1. Research Problems in Information Assurance Talk for the second year DPS students Li-Chiou Chen Information Systems Seidenberg School of Computer Science and Information Systems Pace University 11/18/06

2. © Li-Chiou Chen, CSIS, Pace2 Agenda Past research projects in Internet-based attacks Ongoing research projects in secure financial trading & security usability Student research projects

3. © Li-Chiou Chen, CSIS, Pace3 Interdisciplinary study in information assurance Security Technology Social, Economical and Policy Issues Computational Modeling

4. © Li-Chiou Chen, CSIS, Pace4 Countermeasures for the propagation of computer viruses Problem: What anti-virus strategy works better to slow down the propagation of a new computer virus Method:  Simulate the spread of computer viruses and countermeasures using agent-based simulation  Run on 4 different theoretical network topology and 2 different empirical network topology  Compare five different strategies  Propose a new one – Countermeasure competing (CMC) Past project - Computer viruses

5. © Li-Chiou Chen, CSIS, Pace5 Simulations of four anti-virus strategies Past project - Computer viruses

6. © Li-Chiou Chen, CSIS, Pace6 Results and further research issues Results - countermeasure propagation network is more effective than others when  this network has a few highly connected nodes like P2P networks  the rate of countermeasure propagation is faster than the rate of virus infection Further research  How to implement such as a network  How about zero-day worms? Past project - Computer viruses

7. © Li-Chiou Chen, CSIS, Pace7 Distributed denial-of-service (DDOS) attacks and defenses Past project - Distributed denial of service

8. © Li-Chiou Chen, CSIS, Pace8 Computational analysis of the countermeasures for Internet-based attacks Past project - Distributed denial of service

9. © Li-Chiou Chen, CSIS, Pace9 Further research problems Defenses for attacks against infrastructures, such as routers and DNS servers Assessment of risk attitude of subscribers and providers  E.g., the premium that a subscriber would like to pay in order to avoid the risk of DDOS attacks Calibration of the probability of attacks Procedures for determining a liability assignment Past project - Distributed denial of service

10. © Li-Chiou Chen, CSIS, Pace10 Analysis on the usability of security in wireless devices Problems:  Currently focused on Wi-Fi security mechanisms  More than 60% of Wi-Fi do not have adopt any security protocols, such WEP,WPA,or WPA2.  Westchester county has passed a regulation on Wi-Fi security Method  Model the decision factors and process of users/administrators on adopting security protocols for wireless devices  Empirical study on Westchester small business owners Ongoing project – Wireless security usability

11. © Li-Chiou Chen, CSIS, Pace11 Internet-based attacks towards financial trading and their countermeasures Problems:  What are security mechanisms to ensure the C. I. A. of financial trasactions  Countermeasures for attacks Especially on DDOS and viruses With Prof. Chienting Lin in Seidenberg and Prof. Dr. Padma Kadiyala in Lubin Ongoing project – Wireless security usability

12. © Li-Chiou Chen, CSIS, Pace12 Student Research Projects Joseph Acampora –MS in IS  XML-DNR: A Bandwidth-Saving Technique for Distributed Intrusion Detection Systems Yosef Lehrman – MS in IT  Client-side solutions for phishing prevention Alex Tsekhansky - DPS  Byzantine fault tolerant DNS for networks with limited PKI infrastructure Student projects

13. © Li-Chiou Chen, CSIS, Pace13 Student Course Projects Courses  Management of Information Security  Overview of Computer Security  Internet and Network Security Consumer Approaches to Privacy End-Users’ Perspectives on Phishing Scams Security Analysis of Skype ……. Student projects

14. © Li-Chiou Chen, CSIS, Pace14 Resources For my publications, please go to http://csis.pace.edu/~lchen/ http://csis.pace.edu/~lchen/ Ideas from students’ course projects  http://csis.pace.edu/~lchen/S06/IT304/IT304SyllabiNY.html http://csis.pace.edu/~lchen/S06/IT304/IT304SyllabiNY.html