SANS 2016

PKI Trust Models: Whom do you trust?

• Blaine Hein - Master's Degree Candidate
• Tuesday, March 15th, 8:15pm - 8:55pm

The media has given PKI a lot of attention recently. Secure web server exploits and signed malware erode trust in PKI. Despite this negative media attention, little detailed discussion occurs regarding PKI Trust proliferation. PKI is an integral part of our daily lives even though, for the most part, we never notice it. Europe is several years ahead of North America in the ubiquitous deployment of PKI to its citizens, but North America has begun to catch up. This paper covers four major areas including the definition of trust and trust models, implementation of trust, auditing of trust, and managing trust. The paper provides proof of concept tools to allow administrators to understand their current level of PKI trust and techniques manage trust.

Speaker Bio: Mr Blaine Hein is a Principal Scientist and Project Manager working for the NATO Communications and Information Agency. He has over 23 years of experience working in the areas of INFOSEC, Information Assurance, and Cyber Defence. Mr Hein started his IT Security career working for the Communications Security Establishment Canada as an INFOSEC engineer in 1992. His responsibilities included fibre optic distribution systems, cryptographic engineering and evaluation, international standards, and computer and network vulnerability education programs. Since moving to NATO he has been involved with the development of Information Assurance policy and in November 2006 Blaine deployed the first interim NATO PKI capability. From 1990 to 1992 he worked in both the telecommunications and aerospace engineering fields.

Mr Hein completed a Bachelor of Computer Engineering from the University of Manitoba in Winnipeg, Canada in 1990. Blaine is a candidate in the Master of Science Degree Program of SANS Technology Institute, and holds several GIAC Certifications.