The security tag has no wiki summary.
-2
votes
1answer
178 views
Good exploit to explore for an undergraduate research paper [closed]
I am looking to write a research paper for an undergraduate class in security.
I'd like to explore the details of a security attack that's happened within the last ~15 years (within the last 5 years ...
6
votes
1answer
111 views
The flaw in Bellare-Rogaway (1995) model on authenticated key exchange
Background:
In their 1995 paper, Bellare and Rogaway describe a formal model for authenticated key exchange in a tripartite setting. In this setting, each client has a shared key with a central ...
7
votes
1answer
332 views
Algorithmic Complexity Attacks
I am studying algorithm construction and weaknesses to resource consumption. One vulnerability that really caught my eye was the Apache Range Header DoS Vulnerability. The following quote was taken ...
15
votes
3answers
311 views
What is the motivation behind the definition of pseudorandom in Nisan/Wigderson?
I am reading the classic "Hardness vs Randomness" by Nisan and Wigderson. Let $B=\{0,1\}$, and fix a function $l\colon \mathbb{N} \to \mathbb{N}$. They define a family of functions $G = \{G_n : ...
2
votes
1answer
82 views
Formal Methods Applied to Role-Based Security (RBAC)
I wonder if someone could direct me to a basic introduction to formal methods applied to role-based security. I'm particularly interested in the question of formal verification and the kind of ...
7
votes
1answer
210 views
Appilicability of Theoritical Computer Science in Malware research
I would like to know the importance of TCS in Malware research. Due to the large volume of new malware variants received per day (~50,000 samples/day according to McAfee), malware researchers are ...
4
votes
1answer
146 views
Contract preservation using grammars
I am exploring using annotated grammars to formalize and enforce parts of contracts between nodes in a distributed application.
I've found a number of articles on languages for specifying fairly ...
8
votes
2answers
657 views
Secure multiparty computation of number of 1s times number of 0s in a shared string
Suppose there are $N>2$ parties $p_j$, each with a bit $b_j\in{\{0,1\}}$. I want to compute the multiplication of number of ones times that of zeros, that is, $R=(\sum{b_j})\times(N-\sum{b_j})$.
...
-1
votes
3answers
199 views
representing code path as graph walks.. a provable graph walk?
I am looking into some security analysis of arbitrary code which is represented as a graph
Are there any papers on whcih graphs walks are valid code paths ?
Or a provable graph walk which is shorter ...
13
votes
0answers
254 views
Reusing 5-independent hash functions for linear probing
In hash tables that resolve collisions by linear probing, in order to ensure $O(1)$ expected performance, it is both necessary and sufficient that the hash function be from a 5-independent family. ...
2
votes
1answer
156 views
Encrypting or obfuscating transport stream identifiers in SSL-like connections
First, a longish prologue.
Assume typical SSL/IKE/SSH-like connections where a Diffie-Hellman exchange is done first to establish session encryption and decryption keys, where those keys are ...
1
vote
2answers
719 views
Resources on Jablon's Protocol
Are there any good resources (descriptions, explanations, examples) regarding Jablon's protocol for password authentication using multiple servers, aside from this paper?
21
votes
6answers
566 views
Curriculum: Logical/Formal Methods in Security
At present I teach a small course (Four two hour lectures at the Masters level) on Logical Methods in Security, though the title Formal Methods in Security might be more apt. It covers briefly the ...
11
votes
1answer
267 views
Finding the penumbra of a Constraint Satisfaction Problem
The following question has come up a number of times when testing the security of a system or model.
Motivation: Software security flaws often come not from bugs due to valid inputs, but bugs ...
