ECE 646 Cryptography and Computer Network Security. Kris Gaj Research and teaching interests:

Transcription

1 646 Cryptography and Computer Network Security Course web page: Google Kris Gaj 646 Kris Gaj Research and teaching interests: cryptography network security computer arithmetic FPGA & ASIC design and testing Contact: The Engineering Building, room 3225 Office hours: Tuesday, 6:00-7:00 PM Thursday, 3:15-4:15 PM and by appointment 1

2 646 Part of: MS in Computer Engineering Fundamental course for the specialization areas: Network and System Security Computer Networks Elective course in the remaining specialization areas MS in Electrical Engineering Fundamental course for the specialization area: Communications and Networking Elective course in the remaining specialization areas 646 Part of: MS in Information Security and Assurance Elective course for the concentrations: Network and System Security Applied Cyber Security PhD in Electrical and Computer Engineering PhD in Computer Science PhD in Information Technology 2

3 MS CpE: NETWORK AND SYSTEM SECURITY Advisors: Kris Gaj, Jens-Peter Kaps, Kai Zeng Computer Network Architectures and Protocols S. Yun, et al Cryptography and Computer Network Security K. Gaj, J.-P. Kaps lab, project Advanced Applied Cryptography J.-P. Kaps, K. Gaj lab, project 4. ISA 656 Network Security X. Wang, R. Simon Cryptographic Engineering J.-P. Kaps project MS CpE: COMPUTER NETWORKS Advisors: Brian Mark, Bijan Jabbari, Peter Paris, Zhi Tian Introduction to Random Processes in Y. Ephraim, Z. Tian, et al Computer Network Architectures and Protocols S. Yun, et al Design and Analysis of Comp. Comm. Networks B. Jabbari Cryptography and Computer Network Security K. Gaj, J.-P. Kaps lab, project Wireless Networks B. Jabbari High-Speed Networks B. Mark 3

4 MS EE: COMMUNICATIONS AND NETWORKING security & applications performance network link physical comm theory EE core Comp. Network Architectures and Protocols 542 CpE core Optoelectronics EE core Random Processes Operating Systems CpE CS 571 core Wireless Design & Analysis Networks of Comm. Networks 642 Wireless Comm. & Networks 630 Statistical Comm. Theory 633 Coding Theory High-Speed Networks Digital Mobile Comm. Comm. Network Security CS 672 CS 756 Performance Analysis & Evaluation 737 Spread Spectrum Comm. 739 Satellite Comm. A few words about You 2 Non-degree 1 PhD IT 1 PhD CS 3 PhD 4 MS EE 10 MS ISA 8 MS CpE 4

5 646 Lecture Homework 10 % Midterm exam 20 % Final Exam 25 % Laboratory 10 % Project 35 % Specification - 5 % Results - 10 % Oral presentation - 10% Written report - 8% Review - 2% Bonus Points for Class Activity Based on class exercises during lecture Small points earned each week posted on BlackBoard Up to 5 big bonus points Scaled based on the performance of the best student For example: Small points Big points 1. Alice Bob Charlie 8 1 5

6 deapth viewgraphs / whiteboard Lecture viewgraphs available on the web (please, extend with your notes) books 1 required (Stallings) 2 optional (all chapters available on the book web page) articles (PQCrypto, CHES, CRYPTO, EUROCRYPT, etc.) web sites - Crypto Resources standards, FAQs, MOOCs, conferences, open source software, research groups 6

7 Homework optional assignments short programs vs. analytical problems or HDL codes ü More time consuming ü Most time spent on debugging ü Relatively straightforward ü Typically less time consuming ü More thinking ü Little writing Getting Help Outside of Office Hours System for asking questions 24/7 Answers can be given by students and instructors Student answers endorsed (or corrected) by instructors Average response time in Fall 2015 = 41 minutes You can submit your questions anonymously You can ask private questions visible only to the instructors 7

8 Midterm exam ü 2 hours 40 minutes ümultiple choice test + short problems ü open-books, open-notes ü practice exams (with solutions) available on the web Tentative date: Tuesday, October 31 Final exam 2 hours 45 minutes Multiple choice + several problems Tuesday, December 19 7:30 10:15 PM 8

9 Laboratory labs based on two major software packages ü CrypTool ü GnuPG for Windows, Linux, or Mac done at home or in the labs: software downloaded from the web based on detailed instructions grading based on written reports (answers to questions included in the instructions) Project (1) original useful depth, originality based on additional literature you can start at the point where former students ended based on something you know and are interested in software, hardware, analytical, or mixed may involve experiments teams of 1-3 students 9

