Progetti europei (per tesi di laurea col gruppo TORSEC)

Transcript

1 Progetti europei (per tesi di laurea col gruppo TORSEC) Prof. Antonio Lioy < polito.it > Prospettive tutti i progetti possono dare luogo a: dottorato di ricerca collaborazioni brevi (minimo 6 mesi) o lunghe (massimo 8 anni) con Assegno di Ricerca (esentasse, K /mese) contatti con industrie (eventuale soggiorno all estero dopo la tesi) 1

2 POSITIF title: Policy-based Security Tools and Framework EC FP6 IST project (n. IST ) area: = towards a global dependability and framework duration: 3 years ( ) coordinator: Prof. Antonio Lioy, Politecnico di Torino web = A HOLISTIC VIEW OF SECURITY or or THE CASE OF THE DISAPPEARING FIREWALL POSITIF: industrial developers BULL (Paris, FR) - leader: Alain Filee industrial network products (hw, sw, IPsec, SSL) and related management tools PRESECURE (DE) - leader: Klaus-Peter Kossakowski CSIRT, CERT, IDS, custom applications VODAFONE (IT) - leader: Mauro Costa of wireless networks and services (GSM, GPRS, UMTS, WI-FI) ICT department of the Italian Dept. of Justice (IT) - leader: F.Rolleri requirements, specification and test bed 2

3 POSITIF: academic partners Universidad de Murcia (ES) - leader: A.G.Skarmeta IPv6, smart-cards SIC (Graz, AT) - leader: P.Lipp Java, mobile code, IDS Politecnico di Torino (IT) - leader: A.Lioy of wired and wireless networks, PKI and secure applications, policy Wroclaw University of Technology (PL) - leader: J.Janyszek of high-speed networks St.Petersburg Institute for Informatics and Automation (RU) - leader: I.Kotenko math models for, attack trees POSITIF: test beds (TB1) academic high-speed environment: the MAN of Wroclaw, linking together the local supercomputing centre with several research institutes (local and remote, through the Polish academic network) (TB2) government high- environment: RUG, the internal geographic network of the Italian Department of Justice (TB3) wireless and wired network provider environment: a site of the Vodafone network, with public access via GPRS and WI-FI (immediately) and UMTS (before the end of the project) 3

4 policy system description checker configuration generator monitor technology data technology mapper deployment engine blocks admin policy PDL SDL system description system, network, admin T T errors threats and vulnerabilities DB internal & system DB errors change policy / architecture FAIL checker PASS configuration generator N 1 N 2 N 3 measurement of level generic rulesets 4

5 generic rulesets G 1 G 2 G 3 mapper M A M B M C SB maps (config. + deploy rules) block-specific rulesets B X B Y B Z deployment engine BDE BDE... BDE BDE = Block Deploy Engine SB X SB Y... SB Z SB = Security Blocks monitor monitoring data alarms Open Trusted Computing (Open_TC) sviluppare un Trusted Operating System, API e servizi di base basato su tecnologia hardware Trusted Platform Module (TPM) nuova generazione di processori x86 Intel ed AMD ( enhanced) tecnologia software microkernel (Fiasco) paravirtualizzazione (XEN) sistema operativo open-source (Linux) 5

6 sviluppare un Trusted OS Open_TC: obiettivi per proteggere applicazioni critiche dal malware (virus, troiani, ecc.), attacchi e malfuzionamenti concetto di trusted compartments alternativo a Microsoft Vista e successivi fornire una pluralità di scelta agli utenti open source specifiche di progetto e codice rilasciati pubblicamente Open_TC: consorzio progetto finanziato dall Unione Europea 23 partners europei università Politecnico di Torino, University of Cambridge, University of Dresda, TUG (Graz), TUM (Monaco), Royal Holloway (Londra),... laboratori di ricerca di grandi imprese IT HP Bristol, IBM Zurigo, AMD altre imprese Infineon (produttore TPM), SUSE,... piccole e medie imprese 6

7 Open_TC: riferimenti home page del progetto Open_TC specifiche del TPM (Trusted Computing Group) Intel LaGrande technology (LT) AMD Pacifica spx XEN virtual machine monitor Fiasco micro-kernel Deserec beyond : DEPENDABILITY failure = fault or attack reaction: 1. isolate 2. reconfigure 3. re-plan POLITO tasks: description of system/faults/attacks/policies evaluation of attacks generation of configurations 7

8 MEADOW & Open-gate distretto tecnologico Torino wireless STM, CRF, sicurezza di sistemi wireless usati per: domotica (incluso triple-play) ambiente automotive (V2V, V2I) Harrison & GAL-PMI uso della costellazione Galileo tempo e posizione molto precisa secure timestamping per vari scopi (documenti, pagamenti pedaggi, location-based authentication, ) sviluppo dei client e server necessari, sia su desktop sia su dispositivi embedded 8