introduction
play

Introduction Professor Adam Bates Fall 2016 Security & Privacy - PowerPoint PPT Presentation

May 26, 2023 •346 likes •779 views

CS 598 - Computer Security in the Physical World: Introduction Professor Adam Bates Fall 2016 Security & Privacy Research at Illinois (SPRAI) Adam Bates Research Interests: Trustworthy Provenance-Aware Systems (CCS16, SecDev16,

  1. CS 598 - Computer Security in the Physical World: Introduction Professor Adam Bates Fall 2016 Security & Privacy Research at Illinois (SPRAI)

  2. Adam Bates Research Interests: ➢ Trustworthy Provenance-Aware Systems (CCS’16, SecDev’16, Security’15, TAPP’15, SENT’14, CODASPY'13) ➢ Communications Security (NDSS’12, Security’15, JCS’14) ➢ Embedded Device Security (ACSAC’15, NDSS’14) ➢ Mobile Phone Security & Privacy (Security’15) ➢ SSL/HTTPS Trust Enhancements (CCS’14, IMC’14) ➢ Cloud Computing Security (IJIS’14, CCSW’13) shadow_t Career Highlights: sshd_t Information Flow Plane 1. Research covered by Wall Street etc_t syslog_t sysadm_t Journal, PC World, Mobile World Live. 2. 17 Peer-Reviewed publications Provenance Plane (8 Conference Majors) 3. Organizing Committee, IEEE SP ’16, ‘17 Program Committee, ACSAC (2015) Session Chair, ACM CCS (2015) USB User Expectations Device Claims Policy MNF , Product, Features MNF , Product, Interfaces Mediator Program Committee, MCS (2015)

  3. Course Goals • Exposure to how computer security concepts interact with and inform the ‘real’ world • Look at impactful applications of security in the literature • Explore interesting topics related to systems security through + Security & Privacy Research at Illinois (SPRAI) 3

  4. Class Logistics • Tuesday & Thursday 3:30 - 4:45 • 1302 Siebel Center • Website: http://adambates.org/courses/cs598-fa16/ • 14 weeks, each exploring a different topic • Most sessions will be student-driven , I’m merely here to facilitate • Emails go to batesa@illinois.edu • Start email subject with [CS598] please! Security & Privacy Research at Illinois (SPRAI) 4

  5. Grading • Paper Summaries (20%) • Paper Presentations (30%) • Class Participation (10%) • Project (40%) Security & Privacy Research at Illinois (SPRAI) 5

  6. Paper Reviews • Each student must email brief reviews for assigned papers. • One paragraph summary of paper content, followed by 2-3 criticisms, praises, or confusing points. What makes this approach different/novel? • Expect approx. 0.5 pages, limit to1 page. • Structure similar to the first half of a peer review • Due by 11:59 PM the night before class • Do this for the 2 papers next lecture. Security & Privacy Research at Illinois (SPRAI) 6

  7. Paper Presentations • Two discussion leaders/presenters per session • Responsibilities of the Presenter: ‣ Create a 15-20 minute presentation on the topic to be discussed ‣ Discuss the paper assigned as a jumping off point for the general (20-25 minutes) ‣ Share slides with me at least one day before class (email OK, or stop by office hours). • Each student will be a presenter for 2-3 papers Security & Privacy Research at Illinois (SPRAI) 7

  8. How to fail at class • Do a crummy job with your presentation, or skip it altogether • Do a crummy job with reviews, or skip them altogether • Show total lack of comprehension indicative of having read the papers before class • Have three or more unexplained absences (Reasonable absences: attending conference, job interview, etc.). Security & Privacy Research at Illinois (SPRAI) 8

  9. Course Projects • The course project requires the students execute some original research in security • Demonstrate applied knowledge • Don’t try to learn some new non-security field • Be realistic about what is possible in a one quarter. • However, the work should reflect real thought and effort. • The grade will be based on: novelty , depth , correctness , clarity of presentation , and effort . • 1-3 students per group; single person suggested if you want to work in security. Security & Privacy Research at Illinois (SPRAI) 9

  10. Deliverables • The chief product of the project will be a 10-15 page conference style paper. There will be several milestones: • Project Choice (9/06/16) • Abstract, Background and Related Work (10/04/16) • Experiment Proposal (10/18/16) • Project Status Slides (11/08/16) • Project Presentation (12/08/16) • Final Project Write-up (TBD during finals week) • This is a very important factor in your grade! Security & Privacy Research at Illinois (SPRAI) 10

  11. Project Choice • Due on September 6, 5:00 PM • Ordered list of projects • Choose 3 projects in order of interest • Choose up to 2 collaborators (optional) • Bigger expectations for bigger groups • I will (hopefully) resolve all constraints and approve/ choose your project and group Security & Privacy Research at Illinois (SPRAI) 11

