Security Engineering Research Group

Dynamic Behavioral Attestation for Mobile Platforms

A new research and development project by SERG has just been approved by the National ICT R&D Fund. Details about the project can be seen on the project page at http://serg.imsciences.edu.pk/projects/dbamp

If you are in any way interested in participating in this project, do let us know. You can leave a comment here or contact one of the members of SERG through email.

Knoppix for Trusted Computing with TPM Manager

Knoppix for Trusted Computing with TPM Manager The latest release of the Linux distribution Knoppix now supports Trusted Computing with TPM (Trusted Platform Module). Therefore the new Knoppix 5.1.1 includes the latest release of Sirrix TPM Manager to provide complete GUI control over the TPM. Ruhr-University Bochum and Sirrix AG developed the TPM Manager, an open source application providing an easy to use graphical user interface to manage and configure a Trusted Platform Module…

Knoppix for Trusted Computing with TPM Manager | EMSCB:

amin.

The Practical Part Starts Now

As soon as I am over with Recluze, I am going to start working with IPSec and SELinux now that my literature survey is complete (I think so). Next I plan to get some help from MR. MMA to let me in on his findings regarding how to stack IMA on SELinux.

I personally think using TPM’s PCR will be another good thing instead of IMA because IMA has more then I need. But according to Mr. MMA its very problematic. Sir have you tried to copy the technique IMA uses to address PCR.

Side by side I am trying to understand the functionality of the Tresys’ Policy Management Server and the module support it provides for policies because I am looking forward to incorporate it for ditributed MAC implementation.

One thing that confuses me, this is for Mr TAT and Mr. MMA, can we skip DAC if we use MAC? Is MAC’s use enough for OS requirements?

If we could just have a few more people we could start adjusting applications for MAC implementations! Its also a good idea for BSc/BCS projects. We could also move towards LDAP NIS etc.

Progress Part 2

I have configured opengrok and its too easy and too good. Have’nt yet generated the webpages but that won’t be a problem as I only have to install a serverlet server. I have decided to use jetty because of its simplicity. It works under apache. Opengrok is very fast and very useful. Useful  in a sense that we can cross reference and index any source code. LXR is only for linux kernel source indexer/navigator.

Now I am looking forward to install it on Mr. TAT’s system as well so he might as well benefit. I am also ready to write up a short tutorial on opengrok and its configuration for that website.

Work needs to be done on LXR for experiance as well because its giving me lots of problems! I think I wil ask for Mr. TAT’s expertise because it is suspected that its apache configuration thats bothering because I get perl script in my browser!

Progress

Today we installed a linux fc6 machine at Mr. T’s office. It is configured both for experiments and study/research/publishing requirements. Recluze promised to automate all the configuration steps because using the same machine for both purposes was not a good idea but as we are always in a aweak position so we had to cope with it. The system is expected to crash and/or get dirty with experimental work. He has been working fancy with it so I am not aware totally what the system has and how he’ll automate the configurations. We would like your comments with some explaination recluze.

We will start with tpm emulator and ima setup tomorow if Mr. T shows up. I have’nt called him yet. Later we will see if I can also adjust my selinux interfacing on the same system but I doubt it. I hope Mr. T can get me a system also. Mr. MMA sir can you let me have details regarding your findings regarding the interfacing of selinux and ima?

I am writing up the abstract that you asked for and in June there is an IEEE conference exactly with the same requirements so the time constraints and my interests fit in properly.

LXR - Problem

Salams, The LXR instalation is completed. I studied 3 configuraions from different web sources. Everything went smoothly. The only problem is that apache is dumping silly faces with sourcecode. I dont know what to do there is no mailing list!

If sir, Mr. MMA you can get someone who has already gone through LXR installation so that I can discuss it with him/her. Is’nt there anybody at ur universtiy? Should I send u my conf files?

Categorization of information on blog

I’ve created the following categories for posts in blog:

1. Ideas (crude ideas)
2. Conferences
3. News
4. Publications
5. Achievements

If any changes are needed, please let me know. We need to keep these categories to a minimum. Also, we need to make sure we post in the correct category.

Please note that we’ll be having a separate page for stuff like Publications and research Area. These categories are just for posting blog entries.

Please post comments.