Security Group

Past meeting presentations

The following list covers presentations given in Friday meetings of the Security Group during March 1999 to September 2006. Subsequent meetings are listed on talks@cam.

1999-03-12

Ulrich Lang: The new CORBA security specification (~20 min)

Markus Kuhn: Certified email delivery (~10 min).

1999-03-19

Virgil Gligor: Concrete Security Analysis of Symmetric Encryption Schemes (~20 min).

1999-03-26

Frank Stajano: Romantic Cryptography (~10 min).

1999-04-23

William Harris: Romantic Cryptography II (~10 min).

1999-07-23

Robert Watson: Power Analysis Lab Work: IEEE 488 and HP Oscilloscope Remote Control (~10 min).

1999-08-20

Jong-Hyeon Lee: The Jikzi Notary Service (~10 min).

1999-08-27

Ulrich Lang: A Quick Introduction to LDAP (~10 min).

1999-09-03

Andreas Westfeld: Principles of Secure Steganography (~30 min).

1999-09-17

Kai Rannenberg: Multilateral Security Technology – Concepts and Examples (~30 min).

1999-09-24

Andrew McDonald: StegFS: A Steganographic File System for Linux (~20 min).

1999-10-15

Jeff Yan (严建新): Technical protection of software secrets – an engineering approach in China (~20 min).

1999-10-22

no meeting due to 2nd year PhD talks

1999-11-19

Roberto Gorrieri: CVS – A Compiler for Verifying Security Protocols. University of Bologna. (~30 min).

1999-11-26

Ulrich Lang: Why CORBA Security Fails (~20 min).

Jean-François Blanchette: Standardization of Digital Signature Systems in Europe (~20 min).

1999-12-03

George Danezis: Experiences with implementing a Chaum-style mix network (~10 min).

1999-12-10

Stephen Early: MIMESIS: Operating system support for confined execution environments (~30 min).

2000-03-10

Jeff Yan: Smart brute-force attacks on passwords (~20 min).

2000-04-07

Markus Kuhn: Some Introductory Notes on Quantum Computing (~60 min).

2000-05-26

Markus Kuhn: Fair Sample Selection (~10 min).

2000-06-02

Marijke De Soete (Europay International): Security in an International Electronic Payment System (EMV) (~60 min).

2000-06-30

Adrian Perrig: Efficient authentication and signing of multicast streams over lossy channels (~60 min). [MSR seminar room]

2000-07-28

Markus Kuhn: ENTACARD Demystified (~0.5 ks).

2000-08-11

Carter Bancroft (Mount Sinai School of Medicine, US-NY): Hiding Messages in DNA Microdots (~60 min). Literature: Nature 399:534-535 (1999)

2000-09-08

Bharat Bhargava (Purdue University, US-IN): Fault Tolerant Authentication in Mobile Computing (~60 min).

2000-10-06

John Ioannidis (AT&T Research, Floorham Park, US-NJ): Distributed Denials of Service (~30 min).

2000-11-24

Mike Bond: Meet-in-the-middle attack on IBM 4758 Cryptoprocessor Keys (~20 min).

2000-12-01

Richard Clayton, George Danezis, Markus Kuhn: Love Means Never Having to Say Security (~20 min). We also invited John Surcombe, the developer of the romance.ucam.org dating website, on which this little penetration study was performed.

Markus Kuhn: Solution of the November 2000 GCHQ Challenge (~5 min).

Also John Ioannidis visits us today.

2000-12-08

Richard Clayton, George Danezis, Markus Kuhn: Cookies of Love – JavaScript-based deanonymisation techniques (~10 min).

2000-12-13

Richard Clayton, Markus Kuhn: Eminem is not dead - A quick note on URL syntax (~5 min).

George Danezis: Observations on keystroke timing entropy (~5 min).

No meeting on 22 and 29 Dec 2000.

2001-02-02

Matt Blaze and John Ioannidis visit.

2001-02-16

Richard Clayton, George Danezis: A note on all-or-nothing transforms (~15 min).

2001-04-20

Richard Clayton: Real World Patterns of Failure in Anonymity Systems (~25 min). Practice talk for IH'2001 presentation.

2001-05-03

Richard Clayton, George Danezis: Highlights from the 2001 Information Hiding Workshop in Pittsburgh (~25 min).

2001-07-13

Maarten Botterman (RAND Europe) and Andrew Rathmell (King's College London) visit and are interested in information technology policy research.

2001-07-20

Chris Walsh (one of the developers of the Starlight system mentioned in Ross' book): Development of an ITSEC E6 MLS Capability (~40 min).

2001-08-21

First meeting in the new William Gates Building

2001-08-31

Moritz Strasser (Univ. Freiburg): The Tele-Witness – An option for binding telecooperation. (~30 min, host: Kai Rannenberg).

2001-09-07

George Danezis: Traffic Analysis Results (~10 min).

2001-09-21

Simon Tatham (author of PuTTY) visits and has a few questions about implementation security of a good random number source for DSA under Windows. Literature: NIST DSA, NIST RNG Tests, Yarrow, Gutmann, RFC 1750.

2001-09-28

Sergei Skorobogatov: Semi-invasive attacks on SRAM (~20 min).