  12. Picking a topic • Skim course schedule for ideas • I will work with you to acquire research equipment • Be realistic — I’m not buying a car. • I *can* potentially connect you to IoT, CPS, Medical, and Mobile devices. • Realistically, we can make any topic from OS security or NetSec (feat. Layer 2 or below) fit. • Picking a topic is very important, and should almost certainly involve an area you already know well. Security & Privacy Research at Illinois (SPRAI) 12

  13. Tentative Topic List • Locks, Keys • Internet of Things • Financial Security • Medical Devices • USB Security • Voting Systems • Mobile Security • Telephony • Data Provenance • Network Infrastructure • Smart Grid • Wiretapping • Cyber Physical • Automotive Security & Privacy Research at Illinois (SPRAI)

  14. Ethics Statement This course considers topics involving personal and public privacy and security. As part of this investigation we will cover technologies whose abuse may infringe on the rights of others . As an instructor, I rely on the ethical use of these technologies. Unethical use may include circumvention of existing security or privacy measurements for any purpose, or the dissemination, promotion, or exploitation of vulnerabilities of these services. Exceptions to these guidelines may occur in the process of reporting vulnerabilities through public and authoritative channels. Any activity outside the letter or spirit of these guidelines will be reported to the proper authorities and may result in dismissal from the class . When in doubt, please contact the instructor for advice. Do not undertake any action which could be perceived as technology misuse anywhere and/ or under any circumstances unless you have received explicit permission from Professor Bates. Security & Privacy Research at Illinois (SPRAI) 14

  15. Next Class • USB Security — 2 conference papers • Reviews due by the end of the day tomorrow • Assignments and paper links available at http://adambates.org/courses/cs598-fa16 (Note: This is easily reachable from adambates.org) Security & Privacy Research at Illinois (SPRAI) 15

  16. Reading Papers • Why do we read papers? • How do you read papers? • What should you get out of a paper? • Did you read the paper for today? Security & Privacy Research at Illinois (SPRAI) 16

  17. Understanding Papers • What is the central idea expressed in this paper? • Where do you find this information? • What is the context of this paper? • Related work, details pertinent details and justifies paper • What is the methodology? • Proofs, experiments, simulation, rhetoric • What are the claimed results? • New scientific discovery, if it is not novel it is not research • What do you need to remember about this work? Security & Privacy Research at Illinois (SPRAI) 17

  18. Thompson Paper • What is the contribution? • Related Work? • Methodology? • Results? • Takeaway? Security & Privacy Research at Illinois (SPRAI) 18

  19. Sample Summary Contribution: Ken Thompson shows how hard it is to trust the security of software in • this paper. He describes an approach whereby he can embed a Trojan horse in a compiler that can insert malicious code on a trigger (e.g., recognizing a login program). Related Work: This approach is an example of a Trojan horse program. A Trojan horse is a • program that serves a legitimate purpose on the surface, but includes malicious code that will be executed with it (e.g., Sony/BMG rootkit). Methodology: The approach works by generating a malicious binary that is used to compile • compilers. Since the compiler code looks OK and the malice is in the binary compiler compiler, it is difficult to detect. Results: The resulting system identifies construction of login programs and miscompiles the • command to accept a particular password known to the attacker. Take Away: Thompson states the “obvious” moral that “you cannot trust code that you • did not totally create yourself.” We all depend on code, but constructing a basis for trusting it is very hard, even today. Security & Privacy Research at Illinois (SPRAI) 19

  20. How to Read a Paper • Prepare your environment • Decide what to read • Read in generalities (10-20 minutes) • Skim intro, headings, figures, definitions, conclusions, related work, references. • Read in depth (1-4+ hours) • Consider methodology, challenge arguments, examine assumptions/methods, become invested in the work! • Make notes, mark up a copy, summarize paper Security & Privacy Research at Illinois (SPRAI) 20

Recommend

INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION

INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION

TRAINING COURSE ON SOCIAL PROTECTION & FORMALIZATION TRINIDAD AND TOBAGO MARCH 15, 2017 INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION Design of the NIS Assistance from the

547 views • 23 slides
INTRODUCTION Introduction 2/42 INTRODUCTION Alternations I am giving bread to the

INTRODUCTION Introduction 2/42 INTRODUCTION Alternations I am giving bread to the

Patterns of variation in the expression of case and agreement Andrs Brny Leiden University Centre for Linguistics 9 November 2019, BaSIS Workshop a.barany@hum.leidenuniv.nl INTRODUCTION Introduction 2/42 INTRODUCTION

1.37k views • 42 slides
Introduction Introduction Introduction Introduction Outline Motivation Failures

