CAREER: Computational number theory, cryptography, and computer security

职业：计算数论、密码学和计算机安全

• 批准号: 9983950
• 负责人: Daniel Bernstein
• 金额: $ 24.29万
• 依托单位: University of Illinois at Chicago
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2000
• 资助国家: 美国
• 起止时间: 2000-09-01 至 2005-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=9983950&HistoricalAwards=false
• 关键词: CAREER; Computational; number; theory; cryptography

Internet attackers gain access to computers in two ways. The first wayis by monitoring and imitating the Internet activities of an authorizeduser. There are well-known cryptographic algorithms that protect againsteavesdroppers, but today's cryptographic software is too slow to beuniversally deployed. The second way is by locating and exploiting bugsin communications software. The security community has been working foryears to find these bugs before the attackers do, but programmers areadding bugs to security-critical software faster than security expertscan fix them.This CAREER award project spans five areas: (1)cryptographic algorithms fast enough to be used for all Internetcommunications; (2) cryptographic protocols to protect specific Internetservices against espionage and sabotage; (3) educational tools to helpprogrammers learn how to write correct software; (4) tools to reduce theamount of software in which bugs can produce security problems; (5)secure replacements for widely used Internet servers that are habituallyplagued by security problems.

互联网攻击者通过两种方式获得对计算机的访问。第一种方式是通过监视和模仿授权用户的互联网活动。有一些众所周知的密码算法可以防止窃听者，但今天的密码软件速度太慢，无法普遍部署。第二种方法是定位和利用通信软件中的漏洞。安全界多年来一直在努力在攻击者之前发现这些漏洞，但程序员在安全关键软件中添加漏洞的速度快于安全专家修复它们的速度。这个职业奖项项目涵盖五个领域：(1)足够快的密码算法，足以用于所有互联网通信；(2)保护特定互联网服务免受间谍和破坏的密码协议；(3)帮助程序员学习如何编写正确软件的教育工具；(4)减少漏洞可能产生安全问题的软件数量的工具；(5)安全地替换经常受到安全问题困扰的广泛使用的互联网服务器。