Many of today's network/computer security problems are due to defects in software implementations. Over the last several years, we have been working on a wide array of program transformation approaches to solve the software security problem. The overarching goal of these projects is to build a compiler that can transform arbitrary application programs in such a way that eliminates all known security vulnerabilities. Today this goal is largely achieved. In this talk, I will describe our efforts to detect/prevent attacks that exploit software bugs with and without access to the applications' source code, and how to isolate "attacker-friendly" applications to protect systems resources. Then I will present the concept of "repairable system" that includes techniques to automate attack signature and patch generation to stop fast-spreading worms, to quickly repair compromised information systems while minimizing collateral damage, and to efficiently maintain enough information for digital forensics.
Dr. Tzi-cker Chiueh is a Professor in the Computer Science Department of Stony Brook University, and the Chief Scientist of Rether Networks Inc. He received his B.S. in EE from National Taiwan University, M.S. in CS from Stanford University, and Ph.D. in CS from University of California at Berkeley in 1984, 1988, and 1992, respectively. He received an NSF CAREER award in 1995, an IEEE Hot Interconnect Best Paper award in 1999, a Long Island Software Award in 1997 and 2004, and a Best Paper Award from 2005 Annual Computer Security Applications Conference (ACSAC). Dr. Chiueh has published over 150 technical papers in refereed conferences and journals. His current research interest lies in wireless networking, computer security, and storage systems.
Sprecher: Dr. Tzi-cker Chiueh Wann: Montag, 03. Juli 2006, 14:00 Uhr (s.t.) Wo: HS3, Universität Klagenfurt