Introduction Introduction Introduction Introduction Outline Motivation Failures

Introduction Introduction Introduction Introduction Outline Motivation Failures Definition and concepts Process and product properties Principles SE Approaches Motivation Software and the economy The economies of

1.03k views • 49 slides
Introduction Introduction Introduction Nationwide Cause for Concern 1

Introduction Introduction Introduction Nationwide Cause for Concern 1

Introduction Introduction Introduction Nationwide Cause for Concern 1 https://www.cdc.gov/std/stats17/infographic.htm Introduction Epidemiology in Western Colorado CPHE Surveillance Data Report, May 2018 Chlamydia Epidemiology in Western

977 views • 39 slides
DAQ introduction Purpose of this talk : (1) Introduction for those who have not been in every

DAQ introduction Purpose of this talk : (1) Introduction for those who have not been in every

DAQ introduction Purpose of this talk : (1) Introduction for those who have not been in every meeting (2) Some ideas of diagrams for section 7.1 (Introduction) of TP. Giles Barr 25 Jan 2018, Pembroke College On DUNE, the reality is there is a

474 views • 10 slides
INTRODUCTION cf. Schneider, Chapter 1 INTRODUCTION THEY ARE OUT TO GET YOU INTRODUCTION WHAT

INTRODUCTION cf. Schneider, Chapter 1 INTRODUCTION THEY ARE OUT TO GET YOU INTRODUCTION WHAT

ADVANCED COMPUTER SECURITY INTRODUCTION cf. Schneider, Chapter 1 INTRODUCTION THEY ARE OUT TO GET YOU INTRODUCTION WHAT IS SECURITY? A systems security policies describe What the system is supposed to do Store and provide access

479 views • 16 slides
Overview Introduction to SMIL Introduction to W3C and XML Introduction to SMIL

Overview Introduction to SMIL Introduction to W3C and XML Introduction to SMIL

Overview Introduction to SMIL Introduction to W3C and XML Introduction to SMIL Writing a SMIL file Adding Media Objects Martin Halvey Clipping media files January 2008 Timing and Synchronising Layout World Wide

387 views • 14 slides
14 Introduction Introduction Bad guys can put malware into Example: hosts

14 Introduction Introduction Bad guys can put malware into Example: hosts

Introduction Introduction source Encapsulation ISO/OSI reference model message M application segment H t H t M transport network datagram H n H n H t M presentation: allow applications to frame link H l H n H t M interpret

583 views • 4 slides
Previous Lecture Introduction to SMIL 2 Introduction to W3C and XML Introduction to SMIL

Previous Lecture Introduction to SMIL 2 Introduction to W3C and XML Introduction to SMIL

Previous Lecture Introduction to SMIL 2 Introduction to W3C and XML Introduction to SMIL Writing a SMIL file Adding Media Objects Martin Halvey Clipping media files January 2008 Timing and Synchronising Layout

322 views • 8 slides
Lecture 1 Andreas Habegger Introduction Zynq Introduction Zynq Introduction Zynq PS vs. PL

Lecture 1 Andreas Habegger Introduction Zynq Introduction Zynq Introduction Zynq PS vs. PL

Introduction Zynq Lecture 1 Andreas Habegger Introduction Zynq Introduction Zynq Introduction Zynq PS vs. PL Processing System Processor Peripherals Data Buses AXI Bus Conclusion BTE5380 - Embedded Systems Octobre 2014 Andreas Habegger

1.81k views • 30 slides
2018.06 01 SMILE5 Introduction S E 5 02 Alpha Cloud M I L 03 Company Introduction 04

2018.06 01 SMILE5 Introduction S E 5 02 Alpha Cloud M I L 03 Company Introduction 04

2018.06 01 SMILE5 Introduction S E 5 02 Alpha Cloud M I L 03 Company Introduction 04 Project References S E 5 PART.1 SMILE5 Introduction M I L Introduction STORION-SMILE5 Residential Energy Storage System Inverter 5kW Output Input

1.06k views • 25 slides
Introduction to CICS Course introduction Course introduction What is CICS? What is an

Introduction to CICS Course introduction Course introduction What is CICS? What is an

Introduction to CICS Course introduction Course introduction What is CICS? What is an application server? Why use an application server? Course introduction Services provided by CICS How CICS applications are defined Scaling CICS to meet

1.84k views • 146 slides
Network Visualization Introduction Presented by Shahed Introduction Introduction Basic

Network Visualization Introduction Presented by Shahed Introduction Introduction Basic

Network Visualization Introduction Presented by Shahed Introduction Introduction Basic building blocks Node Links (relationship between nodes) Spatial information Network data

584 views • 9 slides
Introduction Introduction (1) Main argument of the paper: universities are not only

Introduction Introduction (1) Main argument of the paper: universities are not only

