Department logo
iSec Logo
Main
People
Research Publications
Classes

Research Areas

  • Anonymous Communications
    Traffic analysis can expose a great deal about sensitive relationships; anonymous communications system are a promising technology to stop this kind of information leakage. We focus on ways to stop long-term attacks against these systems, as well as the application of anonymity to wireless and ad-hoc networks.

  • Privacy-Preserving Data Mining
    Data mining extracts knowledge to support a variety of domains--marketing, weather forecasting, medical diagnosis, and national security--but it is still a challenge to mine certain kinds of data without violating the data owners' privacy. How to mine patients' private data, for example, is an ongoing problem in healthcare applications. The sticking point is how to protect privacy while preserving the usefulness of data mining results. Much research is under way to address obstacles, but practical privacy-preserving data mining systems are largely in the research and prototyping stages. Our goal in investigating privacy preservation issues is to take a systemic view of architectural requirements and design principles and explore possible solutions that would lead to guidelines for building practical privacy-preserving data mining systems.

  • Security in sensor networks
    Wireless sensor networks have great potential, but they can be challenging to secure due to resource constraints and node compromise. Major topics include mechanisms for fundamental security protocols (e.g., key management and broadcast authentication), protection of critical sensor network services (e.g., routing, data management, localization, time synchronization, clustering), and the detection of replicant nodes.

  • Intrusion and Malware Detection
    Hackers and malware writers pose a continuing threat to systems and networks. Many attacks can only be stopped by denying legitimate traffic, but attackers can be contained and then thwarted if they are detected early enough. We are investigating stepping-stone detection, a promising method of detecting hackers, and the propogation of worms and viruses, to understand how to detect new malware when there are no signatures for it.
  • Incentives in Security and Privacy
    Most security problems are posed as black and white issues, but many times, models based on incentives are more approprate. In this work, we find areas in which incentives can be added to systems to enhance their security properties, and we use game-theoretic analysis to understand how incentives play out in existing systems. Research includes incentives for worm detection, anonymous communications, and digitial rights management.