Be whoever you want to be!
Single sign-on systems can be improved
2012-08-15
(Press-News.org) Web shops, Cloud Computing, Online CRM systems: Each day many IT systems require the user to identify himself. Single Sign-On (SSO) systems were introduced to circumvent this problem, and to establish structured Identity Management (IDM) systems in industry: Here the user only has to identify once, all subsequent authentications are done automatically. However, SSO systems based on the industry standard SAML have huge vulnerabilities: Roughly 80 percent of these systems could be broken by the researchers from Ruhr-Universität Bochum.
Protection through digital signatures
Single Sign-On (SSO) can be compared to a well guarded door, which protects sensitive company data: Once you have passed this door, you can access all data. Many industry SSO systems are built on the basis of the Security Assertion Markup Language (SAML). Identity information is stored in a SAML message, protected by a digital signature. Researchers from Bochum were able to circumvent this protection completely in 12 out of 14 SAML systems.
Security functions circumvented
"With novel XML Signature Wrapping techniques we were able to circumvent these digital signatures completely", says Prof. Jörg Schwenk from Ruhr-Universität. "Thus we could impersonate any user, even system administrators." Amongst the 12 affected systems were the SaaS Cloud provider Salesforce, the IBM Datapower security gateway, Onelogin (could e.g. be used as an optional module in Joomla, Wordpress, SugarCRM, or Drupal) and OpenSAML (used e.g. in Shibboleth, and SuisseID, and OpenSAML).
Responsible Disclosure
"After we found the attacks, we immediately informed the affected companies, and proposed ways to mitigate the attacks", states security expert and external PhD student Andreas Mayer (Adolf Würth GmbH & Co. KG). "Through the close cooperation with the responsible security teams, the vulnerabilities are now fixed", Juraj Somorovsky adds.
INFORMATION:
Publication
On August 10th, 2012 Juraj Somorovsky presented the results at the 21st USENIX Security Symposium in Bellevue, Washington. http://www.nds.rub.de/research/publications/BreakingSAML
Further Information
Prof. Dr. Jörg Schwenk, Ruhr-Universität Bochum, Lehrstuhl für Netz- und Datensicherheit, Tel. +49 234 32 26692, joerg.schwenk@rub.de
END
ELSE PRESS RELEASES FROM THIS DATE:
2012-08-15
One of the most sought-after goals in nuclear physics is an understanding of the structure of superheavy elements in the so-called "island of stability". These nuclei contain a large number of protons, and would ordinarily be ripped apart by the strong Coulomb repulsion between them. However, quantum mechanical shell-effects act to stabilize the nuclei, meaning that they can then live long enough to be observed in the laboratory.
In order to understand these "shell effects", detailed experimental studies are needed. Such studies are unfortunately precluded by the fact ...
2012-08-15
Biomedical engineer Muhammet Uzuntarla from Bulent Ecevit University, Turkey, and his colleagues present a biologically accurate model of the underlying noise which is present in the nervous system. The article is about to be published in EPJ B¹. This work has implications for explaining how noise, modulated by unreliable synaptic transmission, induces a delay in the response of neurons to external stimuli as part of the neurons coding mechanism.
Neurons communicate by means of electrical pulses, called spikes, exchanged via synapses. The time it takes for brain cells ...
2012-08-15
Marijuana is up to 20 times more potent than it was 40 years ago and most pregnant women who use the drug are totally unaware that it could harm their unborn child before they even know they are pregnant.
Writing in the journal Drug Testing and Analysis, American researcher's state the argument that marijuana is a harmless drug is no longer valid due to the emergence of 'high potency' marijuana and synthetic marijuana which pose a potential real threat for pregnant women.
They also express concerns that marijuana's increased popularity among teenagers and young adults ...
2012-08-15
Brain scans have revealed distinctive features in the brain structure of karate experts, which could be linked to their ability to punch powerfully from close range. Researchers from Imperial College London and UCL (University College London) found that differences in the structure of white matter – the connections between brain regions – were correlated with how black belts and novices performed in a test of punching ability.
Karate experts are able to generate extremely powerful forces with their punches, but how they do this is not fully understood. Previous studies ...
2012-08-15
New research from Western University, Canada, has identified a potential new target for the treatment of melanoma, the deadliest of all skin cancers. Silvia Penuela and Dale Laird discovered a new channel-forming protein called Pannexin (Panx1) that is expressed in normal levels on the surface of healthy skin cells. But they found, in melanoma, Panx1 is over-produced to a pathological level. The researchers also discovered that if you reduce it or knock it down, the cell becomes more normal. The research is published in the August 17th issue of the Journal of Biological ...
2012-08-15
Acute stress alters the methylation of the DNA and thus the activity of certain genes. This is reported by researchers at the Ruhr-Universität Bochum together with colleagues from Basel, Trier and London for the first time in the journal Translational Psychiatry. "The results provide evidence how stress could be related to a higher risk of mental or physical illness", says Prof. Dr. Gunther Meinlschmidt from the Clinic of Psychosomatic Medicine and Psychotherapy at the LWL University Hospital of the RUB. The team looked at gene segments which are relevant to biological ...
2012-08-15
New research may help explain why hundreds of thousands of Americans a year get sick – and tens of thousands die – after bacteria get into their blood. It also suggests why some of those bloodstream infections resist treatment with even the most powerful antibiotics.
In a new paper in the Journal of Infectious Diseases, a team of University of Michigan researchers demonstrate that bacteria can form antibiotic-resistant clumps in a short time, even in a flowing liquid such as the blood.
The researchers made the discovery by building a special device that closely simulates ...
2012-08-15
New Rochelle, NY, August 15, 2012—Childhood Obesity, a peer-reviewed journal from Mary Ann Liebert, Inc., publishers, has published a special issue dedicated to the role that schools can and should play in providing and encouraging healthy nutrition and good eating habits to help stem the tide of the obesity epidemic in children and adolescents. The special issue provides comprehensive coverage of food policy, systems, and programs to improve food culture, practices, and nutrition standards in the school environment, and is available free on the Childhood Obesity website ...
2012-08-15
MANHATTAN, KAN. -- A group of Kansas State University researchers has made valuable findings in the search for cancer's cure.
While researching ways to improve animal health, the scientists -- Raymond "Bob" Rowland, a virologist and professor of diagnostic medicine and pathobiology, and Deryl Troyer, professor of anatomy and physiology --have made two important discoveries that can also improve human health. Not only have they found pigs with severe combined immunodeficiency, or SCID, but they are also the first to discover the connection with human cancer, particularly ...
2012-08-15
Dieters often use online calorie calculators to stay true to their weight-loss plan. Translating the concept to the population health arena, researchers at Columbia University's Mailman School of Public Health created the Caloric Calculator to help policymakers, school district administrators, and others assess the potential impact of health policy choices on childhood obesity.
Select a target population (middle-school-age boys, for example) and the Caloric Calculator tells you the percentage of this group who are obese (18%) and the average daily calorie cuts necessary ...
LAST 30 PRESS RELEASES:
[Press-News.org] Be whoever you want to be!
Single sign-on systems can be improved
