Instructor:

Dr. Peng Ning

Teaching assistant:

Kun Sun

Class location:

Room 150 Venture II, Centennial Campus

Day and time:

Mondays, Wednesdays, and Fridays 4:10pm -5:00pm.

Mailing list:

Web page:

http://courses.ncsu.edu/csc774/lec/002 

Message Board:

http://courses.ncsu.edu/csc774 

Note on assignments:

You must use text editor (e.g. MS Word) to complete your homework. Handwritten submissions are not accepted. You should submit hard copies unless otherwise specified.

All work is to be performed individually unless otherwise specified. For the collaborative problems, you are encouraged to form teams of 1-3 members (of students in this class) to cooperate only on those problems. After discussing the problems, please write up your answers individually. Indicate the names of the other members in your team, if any.

You get no extra credit for working alone where collaboration is permitted.

Each student is required to give a presentation on a research paper assigned by the instructor. The list of papers can be accessed here.
Here is the grading form for the in-class presentation.

Each student is required to complete a survey paper or a research paper. Each student needs to submit a proposal in the middle of the semester and the final version by the end of the semester. Both will be graded. Students can form teams, each with up to three members.

People who write research paper will be rewarded by getting 50 bonus points by default. In addition, there will be other bonus points depending on the quality of the proposal or the paper. However, you need to realize that it is more difficult to write an original research paper than a survey paper. You are encouraged to combine this effort with your current research. You are also encouraged to discuss your work with the instructor during his office hours or by appointment.

Requirements for term paper proposal 

Requirements for final term paper

• Research Paper
  • You can work on original research problems. The outcome should be a paper with original technical contribution. Your grade on this will be judged on originality, soundness of the approach, and quality of presentation. 
  • You are encouraged to choose this if you are a PhD student or a master student that has to complete a thesis.
• Survey Paper
  • You can write a paper that surveys a particular field on information security. The outcome should be a paper that summarizes the trend in the field you have chosen. Your grade will be judged on the completeness of the survey, the quality of the trend analysis, and the quality of presentation.
• Example Topic Areas (More will be posted):
  • Topics related to wireless sensor networks
    • Key management
    • Secure data collection
    • Intrusion detection
    • Secure location discovery
    • Secure time synchronization
    • Efficient implementation
  • Vulnerability Analysis
  • Wireless Security
  • Intrusion Detection
  • Authentication
  • Access Control
  • Authorization
  • DNS Security
  • Digital Watermarking
  • New Attacks

Date

Topics

Reading Assignment
(Complete before class.)

Homework Assignment

Handouts

Topic 1. Course Introduction

Topic 1

Review of basic security concepts

01/19/04

Paper #3. H. Orman, “The OAKLEY Key Determination Protocol,” IETF Request For Comment 2412, November 1998.

Paper #4. D. Maughan, M. Schertler, M. Schneider, and J. Turner, “Internet Security Association and Key Management Protocol (ISAKMP),” IETF Request For Comment 2408, November 1998.

HW1

Reference solution

(Due by 2/9/04)

Benjamin Cox, J.D. Tygar, and Marvin Sirbu. "Netbill Security and Transaction Protocol," In The First USENIX Workshop on Electronic Commerce, pages 77--88, July 1995.
See also the NetBill Project Website.

R.L. Rivest, A. Shamir, "PayWord and MicroMint: Two simple micropayment schemes," In Proceedings of Security Protocols Workshop, pages 69 - 87, 1996.

Silvio Micali and Ronald Rivest. Micropayments revisited. In Bart Preneel, editor, Progress in Cryptology --- CT-RSA 2002, volume 2271 of Lecture Notes in Computer Science. Springer-Verlag, February 18-22 2002.

HW2

Solution

(Due by 02/25/04)

Guest Lecture

Dr. Mike Reiter

CyLab, CMU

(location: Room 107H, Park Shop, Main Campus)

Title: Security for, and by, converged mobile devices

P. MacKenzie and M. K. Reiter. Delegation of cryptographic servers for capture-resilient devices. Distributed Computing 16(4):307–327, December 2003. doi:10.1007/s00446-003-0098-4   © Springer-Verlag

P. MacKenzie and M. K. Reiter. Networked cryptographic devices resilient to capture. International Journal of Information Security 2(1):1–20, November 2003. doi:10.1007/s10207-003-0022-8   © Springer-Verlag

M. K. Reiter, A. Samar, and C. Wang. The design and implementation of a JCA-compliant capture protection infrastructure. In Proceedings of the 22nd IEEE Symposium on Reliable Distributed Systems, October 2003. © IEEE

HW3

Solution

(Due by 03/29/04)

Topic 7.1

Topic 7.1 (Cont'd)

Topic 7.2 (Cont'd)

Grade Distribution

Solution

Topic 8. Security in MANET

Topic 8.1 Secure Ad-Hoc Routing Protocols

Review of mid-term exam #2

Topic 8.1 (Cont'd)

About in-class presentation

Topic 8.2 Detecting Misbehaving Nodes

S. Marti, T. J. Giuli, K. Lai, and M. Baker, “Mitigating routing misbehavior in mobile ad hoc networks,” in Proceedings of the Sixth annual ACM/IEEE International Conference on Mobile Computing and Networking, pages 255 -- 265, 2000.

HW4

Solution

(Due by 04/019/04)

Topic 8.2

Topic 9. Security in Sensor Networks

Topic 9.1 Key Predistribution in Sensor Networks

D. Liu and P. Ning, “Establishing Pairwise Keys in Distributed Sensor Networks,” in Proceedings of the 10th ACM Conference on Computer and Communications Security (CCS '03), pages 52--61, Washington D.C., October, 2003.

