Communication Security

Reliable information exchange requires secure communication.

  1. Home
  2. Blog
  3. Communication Security

What does Communication Security mean?

Communication security encompasses all technical and organizational measures to protect information exchange between two or more parties. It is important to ensure the confidentiality of exchanged information through encryption. The concept of forward secrecy is also crucial to guarantee this protection in the long term. Furthermore, the authenticity of exchanged information must be verifiable, which can fundamentally be achieved through digital signatures.
Further information
All blog articles on the subject of Communication Security
Fabienne Hofsäß

Published on 09.09.2024 in the category Communication Security published.

Who's Afraid of the Big Bad Wolf? Voice Cloning and Modern Deception

Many of us know the fairy tale of the Big Bad Wolf, who uses clever tricks to deceive his victims. Today, artificial intelligence (AI) can deceive us in a similar way. (read more)

Checklist • Cheat Sheet Data Theft E-Mail Ethical Hacker Live Hacking Man-In-The-Middle (MIM) Employee Awareness Password Phishing Social Engineering Spear Phishing Training Workshop Event
Niklas Fuhrberg

Published on 25.08.2024 in the category Communication Security published.

What is the NIS 2 Directive? (Part 1)

In response to the increasing number of cyberattacks, the EU is introducing new measures. Among these is NIS 2, which sets new requirements for companies. (read more)

BSI Business Continuity Management (BCM) Hardening Incident Response Information Security ISMS IT Risk Management Employee Awareness NIS-2 Emergency Management Risk Analysis Secure Coding Security Audit Security Concepts Threat Modeling Company
Niklas Fuhrberg

Published on 20.08.2024 in the category Communication Security published.

Who is affected by NIS 2? (Part 2)

Approximately 30,000 companies in Germany are affected by NIS 2. Find out when a company must comply with NIS 2 requirements. (read more)

BSI Hardening Incident Response Information Security ISMS IT Risk Management Employee Awareness NIS-2 Emergency Management Risk Analysis Security Concepts Company
Niklas Fuhrberg

Published on 19.08.2024 in the category Communication Security published.

NIS 2: What do companies need to do? (Part 3)

As a first step, responsibilities within the company should be established. In addition to a coordinating body, such as an Information Security Officer, the executive management must also fulfill specific obligations. (read more)

BSI Business Continuity Management (BCM) Hardening Incident Response Information Security ISMS IT Risk Management Employee Awareness NIS-2 Emergency Management Risk Analysis Secure Coding Security Audit Security Concepts Threat Modeling Company
Fabienne Hofsäß

Published on 05.06.2024 in the category Communication Security published.

Steganography: The Art of Hidden Communication

Encrypted communication dates back to antiquity. Much has changed since then, and the way we communicate has become significantly more secure. (read more)

Information Security Cryptology • Cryptography Employee Awareness Security Concepts Encryption
Oliver Werner

Published on 04.03.2022 in the category Communication Security published.

Phishing, SMiShing, Vishing, ... Tishing!

In addition to email and SMS, Microsoft Teams represents a new channel for phishing attacks. How do they work and how can you protect yourself? (read more)

Employee Awareness Phishing Security Concepts Social Engineering Social Hacking Spear Phishing
Jan Weil

Published on 21.11.2020 in the category Communication Security published.

OCSP Stapling: The Good, the Bad, and the Ugly

When hackers have compromised a certificate, the Online Certificate Status Protocol (OCSP) with the Must-Staple extension is often the last line of defense for your own protection. (read more)

OCSP-Responder OCSP-Stapling Online Certificate Status Protocol (OCSP) Public Key Infrastructure (PKI) Webbrowser Webserver X.509
Gil Talebian

Published on 15.10.2020 in the category Communication Security published.

Protection Against Phishing, Vishing & Co. - Seven Golden Rules Against Social Engineering

aramido demonstrates how to protect yourself against phishing and other social engineering attacks - our contribution to the European Cyber Security Month (ECSM). (read more)

Checklist • Cheat Sheet Cold Boot Data Theft E-Mail European Cyber Security Month (ECSM) Employee Awareness Phishing Social Engineering Training Workshop
Moritz Kaumanns

Published on 23.07.2020 in the category Communication Security published.

FIDO2 and WebAuthn: Login without a Password

FIDO2 and WebAuthn allow a secure and phishing-resistant authentication for web services in order to avoid data leakage. (read more)

Authentication Authorization • Access Control Challenge-Response Procedure Data Theft FIDO2 Social Engineering Social Hacking Spear Phishing WebAuthn Two-Factor Authentication (2FA)
Andreas Sperber

Published on 09.07.2019 in the category Communication Security published.

HTTP Security Headers Protect Your Visitors

Security headers protect website users and expand the defense-in-depth strategy. We demonstrate how they are implemented and their specific impact. (read more)

Click-Jacking Cross Site Scripting (XSS) HTTP Strict Transport Security (HSTS) JavaScript Man-In-The-Middle (MIM) Secure Coding Social Engineering SSL-Stripping Encryption
Regina Okun

Published on 15.02.2018 in the category Communication Security published.

What is Payment Diversion?

Two internet giants fell for the Payment Diversion scam – could the same thing happen to your company? (read more)

Authentication Best Practice Guide E-Mail Hardening Social Engineering Company
Andreas Sperber

Published on 21.07.2017 in the category Communication Security published.

Using HTTP Public Key Pinning Securely

Public Key Pinning restores trust in the PKI. However, this powerful method must be used correctly, otherwise serious dangers may arise. (read more)

Authentication HTTP Strict Transport Security (HSTS) Man-In-The-Middle (MIM) Public Key Infrastructure (PKI) Monitoring Encryption
Andreas Sperber

Published on 31.05.2017 in the category Communication Security published.

Trust is Good. Verification is Better.

Andreas Sperber spoke about trust problems in PKIs at the 17th GPN. With "Trust is Good. Verification is Better.", he calls on service providers to take action. (read more)

Certificate Transparency (CT) Chaos Computer Club (CCC) DANE DNS-based Authentication of Named Entities HTTP Strict Transport Security (HSTS) Public Key Infrastructure (PKI)
Andreas Sperber

Published on 17.04.2017 in the category Communication Security published.

Certificate Transparency – Transparency in the Certificate Jungle

Certificate Transparency is a system for monitoring certificates. For Google Chrome, it has been mandatory since October 2017. We report on what needs to be considered. (read more)

Certificate Transparency (CT) Public Key Infrastructure (PKI) Encryption X.509
Andreas Sperber

Published on 21.03.2017 in the category Communication Security published.

Why Do We Trust Certificate Authorities?

Certificate authorities are an essential component of today's World Wide Web. We place great trust in them despite worrying incidents. (read more)

Authentication Blockchain Certificate Transparency (CT) DANE DNS-based Authentication of Named Entities HTTP Strict Transport Security (HSTS) Man-In-The-Middle (MIM) Public Key Infrastructure (PKI) Encryption X.509