Security Engineering Research Group

INMIC 2007 — Give a second thought

Salam Every one,

I talked to nauman about the possibility to send our papers to INMIC 2007. Please comment, if it possible. If Not, why not?

We both are convinced that, INMIC 2007 conference will  have far better impact than ISB one regarding better audience, more international contacts and …..

If you are worried about paper acceptance in INIMC, i think so, quality of the papers should be improved, rather than choosing a … conference.

Please Comment!

Functional Programming

http://cl-informatik.uibk.ac.at/teaching/ss07/fp/course_material.php

Nauman: Check, if this is is of our future use.

ABSTRACT ACCEPTANCE

AOA all guys

i have received an abstract acceptance main from ICET 2007 and they have asked me to send the full paper.  wat abt the all other guys….this is my update on paper?
i am working on paper and could not  do work on paper for 2 day due to family reasons. and INSHALLAH will start full work again from tomorrow.

need updates from other members.

amin.

HOL.

HOL stands for Higher oder logic in general. In Pakistan, however, HOL has a different meaning. Many people use it with other words like “Shadee HOL”, “Main HOL”.

The people who developed Isabelle based on HOL, did not notice this novel feature of HOL, which is already present in Pakistan from quite a long time. The tradition dates back to when people started to show off their money on the “Shadee HOL”.

one may wonder what is the relationship between HOL and “Shadee HOL”. In fact, there is a relationship but domestic one. Now a days, some times, when i dwell into the details of my HOL, i find my self very alone there. I think that i am in desperate need of the event “Shadee HOL”. A person, to whom i can show my life theories, Lemmas, goals and sub-goals. In particular, In the evening, some body is waiting for me, and calls me again n again, and ask me, “jee, kub aa rahay hain aap, ab aa bi jahain, ammi kay ghar jana hay”, and i leave Isabelle, his HOL and every one out there and leave the office suddenly.

But the theory of “Shadee HOL”, can not be proved only by simplistic rules, given by Isabelle. It requires much more efforts. Some friends experienced it, some are ready to practice it. Hopefully, it remains HOL and not “JanJaL”

May Allah helps us to have successful “HOL”, past and future.

Some new selinux ideas

I have come across some talks about enabling selinux to achieve resource utilization using rbac. This sounds as a good research area. Do we have anyone to handle this.

Meeting on Monday

AoA
everybody is hereby informed that we have a meeting with Mr. mm tomorrow at 10am to 11am at my office in ims junior campus inshallah. so noman and shaz and possibly amin should join us at the meeting…
Thanks.
Mr. TaT

IMA as a standalone service

The following paras are from the linux mailing list which is a mail sent by ibm ima team. They are working out this userspace ima thingy. I am still not satisfied. Mr. TAT can you plz verify it? I can email u the patches and the related mails as well. 

This is a request for comments for a subset of the original integrity
patches. By submitting this subset of the original patches, we hope to
simplify its review and ultimately ease its inclusion into the kernel.
For this reason, neither EVM nor SLIM are included in this patchset.
This patchset contains: Linux Integrity Module(LIM), Integrity
Measurement Architecture (IMA), and patches to the TPM driver. The LIM
patch defines 3 integrity API calls, 7 integrity hooks, placement of
the hooks, and a dummy integrity service provider. There are very minor
changes from the previous release.  The IMA patch is now an independent
integrity service provider, which provides support for a subset of the
integrity API calls.

IBAC, a sample LSM module, which helps clarify the interaction between
LSM and LIM modules, will be posted separately to the LSM mailing list.
In addition, we are working on an SELinux integrity patch to take
advantage of the integrity services, in a similar way to the IBAC
example.

Patch 1/3 integrity: Linux Integrity Module (LIM)
Patch 2/3 integrity: IMA as a stand alone integrity service provider
Patch 3/3 integrity: TPM internal kernel interface

Mimi Zohar
Dave Safford

MDA/MDE

Mr. MM: I need some information about the Model Driven Engineering/Architecture. Only on the user-learning level. Not research level. Can you point out some books/links/resources for that? Again, I’m not looking for advanced stuff. Just on the level of under/grad teaching level.

Future Directions (and some extra stuff)

A.A. everyone.

Mr. MM: I was talking to Shahbaz yesterday and we talked about what research area I’m planning to pursue. I told him that I’ve been working with different sorts of things (web search etc) because I needed some publications. Now that I have some publications, I need to pick a single area and start working on that.

I have decided to pursue only Isabelle and the original goal of verification of security protocols. Of course, this is currently open to discussion but I talked to Mr. T yesterday too and he said he was very interested in the Needham Shroeder protocol verification given in Isabelle tutorial. I think I can cope with this protocol verification now and it would be better if I can get some hands-on experience.

Here’s what I think I’ll do. I’ll start with the protocol case study in the tutorial: NS protocol. Then, if that goes well, I’ll start with the verification of Kerberos V4 that’s available in AFP. That should be a complex enough case study and after that, we can hopefully start with some sort of verification of our own. Of course, in that I’ll need some expertise in the protocol side from one of you guys.

The reason for posting this here: First, the blog was getting too much like a news board and much less like a research blog. Secondly, I would like to take comments from you guys regarding (a) your interest in this research area of security protocol verification and (b) how you can contribute in this.

I plan on starting on NS protocol as soon as I finish writing the UML Spec paper inshallah. So, comments are expected and indeed welcome.

Troubleshoot network problems via network analysis or sniffing

AOA

For Mr.TT

sir g i think u were looking for this kind of sniffing you told me on day we last met.

here  goes the link…

http://ct.techrepublic.com.com/clicks?t=39211549-a4acee59e60b2ede1d9ae2fca3986a14-bf&s=5&fs=0

amin.