Topic 9.1-2

1. Bartosz Przydatek, Dawn Song, Adrian Perrig, "SIA: Secure Information Aggregation in Sensor Networks", In Proceedings of ACM SenSys 2003.

2. Sencun Zhu, Sanjeev Setia, Sushil Jajodia, and Peng Ning, "An Interleaved Hop-by-Hop Authentication Scheme for Filtering False Data in Sensor Networks," To appear in the Proceedings of IEEE Symposium on Security and Privacy, Oakland, California, May 2004.

3. Fan Ye, Haiyun Luo, Songwu Lu, Lixia Zhang, ``Statistical En-route Detection and Filtering of Injected False Data in Sensor Networks,'' to appear in IEEE INFOCOM 2004

Nikhil Baradwaj

Qinghua Zhang

Li Yang

4. H. Chan, A. Perrig, and D. Song, “Random Key Predistribution Schemes for Sensor Networks,” in Proceedings of IEEE Symposium on Research in Security and Privacy, pages 197—213, May 2003.

5. Wenliang Du, Jing Deng, Yunghsiang S. Han, Shigang Chen and Pramod Varshney. "A Key Management Scheme for Wireless Sensor Networks Using Deployment Knowledge," To appear in IEEE INFOCOM'04, March 7-11, 2004, Hongkong, China.

6. Donggang Liu, Peng Ning, "Location-Based Pairwise Key Establishments for Static Sensor Networks," in 2003 ACM Workshop on Security in Ad Hoc and Sensor Networks (SASN '03), October 2003.

Arvind Soni

Annika Edwards

Angana Ghosh

7. Wenliang Du, Jing Deng, Yunghsiang S. Han, and Pramod Varshney. "A Witness-Based Approach For Data Fusion Assurance In Wireless Sensor Network," in Proceedings of the IEEE 2003 Global Communications Conference (GLOBECOM). San Francisco, CA, USA. December 1-5, 2003.

8. S. Banerjee and B. Bhattacharjee, "Scalable Secure Group Communication over IP Mulitcast," in Proceedings of Internation Conference on Network Protocols, November, 2001.

9. Dalit Naor, Moni Naor, Jeff Lotspiech, "Revocation and Tracing Schemes for Stateless Receivers", in Lecture Notes in Computer Science, volume 2139, pages 41--??, 2001.

Mithun Acharya

Pierre Mouallem

Yan Zhai

10. G. Ateniese and M. Steiner and G. Tsudik, "Authenticated Group Key Agreement and Friends," in Proceedings of the 5th ACM Conference on Computer and Communications Security, pages 17 -- 26, 1998.

11. Donggang Liu, Peng Ning, Kun Sun, "Efficient Self-Healing Group Key Distribution with Revocation Capability," in Proceedings of the 10th ACM Conference on Computer and Communications Security (CCS '03), pages 231--240, Washington D.C., October, 2003.

Course Evaluation

Jaideep Mahalati

Rick Flynn

12. Adrian Perrig, "The BiBa One-Time Signature and Broadcast Authentication Protocol," in Proceedings of the ACM Conference on Computer and Communications Security, November, 2001.

13.Leonid Reyzin and Natan Reyzin, "Better than BiBa: Short One-time Signatures with Fast Signing and Verifying," in Proceedings of 7th Australasian Conference on Information Security and Privacy, 2002.

14. Chris Karlof, Naveen Sastry, Yaping Li, Adrian Perrig, and J.D. Tygar, "Distillation Codes and Applications to DoS Resistant Multicast Authentication", In Proceedings of the 11th Annual Network and Distributed System Security Symposium (NDSS '04), February 2004.

Rott Adsadawuttijaroen

Michael Lee

Pratik Shah

15. Adrian Perrig and Robert Szewczyk and Victor Wen and David Culler and J.D. Tygar, "SPINS: Security Protocols for Sensor Networks," in Proceedings of Seventh Annual International Conference on Mobile Computing and Networks, July 2001.

16. Donggang Liu, Peng Ning, "Efficient Distribution of Key Chain Commitments for Broadcast Authentication in Distributed Sensor Networks," in Proceedings of the 10th Annual Network and Distributed System Security Symposium, pages 263-276, February 2003.

17. Dawn Song, David Zuckerman, and J. D. Tygar, "Expander Graphs for Digital Stream Authentication and Robust Overlay Networks," in Proceedings of the 2002 IEEE Symposium on Security and Privacy.

Tanu Sharma

Richard Reid

Julie Starr

18. D. Balfanz and D.K. Smetters and P. Stewart and H.C. Wong, "Talking to Strangers: Authentication in Ad-Hoc Wireless Networks," in Proceedings of 2002 Symposium on Network and Distributed Systems Security (NDSS '02), February 2002.

19. Lingxuan Hu and David Evans, "Using Directional Antennas to Prevent Wormhole Attacks," In Proceedings of NDSS '04.

20. S. Buchegger and J. L. Boudec, "Performance Analysis of the CONFIDANT Protocol (Cooperation of Nodes: Fairness in Dynamic Ad-hoc Networks)," in Proceedings of The Third ACM International Symposium on Mobile Ad Hoc Networking and Computing, pages 226--236, June, 2002.

Phu Dinh

Ishan Kapoor

Srinath Anantharaju

Advanced Topics

Final review

21. Yih-Chun Hu, Adrian Perrig, and David B. Johnson. "Packet Leashes: A Defense against Wormhole Attacks in Wireless Ad Hoc Networks," In Proceedings of the INFOCOM 2003.

22. Yih-Chun Hu, Adrian Perrig, David Johnson, "Efficient Security Mechanisms for Routing Protocols", In Proceedings of NDSS 2003.

Qiao Xu

Qing Zhang