Practically Useful Network Security Chin-Tser Huang University of South Carolina

1/8/20102 Security Services Confidentiality Integrity Authentication Anti-replay … Availability Access control Non-repudiation Anonymity

1/8/20103 Network Security Always Good? What if security mechanism is not applied correctly?

1/8/20104 Network Security Always Good? What if security mechanism is not applied appropriately? xy AES k3 (3DES k1,k2 (m, ts)) 3DES k1,k2 (m, ts)m, ts

1/8/20105 Practically Useful Network Security To make network security practically useful, we need to Verify the correctness of security mechanism Consider the efficiency of security mechanism

1/8/20106 Protocol Design and Verification Correctness is essential for secure protocols Two steps to verify correctness of protocols First specify protocols using a formal and scalable notation Then verify correctness of protocol using state transition diagram

1/8/20107 Abstract Protocol Notation

1/8/20108 State Transition Diagram

1/8/20109 Botnet Detection and Mitigation Supported by NSF and AFRL Ongoing collaboration with Dr. Han at AFRL Botnet is a distributed network of a large number of bots, which are machines infected with malware and under the control of a botmaster

1/8/ Botnet Detection and Mitigation Aim to mitigate the problem of botnets by filtering their malicious packets and command and control (C&C) packets early Successful implementation on Quagga routing software Currently developing Tcl/Tk scripts for automated rule dissemination between routers With Prasanth Kalakota, Mohamed Sharaf and Dr. Matthews

1/8/ Early Filtering Testbed Four Cisco 2811 routers Dell PowerEdge R410 server

1/8/ Intrusion Detection Supported by a DARPA/AFRL grant Microscope View network as a collection of individual hosts Charge individual host for anomalous behavior With Jeff Janies A BC D

1/8/ Intrusion Detection Macroscope View network traffic as time-series signal Use wavelets to capture different types of anomalies With Sachin Thareja

1/8/ Authentication in Wireless Networks Design secure unicasting protocol to counter routing level attacks in ad hoc sensor networks Develop dual authentication protocol against rogue access points for WLANs Discover and fix security problems in WiMAX PKM protocols With Jeff Janies, Sen Xu, and Prof. Matthews

Privacy-Preserving Multi-Dimensional Credentialing Organizations often use common personal identifiers (PIs) to satisfy reporting obligations and uniquely identify the same individuals, thereby making it possible to cross-link and aggregate the transactions of the same person from multiple sources Introduce the veiled certificate (VC) which allows individuals to maintain control over their personal information while satisfying the regulatory and reporting needs of today’s security conscious environment With Prof. Gerdes 1/8/201015

1/8/ More Information Secure Protocol Implementation & Development (SPID) Group Website: