SFGR: Secure Groupware for First Responder C. Edward Chow Chip Benight Ganesh Godavari Chow 6/23/2003 sgfr

Goal of SGFR SGFR: Secure Groupware for First Responder: The goal is to design a framework for enhancing groupware packages such as instant messenger and video conferencing tool, with security through secure group policy management (Antigone from U. Michigan) scalable group key management (Keystone from UT Austin), and secure model (Bell Lapadula) With stress level and tool usage effectiveness evaluation This is a joint project with Dr. Chip Benight of psychology department. The enhanced secured groupware will be tested in a field trial with City’s Emergency Response team. SGFR is sponsored by NISSC with $10,000 grant. Chow 6/23/2003 sgfr

Psychology Evaluation Stress Level Tracking SGFR Features Psychology Evaluation Stress Level Tracking Effectiveness of Tool Usage (Keyboard/Mouse Event Tracking, History of Commands, Mistakes, Popup Quiz?) Security Enhanced Groupware Instant messenger (AMSN, yahoo) Video monitoring Video conference Group Key Managment Enforce Secure Group Policy Rekeying system (Keystone, Antigone) Security Model for Access Control Trusted Solaris/BSD or Customized Access Control/Linux Bell Lapadula Model (Security Clearance, Category) Chow 6/23/2003 sgfr

SGFR System Architecture Registration/autentication SGFR Client SGFR Group Key Server Group key distribution Sign-in, create chat groups Encrypted msgs With group key SGFR Instant Messenger Server SGFR Client Subscribe video channel SGFR Video Conference Server SGFR Client Chow 6/23/2003 sgfr

Timeline and Deliverables Phase 1. 6/2/2003-7/9/2003 Develop SGFR version 0.1 with Secure IM. Integrate Keystone with instant messenger. Develop Stress Level/Tool Usage Evaluation Plan NISSC Midterm Report. Phase 2. 7/10/2003-8/9/2003 Develop SGFR version 0.2. Enhance secure IM with security model, group policy management, video capability, and stress level/usage monitoring. Port Keystone to run with Openssl. Plan for field trial. Phase 3. 8/10/2003-9/9/2003 Field trial with City Emergency Response Team. Develop SGFR version 1.0. Improve SGFR with field trial feedback. NISSC Final Report. Chow 6/23/2003 sgfr

Status Obtained keystone package from UT Austin. Ported Crytolib1.2 to run on Linux. Testing keystone key server. Faxed request to U. Michigan for Antigone security policy management software. Will receive software package from Prof. Atul Prakash soon. Studying proper instant messenger software for use as groupware in our project. Contacted Steve Dubay, Director of Emergency Management for the City of Colorado Springs, 385-7229. He will arrange contact/meeting with their technical members. Chow 6/23/2003 sgfr