Home

Course description

Lecture notes

Assignments

Projects

Tools

Reference

CS 395T - Design and Analysis of Security Protocols (54302)

Fall 2004

Projects

• Brief description of system or protocol you are planning to analyze, or the tool extension you are planning to implement;
• Description of security properties you intend to investigate;
• Tools and analysis techniques you expect to use.

Analyze an existing protocol

• Trusted Computing protocols (e.g., remote attestation).
• Certification authority.
  • MOCA (mobile certificate authority for wireless ad hoc networks)
  • COCA
• Group key management.
  • (dead link) Bibliography on multicast security
  • Key management for network security services
  • Communication-efficient group key agreement
• Secure verification of location claims.
  • Secure, private proofs of location
  • Secure verification of location claims
• 802.11i wireless security.
• Gossip-based multicast (e.g., model resistance to denial of service or reliability guarantees using a process calculus or a finite-state checker).
  • Exposing and eliminating vulnerabilities to denial of service attacks in secure gossip-based multicast
  • Denial of service resilience in ad-hoc networks
  • Probabilistic multicast
  • Probabilistic lightweight group communication system for mobile ad hoc networks

• Build a proof environment for a protocol composition logic.
• Extend the symbolic constraint solver with support for homomorphic encryption schemes.
• Implement an online anonymity/traffic analysis monitor for a mix network, e.g., Mixminion.
• Add support for modeling denial of service attacks to an existing tool.

• Prove a protocol correct in the universal composability framework by defining the ideal functionality and proving equivalence.
• Demonstrate computational soundness (e.g., in the Micciancio-Warinschi sense) for a cryptographic primitive (e.g., a digital signature scheme).
• Design a technique for reasoning about correctness of group key management protocols based on Diffie-Hellman.
  • Authenticated multi-party key agreement
  • Provably authenticated group Diffie-Hellman key exchange