10 Mixed Projects AN AN 20% 20% 40% SW 80% 40% AN 60% SW 40% Project (2) about three weeks to choose a topic and write the corresponding specification regular meetings with the instructor a few oral progress reports based on Power Point slides draft final presentation due at the last progress report short conference-style oral presentations contest for the best presentation written report/article, IEEE style publication of reports and viewgraphs on the web 10

11 Project (3) Project reports/articles requirements - IEEE style - 15 pages maximum - appendices possible but do not influence the evaluation Review of project reports - initial version of the report due Sunday, Dec reviews done by your colleagues - reviews due, Thursday, Dec final version of the report due Saturday, Dec. 16 Project (4) Project presentations Tuesday, December 5, 4:30-9:30PM - conference style - open to general public (in particular, students from previous years) - 10 minutes for the presentation + 5 minutes for Q&A - time strictly enforced - audience votes in the contest for the best project 11

12 Contest for the best project Two independent categories: Results Presentation Scale: 0 = very poor to 10 = excellent Results Meeting Project goals Efficiency & security of the proposed/selected design/scheme Original & Correct analysis implementation & testing scheme Useful for other students & other members of the cryptographic community 12

13 Presentation Motivation & background Logical Clear organization and Concise of the talk presentation of main results Quality of viewgraphs Answering questions Discussion of encountered problems Conclusions Awards (separate in each category) I award - 5 points II award - 3 points III award - 1 point 13

14 Typical Approach to an Analytical Project Two or more alternative solutions to a certain problem. Clear evaluation criteria, and their relative importance. Evaluation of all investigated solutions according to these criteria. Sometimes, there is a clear winner. In other cases, the winner depends on a particular application scenario. Mutual dependencies among various evaluation criteria. Critical analysis of previous literature, looking for any mistakes, inconsistencies, missing assumptions, or other flaws of previous work. Any remaining imperfections/disadvantages of the best currently available solution, and suggestions for possible improvements. Types of Projects Typically Winning the Contest Fall 2013 Fall 2012 SW AN SW-AN -AN Fall 2011 AN Fall 2010 AN -SW

15 Winners of the Contest in Fall 2014 & Fall 2015 Fall Fall 2015 SW Combining Projects from Two Different Courses 646 & project: Hardware implementation of Post-Quantum Cryptographic Algorithms 545 project can be extended into an 646 project by adding additional ciphers, architectures, key sizes, modes of operation, etc. 646 & 797/798/799/ project can be extended into a Research Project, Master s Thesis, PhD Thesis 15

16 After completing 18 credit hours of graduate work, a student 1. Chooses a level course to fulfill his/her 797 requirement Scholarly Paper (1) 2. Registers for 797 via Patriotweb by first requesting an override from the Academic Programs Coordinator, Ms. Patricia Sahs (psahs@gmu.edu), before the last day to add classes 3. Chooses a project topic in consultation with the instructor 4. Submits a single 797 Entry Form, signed by the instructor and the student, to the Main Office by the end of the 5 th week of classes in a given semester 5. Works on a project individually 6. Submits written report and gives short oral presentation 7. Asks the instructor to fill and sign the 797 Evaluation Form, and submits this form to the main Office 31 Scholarly Paper (2) The paper and presentation must follow accepted standards for English technical merit literature analysis citation of references GMU Honor Code In order to pass, the student cannot receive an Unacceptable score for any evaluated outcome Students are encouraged to sign for 797 in their last but one semester which guarantees at least two attempts 16

17 International Students Olympiad in Cryptography NSUCRYPTO First Round: October 22, 2017 Duration: 4 hrs 30 min Section B: for University students and professionals Second Round: October 23-30, 2017 Team Round Solving hard research and programming problems of crypto Bonus points for the participation and solving the competition problems! NSUCRYPTO

18 Typical course difficulty time difficulty This course time Follow-up courses Cryptography and Computer Network Security 646 Advanced Applied Cryptography Digital System 746 Design with VHDL 545 Cryptographic Engineering 747 Software/Hardware Codesign 615 Computer Arithmetic

19 Cryptography and Computer Network Security Advanced Applied Cryptography Modular integer arithmetic Operations in the Galois Fields GF(2 n ) Historical ciphers Classical encryption (DES, AES, cipher modes) Public key encryption (RSA, Diffie-Hellman) Hash functions and MACs Digital signatures Public key certificates Secure Internet Protocols - PGP and S-MIME - www: SSL/TLS Cryptographic standards AES Stream ciphers Elliptic curve cryptosystems Random number generators Smart cards Attacks against implementations (timing, power, fault analysis) Efficient and secure implementations of cryptography Security in various kinds of networks (IPSec, wireless) Zero-knowledge identification schemes 19