Proposal for Term Project Information Security, Fall 2014 J. H. Wang Sep. 25, 2014

What’s Included in the Score for Term Projects? Proposal: after midterm Presentation: the last three weeks of the semester Final Report: the last week

Term Project Options 1.Programming projects using security libraries Team-based with at most 4 persons 2.Topical survey in information security related topics NOT team-based Requirements –Presentation is *required* for both options –A proposal is *required* after midterm (Nov. 24, 2014) Programming: introduction, system designs Surveys: introduction, selected topics –Final report is *required* after presentation

Proposal for Programming Projects A one-page description of your idea about the system you want to design – Introduction : an overview of the system – Methods : possible security issues and the principal ideas of your ways to solve them – Tools : design of your system, and the reasons why you use selected tools –For team members: the names and the expected responsible parts of each individual member should be clearly identified Functionality of your system will be considered in the final score

Possible Topics for Programming Projects (1/2) Programming of selected components –Implementation and demonstration of symmetric encryption/decryption algorithms Block cipher: DES, 3DES, AES, … Stream cipher: RC4, … –Implementation and demonstration of public- key encryption/decryption algorithms SHA, HMAC, … Diffie-Hellman, RSA, …

Possible Topics for Programming Projects (2/2) Adding security functions into existing systems –Implementation of an application, e.g.: Client-server application: secured chat room Functions added: confidentiality, integrity, authentication, … Methods used: SSL/TLS –(or 3DES, Diffie-Hellman, Kerberos, …) Libraries: OpenSSL, … Platform/language: … –…

Proposal for Topical Survey A one-page description of which topics you want to survey and present –No team work allowed –You have to prepare a 20-minute presentation of the major ideas of the topics in your survey –An in-depth survey on the major topics in recent developments of information security The content and depth of your surveys will be considered in the final score

Possible Topics for Topical Surveys Topics should focus on selected parts in recent developments in information security, for example, –Cloud security/privacy (e.g. cloud storage security, cloud computing security, …) –Social network security/privacy (e.g. facebook privacy issues, …) –Smart phone security (e.g. Android “Fake-ID” problem, iCloud security, …) –Recent security bug: “Shell Shock” for bash, “heartbleed” for OpenSSL, … Broad topics will *not* be good choices, and will affect your score –Most security articles in Chinese are *not* recommended since they tend to be very broad general overview

Some Possible Sources for Topical Surveys IEEE Security & Privacy: mputingnow/securityandprivacy mputingnow/securityandprivacy –E.g. Marco Carvalho, Jared DeMott, Richard Ford, David A. Wheeler, "Heartbleed 101", IEEE Security & Privacy, vol.12, no. 4, pp , July- Aug Heartbleed 101 ACM Queue: –E.g.: ”Why Is It Taking So Long to Secure Internet Routing?” by Sharon Goldberg, Sep. 11, 2014.Why Is It Taking So Long to Secure Internet Routing?

Academic Papers Conferences: –USENIX Security Symposium –IEEE Symposium on Security & Privacy –ACM CCS, AsiaCCS –Crypto, EuroCrypt, AsiaCrypt –… Journals: –ACM TISSEC: –Journal of Cryptology: ut ut –…

Submission Due: after midterm (Nov. 24, 2014) Please submit to our homework submission site Your proposal is included in the final score, and is subject to reviews and possible suggestions on changes

Tentative Schedule for Presentation The last 3 weeks in this semester (Dec. 29, Jan. 5, and Jan. 12) –A 20-minute time slot will be allocated to each team for presentation and system demo –Please be sure to focus on the most important part in your system/survey –Presentation is allowed only within the scheduled time slots Project Report : (Due: Jan. 19, 2015 ) –After presentation, each team is required to submit the final report for term project –Including: presentation slides, source codes, executable files, and documents for installation/configuration/execution instructions

Any Questions or Comments?