Security Projects

The following security projects are things that I am interested in. Some of them I'm actually working on too.
  • EMERALD - EMERALD is the latest in a series of intrusion detection system projects put together by CSL. Event analysis is a tricky task, and a fascinating puzzle to try to put together.
  • Distributed.Net - What if you took all the idle time on all the computers on the net and used it. You could do a lot. Distributed.net is applying this theory (legitimately of course. Only volunteer computers are used.)
  • IPSec - This is a set of standards that are being developed to provide network security at the IP Layer. I've written a little primer on this and perhaps I'll put that here some time.
  • The Common Criteria - When someone says their system is secure, what do they mean? Different people need systems to be secure in different ways. The Common Criteria is an attempt to come up with profiles that define a "common" definition of what different types of security levels mean.
Of course, it is true I am interested in other areas as well. Rivest's Chaffing paper was interesting. I-buttons look neat as well. But the list could go on forever. I'll stop here for now.

This page maintained by Rachel Rosencrantz, rachelr@pobox.com