Re: Hardware/software secureIDs - pros and cons.

What are the pros and cons for using hardware RSA SecureID/Other and
software with the same characteristics?

Main argument for using hardware: Security. There's no feasible way for
an attacker to get the seed value. If it's software, then compromised
machine => compromised seed value => attacker can login whenever he/she
choose to.

A con would be that the token can be forgotten or lost, whereas if it's
software then depending on where you have it (PC, cell phone) you'll
always have it available. If the device with the software crashes, you
can always just install it elsewhere and enter the seed value again.

I also believe the price favors the use of software.

Another option to discuss is whether it's perceived as easier by the
end-user with a physical token or a software installation. This might
depend on where the software is installed. If it's a browser toolbar and
you're logging on to a web site, then I guess that's pretty nice. But if
it's installed on a cell phone or PDA, a physical token would probably
be perceived as easier since the numbers are readily available without
any extra steps.

Greets,
CJ

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Swap Out your SPI or Watchfire app sec solution for
Cenzic's robust, accurate risk assessment and management
solution FREE - limited Time Offer

http://www.cenzic.com/wf-spi
------------------------------------------------------------------------

Relevant Pages

  • Re: Automatic updates take too long. Other options?
    ... > connection to the internet is with a cell phone modem, ... > download, based on how long it took to download 3 percent of it a few ... I don't want to invest in 30 hours of cell phone minutes to ... Go directly to Windows Update and select the updates and choose to install - ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Spammers Jump on Latest MS Hole
    ... virus on his own computer. ... Install Virus?" ... Operating systems subject to remote code execution vulnerabilities ... If he installs a teenager with his head glued to a cell phone (who ...
    (comp.dcom.telecom)
  • Re: Magicjack
    ... cellphone, or voice mail. ... hours with them on the phone, and they couldn't get it to install either. ... I use my cell phone. ...
    (misc.news.internet.discuss)
  • Re: Motive Smart Bridge Auto Update
    ... software to link your computer to a cell phone? ... Bruce Chambers ... available would you like to install them now? ... Is this a windows update that I need? ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Demento ringtones?
    ... I saw some software at Comp USA that would allow the user to install ... ringtones onto a cell phone. ... I also found this item on Ebay: ...
    (rec.music.dementia)