CS 671

CS 671: Seminar In Computer Science
Secure Computing in the Post-PC World

Thu D. Nguyen tdnguyen@cs.rutgers.edu

Tuesday 12:15pm-2:15pm CoRE A

Course Announcement

Some interesting books:

F. Schneider, ed.. Trust in Cyberspace. National Academy Press, 1998.

Related Material

Some ideas for possible projects

Instructions for turning in projects:

By 12/20, please send me a gzipped tar file (tar czf <filename.tgz> <your stuff>) of the following:
- A writeup describing what you did together with results of tests and/or performance measurements.
- All code that you wrote for the project.
You should email me the above (attach the .tgz file as an attachment, please) with the following subject: CS671 Project.

Reading List

Papers that are not available from author's or publisher's site are only available from machines in the rutgers.edu domain.

9/5	Introduction Thu Nguyen: slides Chapter 1 of Trust in Cyberspace. F. B. Schneider, S. M. Bellovin, and A. S. Inouye. Building Trustworthy Systems: Lessons from the PTN and Internet. IEEE Internet Computing, November/December 1999. Some interesting thoughts on whether open source will improve security from a panel at S&P2000 Steven Lipner (Microsoft), Fred Schneider (Cornell), Gary McGraw (Reliable Software Technologies)
9/12	Christopher Peery: slides J. H. Saltzer and M. D. Schroeder. The Protection of Information in Computer Systems. In Proceedings of the IEEE, Vol. 63, No. 9, September 1975. Cryptography and Authentication Arvind Swaminathan: slides (RSA, Trust) W. Diffie and M. Hellman. New Directions in Cryptography. IEEE Transactions on Information Theory, IT-22(6), November 1976. R. L. Rivest, A. Shamir, and L. M. Adleman. A Method for Obtaining Digital Signatures and Public-Key Cryptosystems. Communications of the ACM, Vol. 21, No. 2, February 1978. Chapter 4 of Trust in Cyberspace
9/19	Francisco Matias Cuenca J. G. Steiner, B. Clifford Neuman, and J.I. Schiller. Kerberos: An Authentication Service for Open Network Systems. In Proceedings of the Winter 1988 Usenix Conference. February, 1988. J. T. Kohl, B. Clifford Neuman, and T. Y. T'so. The Evolution of the Kerberos Authentication System. In Distributed Open Systems, pages 78-94. IEEE Computer Society Press, 1994. Maruthy Ragothaman I. Jermyn, A. Mayer, F. Monrose, M. K. Reiter, and A. D. Rubin. The Design and Analysis of Graphical Passwords. In Proceedings of the 8th USENIX Security Symposium, August, 1999.
9/26	Problems in TCP/IP Manpreet Singh S. M. Bellovin, Security Problems in the TCP/IP Protocol Suite. in Computer Communications Review 2:19, pp. 32-48, April 1989. Adding security policies to COTS OS'es and Software Snigdha Verma T. Fraser, L. Badger and M. Feldman. Hardening COTS Software with Generic Software Wrappers. In Proceeding of the 1999 IEEE Symposium on Security and Privacy, May, 1999.
10/3	Firewalls Jyoti Batheja A. Mayer, A. Wool and E. Ziskind. Fang: A Firewall Analysis Engine. In Proceeding of the 2000 IEEE Symposium on Security and Privacy, May, 2000. Somasekhar Sista Y. Bartal, A. Mayer, K. Nissim and A. Wool. Firmato: A Novel Firewall Management Toolkit. In Proceeding of the 1999 IEEE Symposium on Security and Privacy, May, 1999.
10/10	Dealing with Denial-of-Service Manoj Koushik Stefan Savage, David Wetherall, Anna Karlin and Tom Anderson. Practical Network Support for IP Traceback. Department of Computer Science and Engineering, University of Washington, Technical Report UW-CSE-2000-02-01. Tanveer Kazi O. Spatscheck and L. Peterson. Defending Against Denial of Service Attacks in Scout. In Proceedings of the 3rd OSDI Symposium, February 1999.
10/17	Arindam Bhattacharya C. Meadows. A Formal Framework and Evaluation Method for Network Denial of Service. In Proceedings of the 1999 IEEE Computer Security Foundations Workshop, 1999. Kyoungwon Suh J. R. Hughes JR, T. Aura, M. Bishop. Using conservation of flow as a security mechanism in network protocols. In Proceeding of the 2000 IEEE Symposium on Security and Privacy, May, 2000.
10/24	Safety and Security for Mobile Code Shweta Sinha L. Koved, A. J. Nadalin, D. Neal, T. Lawson. The evolution of Java security. IBM Systems Journal, vol.37, no.3, 1998. Vijay Mann E. G. Sirer, R. Grimm, A. J. Gregory, B. N. Bershad. Design and Implementation of a Distributed Virtual Machine for Networked Computers. In Proceedings of the Seventeenth Symposium on Operating Systems Principles, December 1999.
10/31	Secure Coprocessor Zhijun He U. Maheshwari, R. Vingralek, W. Shapiro. How to Build a Trusted Database System on Untrusted Storage. OSDI 2000. Shreyas Sadalgi B. Yee and J. D. Tygar. Secure Coprocessors in Electronic Commerce Applications. In Proceedings of the First USENIX Workshop on Electronic Commerce, July 1995.
11/7	Cancelled
11/14	Policy Enforcement for Heterogeneous Computing Prof. Naftaly Minsky N. Minsky and V. Ungureanu. Law-Governed Interaction: A Coordination & Control Mechanism for Heterogeneous Distributed Systems. To appear in ACM Transactions on Software Engineering and Methodology (TOSEM), 2000. Thu Nguyen G. C. Necula and P. Lee. Safe Kernel Extensions Without Run-Time Checking. OSDI'96. October 1996.C
11/28	Secure Access from Public Access Points Steve Sanbeg N. P. Smith. Stack Smashing Vulnerabilities in the UNIX Operating System. http://destroy.net/machines/security/nate-buffer.ps. Supplementary papers: David Wagner, Jeffrey S. Foster, Eric A. Brewer, and Alexander Aiken. A First Step Towards Automated Detection of Buffer Overrun Vulnerabilities. In NDSS 2000, Feb. 2000. C. Cowen et al. Stackguard: Automatic Adaptive Detection and Prevention of Buffer Overflow Attacks. NMADS-2 invited talk.
12/5	Intrusion Detection Rajaram Subramanian Jason Hill. A Security Architecture for the Post-PC World. Department of Computer Science, University of California, Berkeley. Rahul Pupala V. Paxson, Bro: A System for Detecting Network Intruders in Real-Time. Proceedings of the 7th USENIX Security Symposium, San Antonio, TX, January 1998.
12/12	Project Presentation