Tietoturva autentikaatiojärjestelmissä ja miten käytettävyys ja ihmistekijä vaikuttavat tietoturvaan OneID:ssä
Mari Nikkarinen · Aaltodoc (Aalto University) · 2019
This Master’s thesis examines the security of the access control system used in F-Secure corporation. It introduces central protocols used in authentication flows and functional issues that influence the security of the system such as phishing, passwords, authentication, the effect that the introduction of General Data Protection Regulation had on the system and the use of open source components. It also contains a STRIDE based threat modelling analysis on the system and discussion on how to improve the current method used at F-Secure.