Project Assignments and Readings

• Flaws in Authentication Protocols.

  Student: Shawn Butler
  Date of presentation: October 8. 1 hr.
  Papers: [NS78], [DS81], [NS87], [NS93], [HLL95], [Syv94], [Car94], [BM90].

• Formal Methods (Logics)

  Students: Yih-Chun Hu, Dawn Song, and Ken Tew
  Date of presentation: October 15. 1 hr.
  Papers: BAN logic and variants-[BAN89], [BAN90a], [GNY90], [SvO94];
  BAN controversy- [Nes90], [BAN90b], [Syv91].

• Design principles

  Students: Sergey Berezin and Andy Myers
  Date of presentation: October 22. 1 hr.
  Papers: [AN96], [AN95b], [Syv96], [Boy90], [MB94].

• Usability issues

  Student: Alma Whitten
  Date of presentation: October 22. 1/2 hr.
  

• Model checking

  Students: Will Marrero and Martin Sweitzer
  Date of presentation: October 29. 1 hr.
  Papers: [Low96], [MMS97], [MCJ97].

• Theorem provers and other tools

  Students: Derek Dreyer and Darrell Kindred
  Date of presentation: October 29. 1 hr.
  Papers [KMM94], [SM93], [SM95], [Kem87], [Pau96], [BP97], [KW96].

• Anonymous cash

  Students: Zhongtao Wang and Hua Yu
  Date of presentation: November 12. 1/2 hr.
  Papers: [Bra93], [CFN90], [OO91], [BGK95], [CP92].

• Electronic voting

  Student: Henri Dubois-Ferriere and Qi He
  Date of presentation: November 12. 1/2 hr.
  Papers: [BT94], [DLM82], [BC86], [Ben87a], [Ben87b], [Ben94], [BFO92], [CF85], [Cha81], [Cha85], [Coh85], [Cra96], [GM82], [Rab83], [Sch96], [SK95].

• Electronic auctions

  Students: Mike Harkavy and Hiroaki Kikuchi
  Date of presentation: November 12. 1/2 hr.
  Papers: [Ben86], [FR96], [RBO89].

• Watermarking and Rights management

  Students: Adrian Perrig and Andrew Willmott
  Date of presentation: November 12. 1/2 hr.
  Papers: [Cox96].
  Web Sites:
  Intertrust: http://www.intertrust.com
  IBM Rights Mgmt in Digital Library: http://www.almaden.ibm.com/cs/DLRM/
  General Rights Management:
  http://www.nla.gov.au/aima/rights.html
  http://www.securityserver.com/cgi-local/ssis.pl/category/@rights.htm
  http://pcd.stanford.edu/rmr/commpacts.html
  http://www.copyright.com/stuff/elec_rights_art.html
  http://www.indexstock.com/pages/appendxb.htm
  http://dmlwww.cwru.edu/homepage/steve/C3447015.htm
  

• State of the Art in Factoring Methods

  Student: Will Uther
  Date of presentation: November 17. 1/2 hr.
  Papers: [Kob87]chapter 6, [OS95], [Sil86].
  Web Sites: http://www.certicom.com/ecc/
  

• Lattice cryptography

  Student: Ari Rapkin
  Date of presentation: November 17. 1/2 hr.
  Papers: [Ajt96] [AD97], [AD96].

• Differential Cryptanalysis

  Student: Roy Laurens
  Date of presentation: November 17. 1/2 hr.
  Papers: [BS93].

• Trust management

  Students: Bjarni Halldorsson and Erlendur Thorsteinsson
  Date of presentation: November 19. 1/2 hr.
  Papers: X.509 (revision 3), [BFL96].
  Web Sites: http://www.w3.org/PICS/
  

• Key escrow and cryptography

  Students: Lian Keng Lim and Ian Timourian
  Date of presentation: November 19. 1/2 hr.
  Papers: [Mic93], [oST94], [Lei94].
  Web Sites:
  http://guru.cosc.georgetown.edu/~denning/crypto/taxonomy.html
  http://www.eff.org/pub/Privacy/Clipper
  http://csrc.nist.gov/keyrecovery
  www.crypto.com/key_study
  http://csrc.nist.gov/keyrecovery/ees_q-a.txt
  http://www.cosc.georgetown.edu/%7Edenning/crypto/Appendix.html
  http://www.eff.org/pub/Privacy/Clipper/clipper_tis.paper
  http://www.eff.org/pub/Privacy/Clipper/harris_doj_clipper_050394.testimony
  

• Code-level security (SFI, PCC, Active Networks)

  Student: Stephen Bijansky, Takemine Ichimaru, and Kamen Lozev
  Date of presentation: November 19. 1/2 hr.
  Papers: [WLAG93], [NL96], [TW96], [Van97].

• Code-level security (Java JDK, Active-X, others)

  Student: Edwin Chan and Yang-hua Chu
  Date of presentation: November 19. 1/2 hr.
  Papers: [YT95].
  Web Sites:
  Sun Java JDK 1.2 documentation:
  http://java.sun.com/products/jdk/1.2/docs/
  JAR: http://java.sun.com/products/jdk/1.2/docs/guide/jar/jarGuide.html
  Netscape 4.0 security:
  http://developer.netscape.com/one/security/index.html
  ActiveX DCom:
  ftp://ietf.org/internet-drafts/draft-brown-dcom-v1-spec-01.txt
  ActiveX MS Site:
  http://www.microsoft.com/activex/
  CAB: http://www.microsoft.com/java/security/secfaq.htm
  Authenticode MS Site:
  http://www.microsoft.com/security/tech/misf8.htm
  IE4.0 Security MS Site:
  http://www.microsoft.com/ie/ie40/features/ie-security.htm
  

Heather L. Marko

Modified: December 1997