CAREER: Security for handheld devices and the web environment

该项目的工作重点是计算机安全的研究和教育。这项研究旨在为互联网提供安全保障。特别是，该研究侧重于为web服务器和无线手持设备提供安全性。这项教育工作旨在提高人们对计算机安全的认识，并培养本科和博士级别的计算机安全专家。本项目的研究内容包括：手持设备的安全性。手持设备（如手机、掌上电脑、寻呼机、数码相机等）是一个快速增长的市场，具有明显的安全问题。该项目研究如何在低功耗、无线、手持环境中应用安全解决方案。例如，调查人员正在研究如何将低功耗无线手持设备用于电子商务；如何在低功耗手持设备上进行加密和身份验证；以及其他相关问题。新的密码技术。新的互联网应用需要新的加密技术。在这个项目中，研究人员正在设计新的加密技术，用于验证流音频和流视频，以及保护用户匿名的技术。此外，调查人员正在研究新的加密系统，为数字签名和加密提供更好的安全保障。目标是为手持设备和智能卡开发高效的系统。可扩展的web服务器安全性。安全操作（如SSL）在负载沉重的web服务器上使用时通常会成为性能瓶颈。随着网络的不断发展，提高SSL在服务器上的性能将变得至关重要。该项目研究了使用两种技术提高SSL服务器性能的方法：批处理和离线预处理。调查人员还在开发保护网站内容完整性的机制。这项工作确保了黑客无法闯入网站并安装他们自己的内容。

The work conducted in this project focuses on both research and education in computer security. The research effort is geared towards providing security on the Internet. In particular, the research focuses on providing security for web servers and wireless handheld devices. The education effort is aimed at increasing awareness of computer security and training computer security experts at both the undergraduate and Ph.D. levels. The research conducted in this project covers the following topics: Security for handheld devices. Handheld devices (e.g. cell phones, PalmPilots, pagers, digital cameras, etc.) are a fast growing market with clear security concerns. The project studies how security solutions apply in a low power, wireless, handheld environment. For example, the investigators are studying how to use a low power wireless handheld for E-commerce; how to perform encryption and authentication on a low power handheld; and other related questions. New cryptographic techniques. New cryptographic techniques are required for new Internet applications. In this project the investigators are designing new cryptographic techniques for authenticating streamed audio and streamed video and techniques for preserving user anonymity. In addition, the investigators are studying new cryptographic systems for providing improved security guarantees for digital signatures and encryption. The goal is to develop efficient systems for both handhelds and smartcards. Scalable web server security. Security operations, such as SSL, are typically a performance bottleneck when used on a heavily loaded web server. As the web continues to grow it will become essential to improve SSL's performance on the server. The project studies methods for improving SSL's server performance using two techniques: batching and offline preprocessing. The investigators are also developing mechanisms to protect a web site's content integrity. This work ensures that hackers cannot break into a web site and install their own content.