bk소프트웨어 사업단 세미나 안내입니다.관심 있으신분들의 많은 참여를 바랍니다.
Title: GAnGS: Gather, Authenticate ''n Group Securely
Speaker: Adrian Perrig, Associate Professor, Carnegie Mellon University
Date: Friday, Jan. 2, 10:00am~11:30am 2009
Place: ICP lecture room, Science library (과도관 6층 ICP 강의실)
Abstract:Establishing secure communication among a group of physicallycollocated people is a challenge. This problem can be reduced toestablishing authentic public keys among all the participants -- thesepublic keys then serve to establish a shared secret symmetric key forencryption and authentication of messages. Unfortunately, in mostreal-world settings, public key infrastructures (PKI) are uncommon anddistributing a secret in a public space is difficult. Thus, it is achallenge to exchange authentic public keys in a scalable, secure, andeasy to use fashion. We propose GAnGS, a protocol for the secure exchange of authenticatedinformation among a group of people. In contrast to prior work, GAnGSresists Group-in-the-Middle and Sybil attacks by malicious insiders,as well as infiltration attacks by malicious bystanders. GAnGS isdesigned to be robust to user errors, such as miscounting the numberof participants or incorrectly comparing checksums. We haveimplemented and evaluated GAnGS on Nokia N70 phones. The GAnGS systemis viable and achieves a good balance between scalability, security,and ease of use.
Bio:Adrian Perrig is an Associate Professor in Electrical and ComputerEngineering, Engineering and Public Policy, and Computer Science atCarnegie Mellon University. Adrian also serves as the technicaldirector for Carnegie Mellon''s Cybersecurity Laboratory (CyLab) andfor the iCast project. He earned his Ph.D. degree in ComputerScience from Carnegie Mellon University, and spent three years duringhis Ph.D. degree at University of California at Berkeley. He receivedhis B.Sc. degree in Computer Engineering from the Swiss FederalInstitute of Technology in Lausanne (EPFL). Adrian''s researchinterests revolve around building secure systems and include Internetsecurity, security for sensor networks and mobile applications, andtrusted computing. More information about his research is available on
Adrian''s web page.Adrian is a recipient of the NSF CAREER award in 2004, the IBM facultyfellowship in 2004 and 2005, and the Sloan research fellowship in 2006.