A Trusted Platform Module (TPM) contains a unique identity and provides a range of security functions. This paper demonstrates a novel approach of using a TPM-enabled computer in a client-server system to hinder forensic examination. The prime motivation for this is to highlight the implications of such TPM-based approach in digital forensics for law enforcement agents. The system allows for data confidentiality, plausible deniability, and hiding of traces that data containing incriminating information was present on the client. The server will attest the client before allowing it to submit or receive encrypted data, and encrypted data containing incriminating information can only be decrypted 1) by the encrypting client, and 2) if and only if the encrypting client's platform configuration matches that during encryption. The client's state can always be established via measurement results, and they cannot be tampered to fake attestation.

The study outlines a number of security requirements that are typical of a host of Web‐based applications using a case study of a real life online Web‐based customer support system. It subsequently proposes a security solution that employs a combination of Web server security measures and cryptographic techniques. The Web server security measures include the formulation and implementation of a policy for server physical security, configuration control, users’ access control and regular Web server log checks. Login passwords, in conjunction with public key cryptographic techniques and random nonces, are used to achieve user authentication, provide a safeguard against replay attacks, and prevent non‐repudiatory usage of system by users. These techniques, together with the use of session keys, will allow data integrity and confidentiality of the customer support system to be enforced. Furthermore, a number of security guidelines have been observed in the implementation of the relevant software to ensure further safety of the system.

Posits that computational electronic mail is essentially traditional electronic mail messages with embedded programs or interpretable scripts. States, at the recipient’s end, the mail reading software will distinguish it from normal mail, and executes it on confirmation by the recipient, and if appropriate, output from the program can be channelled back to the sender automatically for further processing. Shows that, despite its potential for many applications, it has not however, taken off in a big way. Major reasons stem from security concerns among users. Examines security issues associated with computational electronic mail systems and suggests some techniques and approaches for improving the security of such systems.

The role of laboratories in computer science or engineering programs have been highlighted in many curriculum guidelines, not least of which is Cnrricula'91.This paper reviews the different facets of such laboratory work as stated in Curricula'91.It then discusses these facets in relation to the various practicebased components of a computer engineering program offered at the Nanyang Technological University.