The 5 Aims of Information Security Research

The aim of information security research, it seems to me, is to understand, and thereby directly or indirectly improve security. There are five main objectives of security research:

1) To improve security in an organisational context;

2) To improve security at a particular point, or component, of technology;

3) To quantify, assess or manage security;

4) To integrate security into an otherwise insecure system, process or architecture;

and finally...

5)       To break security.

Information Security Research Resources

This link provides a great list of academic, industry and government sector resources on information security research.

Replacing passwords - easier tech than done

Replacing passwords has become a bit of a holy grail for cyber security startups. About 5 years ago I first came across a company proposing typing characteristics as a biometric login, and there seem to be a number of companies attempting something like that still. At VentureFest Bristol I came across PixelPIN who use images to replace passwords, and earlier this year I became aware of GridSure who use a pattern embedded in a varying grid of characters, as a one time password. I am not sure why technologies like these latter two have not taken off. They would seem to be potentially more secure than passwords and have lower maintenance costs - the costs of helping users who forget their passwords.