Information Systems and Internet Security (ISIS) Lab Research overview and some recent projects Nasir Memon Polytechnic Institute of NYU

ISIS - Highlights  8 faculty members in program  More than a dozen Ph.D. students  More than a dozen specialized courses in security  More than over $10 million in funding over the last 3 years  Host of NSA/NSF Cyber Corps Program (SFS)  NSA Center of Excellence in IA Education, NSA Center of Excellence in IA research  One of the premier cyber security programs in US Cyber Corps Group

ISIS - Research Areas  Hardware for Secure Systems  Trusted hardware, hardware obfuscation, Gigabit IDS/IPS, DDoS defense.  Multimedia Security  Image forensics, digital watermarking, steganography and steganalysis  Software Security  Static analysis, software obfuscation  Host Security  Disk forensics, secure virtualization  Network Security  Infection detection, Ad-hoc networks, network forensics. Cyber Corps Group

Secure Device Pairing Fundamental Security Objective: How to bootstrap secure communication between Alice’s and Bob’s devices when they have  no prior context  no common trusted CA or TTP Examples:  Pairing a bluetooth cell phone with a headset  Pairing a WiFi laptop with an access point Solution Idea:  make use of a physical channel between devices  with least involvement from Alice and Bob Out-Of-Band (OOB): Audio, Visual or Tactile Faculty: NiteshSaxena; Funded by NSF

Research Challenges  OOB channels are low-bandwidth  Devices may be constrained in terms of interfaces, e.g.,  access points, headsets  implanted wireless devices  User is constrained - Usability  Multiple devices  Sensor network initialization  Group formation Ohh! I cannot even pair my socks!

Other Ongoing Projects  RFID Security and Privacy  Mobile Phone Assisted Usable Password Authentication  Fault-Tolerant User-Centric Security Services (with Yevgeniy Dodis)  Privacy of Web Search  Inference of Private Attributes on Facebook (with Keith Ross) More info:

Media Forensics

Media Forgery Detection Many aspects to the problem Scanner- Model Media Forensics Identification of Synthetic media Media Source Identification Camera- Model Source- Model Identification Individual Source Identification Scanner Camera

Contributions CFA Detector Lens Processing Filters Color Interpolation Gamma Correction White Point Correction Color Conversion Compression Developed novel techniques to collect, attribute and authenticate image (video) evidence. Funded by NSA, NIJ, AFOSR Camera Imaging Pipeline

Trusted and Secure Hardware ( towards building hardware root of trust) RameshKarri ECE Department Ph. D. students  A. Kanuparthi and R. Guo: Trusted Platform Modules  J. Rajendran: Hardware Trojans  J. Li: Circuit Obfuscation  K. Rosenfeld: Secure Testing  J. Quan: Hardware Sidechannels Supported by: Air Force Research Labs, NSF, Army, Cisco Systems

Embedded Devices – Trust?

 Supports: Remote attestation, data sealing, and binding  Remote Attestation  Proving to you (the challenger) that I (the attester)  run legitimate programs  am sending you legitimate data (ground truths) etc Approach – Trusted Platform Modules (TPM) RNG RSA key gen. SHA-1 Signature engine Crypto ProcessorNon-volatile memory Endorsement key Storage root key Volatile memory PCRs Attestation keys Storage keys

TPM: ongoing research  High performance vs Low cost vs Low Power vs Application Specific  Prototypes successfully tested on different application scenarios  Redesign smart grid elements (smart meters, grid sensor platforms and grid control elements)  Deployment in pilot studies will uncover practical kinks…