http://ccs.cs.stonybrook.edu
Cyber-security Research
at Stony Brook
Radu Sion
http://crypto.cs.stonybrook.edu
USS Yorktown
• September, 1997: USS Yorktown is 100%
“dead in the water” for 2.5 hours, then
stalled in port for 2 days.
• Cause: Cruiser runs MS Windows on
LAN-connected machines in its “Smart
Ship” system. Result:
blue
screen of death
F22 Raptor
• February 11, 2007: 12 raptors flying from Hawaii to
Japan are forced to turn back in panic mode: nav and
comm systems are 100% down.
• Cause: software was not designed to cross international
date line (180 meridian of longitude)
☺
Cyber-security is
hot
!
• First and foremost: it is lots of fun !
• Security incidents continue to sky-rocket
– Incidents reported by US CERT have increased by a factor of
100 in the past decade
• Bad guys are becoming more sophisticated
– Progression from “script kiddies” to cybercrime, cyberactivism, and so on
• Spam, cyber-extortion, phishing attacks all driven by this trend
• Thus …
– Current technologies and solutions aren’t very effective – Things are going to get worse before they get better
What is cyber-security ?
• Businesses
– Banking and financial transactions
– Marketing, advertising, and corporate communication
• Federal and State Governments
– Classified data (DoD, DoE, …) – Critical infrastructures
• telecom, transportation, power, law-enforcement,
• Consumers
– Theft of bank accounts, passwords, credit card #s, … – Loss of privacy
• snoop on web sites visited
Overview
• Research spread over several laboratories
• Over 30 graduate students
• Research supported by NSF, ONR, AFOSR, Army
Research, DARPA, NIST, Computer Associates,
Motorola Labs, IBM Research, IBM
• Center for Cyber-security
– NSA-designated Center of Excellence in Information Assurance Education (2002-08)
Faculty
• Tzi-cker Chiueh ([email protected])
– Compiler transformations, attack recovery
• Rob Johnson ([email protected])
– Software security, program analysis, cryptography
• C.R. Ramakrishnan ([email protected])
– Formal methods, vulnerability analysis
• R. Sekar ([email protected])
– Program analysis/transformation, policy enforcement, attack detection/recovery
• Radu Sion ([email protected])
– Data and network security, applied/practical cryptography
• Scott Stoller ([email protected])
– Trust management, vulnerability analysis, program analysis
• Erez Zadok ([email protected])
– File system and storage security
Labs
• Applied Logic Laboratory
• Design and Analysis Research Laboratory
• Experimental Computer Systems Laboratory
• File-systems and Storage Laboratory
• Network Security and Applied Cryptography Lab
• Secure Systems Laboratory
• Security, Programming Languages and Theory Lab
• Trusted Hardware Lab (part of NSAC Lab)
Sample Projects (1)
• Software security
– Source-code analysis for vulnerability detection
– Program transformation for runtime detection and prevention of attacks on COTS software
– program anonymization
• Intrusion Detection
– Safe execution of mobile/untrusted code – Safe vulnerability and penetration testing
– automated vulnerability analysis + signature/patch generation
• Applied Cryptography
– Digital E-Cash and Micro-payments in networks – analysis of security in DVD/HD-DVD protocols – authentication for digital imagery
Sample Projects (2)
• Security in Wireless Networks
– Privacy in Cellular Networks – Sensor Network Security
• Storage Security
– Secure file systems – Regulatory compliance
• Access control policies and trust management • Secure Data Management
– data outsourcing – database security
Areas
• Software security
– Compilers – Operating systems – Verification/assurance• Hardware security
– Trustworthy hardware• Data security
– Storage/file security – Database security – Rights Protection• Network security
– Wireless/cellular security – Applied Cryptography• Distributed systems
– Trust management – Vulnerability analysis – Privacy preservation• Security policies
– Frameworks– Monitoring and compliance – Intrusion detection
Impact and Funding
• Funding: $12M+ in federal research grants:
NSF CAREER (5), ONR Young Investigator, IBM Faculty Award, DoD CriticalInfrastructure Protection and IA Fellowship award (1 of 12 in US, 1 of 2 in NY), NSF ITR awards, $2.5M NSF award to support Scholarships for students specializing in IA (only new award in 2004), 8+ NSF Cyber
Trust awards in 2006/2007