Le jugement des pairs comme outil de management des universits Peer-review as a management tool Christine Musselin (CSO, Sciences Po et CNRS) Avril 2013, Lirrsistible ascension du capitalisme acadmique Introduction Introduction (1)

590 views • 28 slides
Introduction Introduction to storage and to storage and filesystems filesystems Introduction

Introduction Introduction to storage and to storage and filesystems filesystems Introduction

Moreno Baricevic Gilberto Daz Axel Kohlmeyer Stefano Cozzini ULA ICTP CNR-IOM DEMOCRITOS Merida, VENEZUELA Trieste, ITALY Trieste, ITALY Introduction Introduction to storage and to storage and filesystems filesystems Introduction

1.19k views • 51 slides
JABLOTRON JA-100 introduction November 2011 Introduction Todays goals First introduction of

JABLOTRON JA-100 introduction November 2011 Introduction Todays goals First introduction of

JABLOTRON JA-100 introduction November 2011 Introduction Todays goals First introduction of the brand new JA-100 alarm system Visions Basic architecture System components Setting Help us with final validations You are the FIRST ones

1.69k views • 111 slides
1 Introduction Introduction Communication System Baseband an adjective that describes

1 Introduction Introduction Communication System Baseband an adjective that describes

Introduction Introduction Physical Layer Mobile network Global ISP Provides the means to transmit bits Basic Concepts of from sender to receiver, Data Transmission Defines the mechanical, electrical, and Home network timing

463 views • 7 slides
Welcome! Todays Agenda: Topic Introduction Course Introduction Team Practical

Welcome! Todays Agenda: Topic Introduction Course Introduction Team Practical

INFOGR Computer Graphics Jacco Bikker - April-July 2015 - Lecture 1: Introduction Welcome! Todays Agenda: Topic Introduction Course Introduction Team Practical Details Assignments Field Study State of

869 views • 62 slides
Introduction (00) RNDr. Martin Madaras, PhD. madaras@skeletex.xyz Introduction Introduction

Introduction (00) RNDr. Martin Madaras, PhD. madaras@skeletex.xyz Introduction Introduction

Virtual and Augmented Reality Introduction (00) RNDr. Martin Madaras, PhD. madaras@skeletex.xyz Introduction Introduction Who am I? What do I do here? 2 About me Short research bio: - 2014 - finished PhD at FMFI UK - 2014 2016 -

1.3k views • 39 slides
PRESENTATION The Introduction What is the Introduction ? The introduction prepares the audience

PRESENTATION The Introduction What is the Introduction ? The introduction prepares the audience

PRESENTATION The Introduction What is the Introduction ? The introduction prepares the audience for your presentation. It tells them what your presentation is about, why it is important, and finally, what to listen for in your speech. Get the

505 views • 3 slides
How to make a presentation with L A T EX? Introduction to L A T EX Introduction to Beamer

How to make a presentation with L A T EX? Introduction to L A T EX Introduction to Beamer

Introduction to Beamer Hafida Benhidour How to make a presentation with L A T EX? Introduction to L A T EX Introduction to Beamer Introduction to Beamer Hafida Benhidour Department of computer science King Saud University November

732 views • 49 slides
Shenzhen Cuilu jewelry Co., Ltd was founded in 1996 and its a large private enterprise

Shenzhen Cuilu jewelry Co., Ltd was founded in 1996 and its a large private enterprise

Introduction Introduction - - Brief Brief Introduction Introduction of of Cuilu Cuilu Group Group Introduction Introduction - - Brief Brief Introduction Introduction of of Cuilu Cuilu Group Group Shenzhen Cuilu jewelry Co., Ltd

147 views • 14 slides
Introduction to ICS- -214 214 Introduction to ICS Official Unit / Incident Log - A V-C-N.org

Introduction to ICS- -214 214 Introduction to ICS Official Unit / Incident Log - A V-C-N.org

V olunteer C ommunications N etwork (V-C-N.org) Introduction to ICS- -214 214 Introduction to ICS Official Unit / Incident Log - A V-C-N.org Academy Course - 2012-02.24-2208 262: Introduction to ICS-214 : V-C-N.org : Slide: 1 V olunteer C

735 views • 34 slides
Introduction to ICS- -214 214 Introduction to ICS Official Unit / Incident Log - A V-C-N.org

Introduction to ICS- -214 214 Introduction to ICS Official Unit / Incident Log - A V-C-N.org

V olunteer C ommunications N etwork (V-C-N.org) Introduction to ICS- -214 214 Introduction to ICS Official Unit / Incident Log - A V-C-N.org Academy Course - 2012-02.24-2208 262: Introduction to ICS-214 : V-C-N.org : Slide: 1 V olunteer C

558 views • 18 slides

More recommend