Come hear more from Tech alum Dr. Phyllis Schneck who currently serves as the Deputy Under Secretary for Cybersecurity and Communications for the National Protection and Programs Directorate and chief cybersecurity official for the Department of Homeland Security.
]]>
Butler Lampson is a renowned computer scientist and the 1992 Turing Award winner for pioneering contributions that laid much of the foundation for today’s local area networks, client-server systems, laser printers, and WYSIWYG editors, such as Microsoft Word. He is a Technical Fellow at Microsoft Corporation and an Adjunct Professor of Computer Science and Electrical Engineering at MIT, actively working on security, privacy, and fault-tolerance, and kibitzing in systems, networking, and other areas.
Lampson was part of the faculty at University of California Berkeley, at the Computer Science Laboratory at Xerox PARC, and subsequently at Digital’s Systems Research Center before joining Microsoft. He has worked on computer architecture, local area networks, raster printers, page description languages, operating systems, remote procedure call, programming languages and their semantics, programming in the large, fault-tolerant computing, transaction processing, computer security, editors, and tablet computers. He was one of the designers of the SDS 940 time-sharing system, the Alto personal distributed computing system, the Xerox 9700 laser printer, two-phase commit protocols, the Autonet LAN, the SDSI/SPKI system for network security, the Microsoft Tablet PC software, the Microsoft Palladium high-assurance stack, and several programming languages.
He received an AB from Harvard University, a Ph.D. in EECS from the University of California at Berkeley, and honorary ScD’s from the Eidgenössische Technische Hochschule, Zurich and the University of Bologna. He holds a number of patents on networks, security, raster printing, and transaction processing. He is a member of the National Academy of Sciences and the National Academy of Engineering and a Fellow of the Association for Computing Machinery (ACM) and the American Academy of Arts and Sciences. He received the ACM Software Systems Award in 1984 for his work on the Alto, the IEEE Computer Pioneer award in 1996, the National Computer Systems Security Award in 1998, the IEEE von Neumann Medal in 2001, the Turing Award in 1992, and the National Academy of Engineering’s Draper Prize in 2004.
ABSTRACT
It’s time to change the way we think about computer security: instead of trying to prevent security breaches, we should focus on dealing with them after they happen. Today computer security depends on access control, and it’s been a failure. Real world security, by contrast, is mainly retroactive: the reason burglars don’t break into my house is that they are afraid of going to jail, and the financial system is secure mainly because almost any transaction can be undone.
There are many ways to make security retroactive:
Access control is still needed, but it can be much more coarse-grained, and therefore both more reliable and less intrusive. Authentication and auditing are the most important features. Retroactive security will not be perfect, but perfect security is not to be had, and it will be much better than what we have now.
]]>
Every year, security experts see new evolutions in cyberthreats to people, businesses and governments. Our adversaries know no boundaries. Cybersecurity is everyone's business.
The annual Summit features breakfast, lunch, keynote speeches, panel discussions, and more. All attendees at this full-day summit receive a copy of the 2017 Cyber Threats, Trends & Technologies Report.
9:30 a.m.
Keynote by Keynote by Annie Antón, chair, School of Interactive Computing; director, ThePrivacyPlace.org
10:00 a.m.
Meet the Students / Fall '16 Demo Day
11:00 a.m. - Noon
Panel: “Partners in Crisis? Legislation has yet to improve information sharing”
Evan Glover, senior counsel, GE Transportation
Paul Huesken, chief information assurance officer, Coca-Cola
Lee Kirschbaum, special agent, FBI
Jimmy Lummis, associate director, Georgia Tech Cyber Security
1:30 p.m.
Keynote by Tom Fanning, chairman, president & CEO, Southern Company
2:30 - 3:30 p.m.
TRACK A: “Ransomware: How to respond”
Chris Smoak, division chief, Cyber Technology & Information Security Lab, GTRI
Evan Downing, Ph.D. student, Georgia Tech
TRACK B: “The Cyber Policy Landscape at Home & Abroad”
Klaus Brisch, partner, DWF Germany
Rick Stewart, director of cyber security services, CGI Federal of Canada
Peter Swire, associate director of policy, Institute for Information Security & Privacy
3:30 - 4:30 p.m.
