Information Security

1
Information Security

• Andre L. M. dos Santos
• andre_at_cc.gatech.edu

2
Safe Areas of Computation

• Tamper resistant areas of computation
• Protect otherwise unsafe application
• Currently using smart cards
• Applications
• Online Banking
• Digital Library
• Electronic Voting

3
Denial of Information

• What is it?
• Define quality of information
• Trust infrastructure
• Trust databases
• Composing trust
• Limiting trust
• Introduce sources

4
Cryptography in Smart Cards

• Smart cards
• 8 bit processors
• 2k RAM
• 32k EEPROM
• Crypto coprocessor
• 1100 bit registers
• Limited operations
• Good for modular multiplication

5
Secure Kernel for Smart Cards

• Smart cards have very small memory
• The use of code slicing can allow a bigger code
  to run inside a smart card
• Question
• What is the best IR?
• How to protect against power, slice selection and
  power analysis?
• How to firewall multiple applications?

6
CFGs authorization tokens

• CFG rules -gt tokens (easy)
• Tokens -gt cfg rules (difficulty)
• This is a one way function -gt Good for
  cryptography!
• Questions
• Where can it be used?
• Do I need all the rules to predict a token?

7
A few others

• Freenet
• Breaking freenet anonymity
• Poisoning freenet
• IPsec
• Wireless
• Wireless networks
• Phone PDA

8
CS-6260 Applied Cryptography

• Crypto algorithms
• Traditional
• Symmetric
• Public Key
• Protocols
• Good and bad protocols
• Final Project
• Secure Distributed Credit Card using cookies