Main topic: ...
PUBLISHED: 25.6.2020
These articles were subject to peer-to-peer review.
Click on headline to see more about article
Enhancing the security of PKI with blockchain technology
Yehor Safonov
This article discusses a possibility of enhancing the security of the classic Public Key Infrastructure (PKI) model with applying a revolutionary blockchain technology. In the first part, the author focuses on explaining the principles of the classical PKI system based on CA's trustiness and on the Certificate Transparency (CT) solution introduced by Google. The author presents security problems and risks related to mentioned models and outlines possible ways of defense against sophisticated attackers. The second part is focused on blockchain technology and integration with PKI. The text compares existing blockchain PKI models with a focus on the CertLedger solution, which can be successfully applied to enhance the security of PKI.
DSM | strana 11
Challenge called DSAR and what does the request for an access to personal data mean for the administratior – part I.
Petra Věžníková
The article deals with the data subject‘s right to access their personal data, and to obtain a copy thereof (according to Art. 15 GDPR). The first part of the article contained in this edition gives an overview of the substantive aspects of the right of access from the perspective of the data controller (content and scope of the right) and provides examples of sanctions imposed for non-compliance with GDPR in handling access requests.
DSM | strana 17
DevOps – part VIII.
Vladimír Kufner
This, last article of the whole series about DevOps summarizes previous articles and reflects future possible trends in DevOps. It indicates current status of DevOps, names of companies using DevOps. It recommends the most active companies participating on DevOps transformations. It summarizes DevOps web sites and companies associated.
DSM | strana 21
Penetration testing – part I.
Michel Quiroz
Article about the basics of a penetration test, informing the reader about key details of this type of IT security practice. Article covers general approach, process, industry standards, and defines multiple different aspects of a penetration test. Further explanation corrects common misunderstandings about the differences between penetration tests and vulnerability scans/red team exercises. As the first article in a series, it will provide the reader with a foundation on penetration testing to build upon for future articles.
DSM | strana 30
Cyberwar is coming. How does the preparation look from the hackers perspective?
Daniel Hejda
If we were on the brink of a cyberwar, how would the preparation look from hacker’s perspective? Find out how do attackers think and what activities precede the attack itself. This article explains why is the preparation phase crucial and why is it accurate to compare attackers to strategists or chess players.
DSM | strana 34
ISO 27701: an alternative to the GDPR certification
Petr Šimsa
The article is dedicated to introduction of standard ISO/IEC 27701: Privacy Information Management System. It describes basic differences in contradiction to ISO 27001 and introduces the possible usage of the standard including as alternative to GDPR Certification.
DSM | strana 42
Phone: +420 737 215 220
E-mail: