IBM a annoncé à fin octobre la sortie d'un nouveau produit sécurité pour améliorer la sécurité des connexions e-banking : Le ZTIC, pour Zone Trusted Information Channel.
Disponible sous la forme d'une clé USB, cet élément devient un maillon de la connexion entre le serveur et le PC. Le ZTIC n'est donc pas un composant direct de l'ordinateur. C'est cette position qui devrait lui permettre de mieux combattre les menaces d'éventuels codes malveillants (virus, cheval de Troie) résidant sur l'ordinateur.
httpv://www.youtube.com/watch?v=mPZrkeHMDJ8
Lien vers l'article du pôle de recherche IBM ici.
The ZTIC achieves this by registering itself as a USB Mass Storage Device (thus requiring no driver installation) and starting a " pass-through " proxy configured to connect with pre-configured (banking) Websites. After starting the ZTIC proxy, the user opens a Web browser to establish a connection with the bank's Website via the ZTIC. From that moment on, all data transmitted between browser and server pass through the ZTIC; the SSL session is protected by keys maintained only on the ZTIC and, hence, is inaccessible to malware on the PC.
In addition, all critical transaction information, such as target account numbers, is automatically detected in the data stream between browser and ZTIC. This critical information is then displayed on the ZTIC for explicit user confirmation: Only after pressing the " OK " button does the TLS/SSL connection continue. If any malware on the PC has inserted incorrect transaction data into the browser, it can be easily detected by the user at this moment.
...
Jeu de briques
Snake
Pacman
Bubble