TRACK A: “Cryptocurrency: Current and future state of dark money”
Mark Ray, PwC, director, Cyber Investigations and Breach Response
SSA Chad Hunt, FBI Atlanta – Computer Intrusion Squad
Michael Farrell, chief research scientist, CTISL – GTRI
TRACK B: “Cybersecurity: Not just the IT department’s problem”
COL Alprentice Smith, Joint Functional Component Command Headquarters, U.S. Army Cyber Command
Leo Mark, associate dean, Georgia Tech Professional Education
Taesoo Kim, assistant professor, School of Computer Science
tara.labouff@iisp.gatech.edu, 404.769.5408
]]>The weekly Cybersecurity Lecture Series is a free, open-to-the-public lecture from a thought leader who is advancing the field of information security and privacy. Invited speakers include executives and researchers from private companies, government agencies, start-up incubators as well as Georgia Tech faculty and students presenting their research.
Held weekly each Friday at Noon through Dec. 2, lectures are open to all -- students, faculty, industry, government, or simply the curious. Students may register for credit under seminar course CS-8001-INF.
Complimentary lunch provided for registered guests. Please bring your own beverage.
Sign up to receive future lecture announcements.
Modern web services rob users of low-level control over cloud storage—a user’s single logical data set is scattered across multiple storage silos whose access controls are set by web services, not users. The consequence is that users lack the ultimate authority to determine how their data is shared with other web services.
In this talk, we introduce Sieve, a new platform which selectively (and securely) exposes user data to web services. Sieve has a user-centric storage model: each user uploads encrypted data to a single cloud store, and by default, only the user knows the decryption keys. Given this storage model, Sieve defines an infrastructure to support rich, legacy web applications. Using attribute-based encryption, Sieve allows users to define intuitively understandable access policies that are cryptographically enforceable. Using key homomorphism, Sieve can reencrypt user data on storage providers in situ, revoking decryption keys from web services without revealing new keys to the storage provider. Using secret sharing and two-factor authentication, Sieve protects cryptographic secrets against the loss of user devices like smartphones and laptops. The result is that users can enjoy rich, legacy web applications, while benefiting from cryptographically strong controls over which data a web service can access.
BIO
Frank Wang is a Ph.D. student at the Massachusetts Institute of Technology focusing on building secure systems. He is advised by Nickolai Zeldovich and James Mickens. He completed his undergraduate studies at Stanford University, focusing on applied cryptography. He runs the MIT security seminar, and he is also a member of Roughdraft Ventures, which provides small amounts of capital to early stage student startups. He is currently running a summer program for early stage security companies called Cybersecurity Factory. He has interned at the security teams at Google and Facebook as well as consulted for security companies, such as Qualys. When he is not busy worrying about your security, he enjoys going to art museums and being outdoors.
]]>
The Consulate General of France in Atlanta and the Georgia Institute of Technology will co-present the 7th Annual France-Atlanta, a series of French-American events centered on innovation, from October 12-22, 2016 in Atlanta, Georgia. Activities include a two-day scientific symposium about cybersecurity, co-hosted by the Institute for Information Security & Privacy and Georgia Tech Lorraine.
Vulnerability to cyberattacks, theft, and other threats is as much a personal concern as it is one of national and global security. Ensuring the secure and reliable exchange of information is a critical task and one that the scientific community has been engaged in since the rise of new technologies.
Cybersecurity: Transatlantic Innovation and Strategies is a free, two-day symposium that will enable leading scientists in this field to identify current challenges and to share the results of their research. French and American cybersecurity experts will have the opportunity to come together and discuss the development of new scientific partnerships between the United States and France.
Discussions will focus on privacy and data protection, cryptology and system security, formal methods for security, and the education and training of tomorrow’s cybersecurity scientists. In addition, industry leaders, representatives from innovative start-ups and policy researchers from both sides of the Atlantic will tackle current technology transfer and innovation challenges in this field during a roundtable discussion.
Pre-registration required. To register, click here.