Security Engineering Research Group

“News” Section Needed

I pointed out some where in this blog about SELinux news website, which contains latest development. Definitely, there are other websites too, that features the latest updates/future plans of their softwares. I think so, news category is also needed for our blog so that every one can make a pointer to those websites too.

Secondly, weekly meetings were also highlighted some where in my emails, but till now, we have not realized this idea too.

Best,
MM Alam

CRBAC Literature

For Mr. MM: I’ve gone through the CRBAC journal paper you sent me. It’s huge. It has so many concepts that it’s difficult to grasp them all in one go. I understand the architecture of the model along with the role of constraints in it. I’ll go through it again along with the other papers and when we discuss the future work, I can concentrate on the part which is relevant to that.

Member details

Now that everyone’s seen the need for a member specialization area, I would suggest you guys take a few minutes out of your time and post a bulletted list of your work. See here for an example.

Pussy cat and the babies Shit!

Yes thats true Mr. TAT’s office is full of cat shit and it smells very bad so we did not do any study today at his office. Asghar kaka was asked to remove the cats so that humans can continue to rule.

Tomorow at 07:30 am our session is decided and I hope everyone shows up on time including me!

We are going to have a TPM emulator presentation from Mr. TAT. An IMA presentation from me. And we are also going to discuss recluze’s paper on folksonomy which has been accepted in karachi for some conference.

We hope to communicate with Mr. MMA as well regarding something I don’t remember now. I hope the electricity is there and that the internet bandwith is fine. Tomorow is holiday so we are going to have good bandwidth if Mr. Nawaz is not downloading videos.

Updates…

AoA everybody…

Hope you all are fine and enjoying your good health with the grace of ALLMIGHTY… Shaz and everybody should know that i am working on the integration of the trusted computing and shibboleth protocol in broader sense… specifically on its application in the e-government scenarios… where attributes are exchanged without knowing the trusted state of the platform… i hav studeid the shibboleth architecture and i am having options how can i integrate both the platform validation in shibboleth attribute exchange…

About the BCS students: i have already given introductory documents about the areas we are working in, to the students so that they study and if they are intrested they can join us… but so far i hav seen one partial positive response from one student…. so i am trying to get the intrested students rather having students by force…

So currently me and shaz are working on the tc implementations i.e TPM Simulator, IMA, TRouSer etc… i am supposed to give a presentation to shaz today on TPM Simulator so m preparing that :)… see u later…

TC (Not Trusted Computing)
AH
Mr. T

Request for Targets

I was thinking that who is working on what. Definitely I can read the blogs but its not easy to figure out the whole thing clearly. I have seen nothing from Mr. TAT at the moment (although I am aware he is on to shiboleth and something about ssl). Mr. MMA and recluze are working on formal verification of security protocols using Z, zeta, Holz and Isabelle but am not clear whats between them. What protocol are they targeting and what formal verification tool are they using precisely. How are they going to use Z because its for specifications and not verification!

Amin has a genuine problem. He was working on Trusted Computing which I and Mr. TAT are also working on as a secondary topic.

We also have Asghar Khan but he is nowhere to be found yet. I think he might join us in future.

What about those BSC students? Anybody any idea?

I am working on SELinux IPSec SSL IMA TPM Emulator for leveraging labeled MAC ditributed communication. This includes remote attestaion and labeled communication as well as exchange of labels.

For nauman

AA,

How are you doing Nauman. Are you completed with the case studies given in the Z book?.

Let me know.

Best,
MA

Progress Part 2

I have configured opengrok and its too easy and too good. Have’nt yet generated the webpages but that won’t be a problem as I only have to install a serverlet server. I have decided to use jetty because of its simplicity. It works under apache. Opengrok is very fast and very useful. Useful  in a sense that we can cross reference and index any source code. LXR is only for linux kernel source indexer/navigator.

Now I am looking forward to install it on Mr. TAT’s system as well so he might as well benefit. I am also ready to write up a short tutorial on opengrok and its configuration for that website.

Work needs to be done on LXR for experiance as well because its giving me lots of problems! I think I wil ask for Mr. TAT’s expertise because it is suspected that its apache configuration thats bothering because I get perl script in my browser!

Progress

Today we installed a linux fc6 machine at Mr. T’s office. It is configured both for experiments and study/research/publishing requirements. Recluze promised to automate all the configuration steps because using the same machine for both purposes was not a good idea but as we are always in a aweak position so we had to cope with it. The system is expected to crash and/or get dirty with experimental work. He has been working fancy with it so I am not aware totally what the system has and how he’ll automate the configurations. We would like your comments with some explaination recluze.

We will start with tpm emulator and ima setup tomorow if Mr. T shows up. I have’nt called him yet. Later we will see if I can also adjust my selinux interfacing on the same system but I doubt it. I hope Mr. T can get me a system also. Mr. MMA sir can you let me have details regarding your findings regarding the interfacing of selinux and ima?

I am writing up the abstract that you asked for and in June there is an IEEE conference exactly with the same requirements so the time constraints and my interests fit in properly.

Good Source For Shahbaz

http://selinuxproject.org/page/Kernel_Development

Best,
MA