CAREER: Security for handheld devices and the web environment

该项目的工作重点是计算机安全方面的研究和教育。这项研究工作旨在为互联网提供安全保障。特别是，该研究的重点是为网络服务器和无线手持设备提供安全。教育工作的目的是提高对计算机安全的认识，并培训本科和博士水平的计算机安全专家。本项目的研究内容包括以下主题：手持设备的安全性。手持设备(例如手机、PalmPilot、寻呼机、数码相机等)是一个增长迅速的市场，存在明显的安全担忧。该项目研究安全解决方案如何在低功耗、无线、手持环境中应用。例如，调查人员正在研究如何将低功率无线手持设备用于电子商务；如何对低功率手持设备进行加密和认证；以及其他相关问题。新的密码技术。新的互联网应用需要新的密码技术。在这个项目中，研究人员正在设计新的密码技术，用于认证流音频和流视频，以及保护用户匿名性的技术。此外，调查人员正在研究新的密码系统，以改善数字签名和加密的安全保证。其目标是为手持设备和智能卡开发高效的系统。可扩展的Web服务器安全性。当在负载较重的Web服务器上使用时，安全操作(如SSL)通常是性能瓶颈。随着Web的持续增长，提高服务器上的SSL性能将变得至关重要。该项目研究了使用两种技术提高SSL服务器性能的方法：批处理和离线预处理。调查人员还在开发保护网站内容完整性的机制。这项工作确保了黑客不能侵入网站并安装自己的内容。

The work conducted in this project focuses on both research and education in computer security. The research effort is geared towards providing security on the Internet. In particular, the research focuses on providing security for web servers and wireless handheld devices. The education effort is aimed at increasing awareness of computer security and training computer security experts at both the undergraduate and Ph.D. levels. The research conducted in this project covers the following topics: Security for handheld devices. Handheld devices (e.g. cell phones, PalmPilots, pagers, digital cameras, etc.) are a fast growing market with clear security concerns. The project studies how security solutions apply in a low power, wireless, handheld environment. For example, the investigators are studying how to use a low power wireless handheld for E-commerce; how to perform encryption and authentication on a low power handheld; and other related questions. New cryptographic techniques. New cryptographic techniques are required for new Internet applications. In this project the investigators are designing new cryptographic techniques for authenticating streamed audio and streamed video and techniques for preserving user anonymity. In addition, the investigators are studying new cryptographic systems for providing improved security guarantees for digital signatures and encryption. The goal is to develop efficient systems for both handhelds and smartcards. Scalable web server security. Security operations, such as SSL, are typically a performance bottleneck when used on a heavily loaded web server. As the web continues to grow it will become essential to improve SSL's performance on the server. The project studies methods for improving SSL's server performance using two techniques: batching and offline preprocessing. The investigators are also developing mechanisms to protect a web site's content integrity. This work ensures that hackers cannot break into a web site and install their own content.