the given recommendations.
  • Konferenzbeitrag
    A user-centric approach to IT-security risk analysis for an identity management solution
    (Open Identity Summit 2022, 2022) Fähnrich, Nicolas; Winterstetter, Matthias; Kubach, Michael
    In order to build identity management (IdM) solutions that are secure in the practical application context, a holistic approach their IT-security risk analysis is required. This complements the indispensable technical, and crypto-focused analysis of risks and vulnerabilities with an approach that puts another important vector for security in the center: the users and their usage of the technology over the whole lifecycle. In our short paper we focus exclusively on the user-centric approach and present an IT-security risk analysis that is structured around the IdM lifecycle.