The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
240 views

Help in understanding Symbolic Execution

I am an undergraduate CS student and currently reading on software security, particularly on static analysis of programs. I am particularly interested in understanding Symbolic Execution - an ...
-2
votes
1answer
234 views

Good exploit to explore for an undergraduate research paper [closed]

I am looking to write a research paper for an undergraduate class in security. I'd like to explore the details of a security attack that's happened within the last ~15 years (within the last 5 years ...
6
votes
1answer
251 views

The flaw in Bellare-Rogaway (1995) model on authenticated key exchange

Background: In their 1995 paper, Bellare and Rogaway describe a formal model for authenticated key exchange in a tripartite setting. In this setting, each client has a shared key with a central ...
7
votes
1answer
361 views

Algorithmic Complexity Attacks

I am studying algorithm construction and weaknesses to resource consumption. One vulnerability that really caught my eye was the Apache Range Header DoS Vulnerability. The following quote was taken ...
16
votes
3answers
339 views

What is the motivation behind the definition of pseudorandom in Nisan/Wigderson?

I am reading the classic "Hardness vs Randomness" by Nisan and Wigderson. Let $B=\{0,1\}$, and fix a function $l\colon \mathbb{N} \to \mathbb{N}$. They define a family of functions $G = \{G_n : ...
2
votes
1answer
99 views

Formal Methods Applied to Role-Based Security (RBAC)

I wonder if someone could direct me to a basic introduction to formal methods applied to role-based security. I'm particularly interested in the question of formal verification and the kind of ...
8
votes
1answer
256 views

Appilicability of Theoritical Computer Science in Malware research

I would like to know the importance of TCS in Malware research. Due to the large volume of new malware variants received per day (~50,000 samples/day according to McAfee), malware researchers are ...
4
votes
1answer
156 views

Contract preservation using grammars

I am exploring using annotated grammars to formalize and enforce parts of contracts between nodes in a distributed application. I've found a number of articles on languages for specifying fairly ...
8
votes
2answers
679 views

Secure multiparty computation of number of 1s times number of 0s in a shared string

Suppose there are $N>2$ parties $p_j$, each with a bit $b_j\in{\{0,1\}}$. I want to compute the multiplication of number of ones times that of zeros, that is, $R=(\sum{b_j})\times(N-\sum{b_j})$. ...
-1
votes
3answers
238 views

representing code path as graph walks.. a provable graph walk?

I am looking into some security analysis of arbitrary code which is represented as a graph Are there any papers on whcih graphs walks are valid code paths ? Or a provable graph walk which is shorter ...
13
votes
0answers
298 views

Reusing 5-independent hash functions for linear probing

In hash tables that resolve collisions by linear probing, in order to ensure $O(1)$ expected performance, it is both necessary and sufficient that the hash function be from a 5-independent family. ...
2
votes
1answer
177 views

Encrypting or obfuscating transport stream identifiers in SSL-like connections

First, a longish prologue. Assume typical SSL/IKE/SSH-like connections where a Diffie-Hellman exchange is done first to establish session encryption and decryption keys, where those keys are ...
1
vote
2answers
726 views

Resources on Jablon's Protocol

Are there any good resources (descriptions, explanations, examples) regarding Jablon's protocol for password authentication using multiple servers, aside from this paper?
21
votes
6answers
619 views

Curriculum: Logical/Formal Methods in Security

At present I teach a small course (Four two hour lectures at the Masters level) on Logical Methods in Security, though the title Formal Methods in Security might be more apt. It covers briefly the ...
12
votes
1answer
282 views

Finding the penumbra of a Constraint Satisfaction Problem

The following question has come up a number of times when testing the security of a system or model. Motivation: Software security flaws often come not from bugs due to valid inputs, but bugs ...