2001-10-19

Mike Bond: Practical covert-channel attack on a Windows content-protection product (~10 min).

Silas Brown: Bypassing firewalls via SYN-cookies. (~10 min).

2001-10-26

Richard Sharp and David Scott: Abstracting Application Level Web Security (~10 min).

2001-11-30

Andrei Serjantov: Anonymizing censorship resistant systems (~20 min). Richard Clayton: How 11 September affected Internet operation (~10 min).

No meetings on 21 and 28 Dec 2001 and 4 Jan 2002.

2002-02-08

Markus Kuhn: The EURion constellation – identifying a copying-machine disabling geometric pattern on banknotes (~10 min).

2002-03-22

Christian Hauknes: Attitudes towards privacy in conjunction with location-based services (~20 min).

2002-03-29

Kanta Matsuura: How Financial Tools Help Information Security (~30 min, hosted by Ross).

2002-04-05

Markus Kuhn: A practical construction for arbitrary domain encryption (~10 min).

2002-04-12

Poorvi Vora (HP labs, Corvallis, Oregon): Variable Privacy through Randomized Responses of Specified Probability. (~20 min, hosted by Ross)

Andrei Serjantov, George Danezis: Towards an information theoretic metric for anonymity (~20 min, practice talk for PET2002).

2002-04-26

Bill Caelli: Current Research at the Information Security Research Centre at the Queensland University of Technology : The WYSIWYS (What-You-See-is-What-You-Sign) Problem and Electronic Notaries (15 min, invited by Ross).

2002-06-16

George Danezis: Third-generation remailer architectures – resistance to tagging attacks (~20 min).

2002-06-21

Andrei Serjantov: Anonymity and onion routing (~30 min).

2002-07-12

Sergei Skorobogatov: New optical probing results (~10 min)

Richard Clayton: On IBM 4758 DES-key generation timing attacks (10 min).

2002-10-04

Andrei Serjantov: From a trickle to a flood: Active attacks on several mix types (~25 min). George Danezis, Richard Clayton: Chaffinch : Secrecy in the face of legal threats (~25 min). Both are practice talks for InfoHiding 2002.

2002-10-11

Reports from InfoHiding 2002
Frank J. Furrer: Our PKI experience.

2002-10-18

Security Seminar: Rebecca Mercuri

2002-11-07

John DeTreville (Microsoft Research, Redmond, Palladium team) visits.

2002-11-22

Tony Hutchings from the UK's National High-Tech Crime Unit (nhtcu) visits.

2002-11-29

Steven Murdoch: Security Enhanced Linux overview (20 min).

2003-01-17

14:00-16:00: Open House for prospective PhD applicants
16:00-17:00: Security Seminar talk by Russel Coker on SELinux in LT2, therefore no meeting.

2003-01-31

15:30-17:00: Laboratory for Communications Engineering open house (WGB, SN/SE corridor). Therefore group meeting moved to 16:30.

2003-02-07

Jeff Yan: Collusion prevention and detection – a case study using online Bridge (~20 min). Meeting this time in room GS15 (our normal room FW11 was already booked).

2003-02-14

Bruce Christianson: CryptoBridge – On the use of cryptographic protocols in tournament Bridge (~10 min).

2003-02-28

Meeting this time in room FC22 (our normal room FW11 has builders working in that day to improve the acoustics).

2003-03-14

Richard Clayton: Improving onion notation (~15 min, practice talk for PET'03)

2003-03-21

George Danezis: Mix networks with restricted routes (~20 min, practice talk for PET'03)

2003-03-28

no meeting today

2003-04-18

no meeting today

2003-05-16

no meeting today (because of FIPR meeting)

2003-05-23

Stephen Lewis: How much is stronger DRM worth? (20 min)
Zheng Li: Some thoughts on an authorization framework in a grid environment (10 min)

2003-06-06

Meeting this time in room GS15 (our normal room FW11 was already booked).

2003-06-13

Matt Miller: Watermarking with explicit channel simulations (30 min).
Peter Eckersley: Virtual Markets for Virtual Goods: an alternative approach to digital copyright (20 min).

2003-06-20

Kai Rannenberg may be around.

2003-10-10

Welcome of new research students

2003-10-17

Stephen Lewis talks about his project with kelkoo.

2003-10-24

Andrei Serjantov: Passive attack analysis for connection-based anonymity systems (ESORICS talk)

2003-11-14

Matthias Jacob (Princeton University): Attacking an obfuscated cipher by injecting faults (30 min)

2003-12-05

Mike Bond: Formal analysis of Security APIs

2003-12-12

Moritz Becker: Cassandra: a role-based policy language, applied to electronic health records (30 min)

2003-12-19

no meeting today

2003-12-26

no meeting today

2004-02-27

Glen Slade from StegoStik will talk about a stego file system product his company has developed

2004-03-12

Andrej Serjantov: Secure multiparty computation: Yao's millionaire's protocol

2004-03-19

Discussion topic: Anti-forgery extensions for SMTP: RMX, SPF, Microsoft, DMP.

2004-03-26

Andrej Serjantov: Universal reencryption.
Mike Bond: Report from my visit to MIT.
Stephen Lewis: The witty worm.

2004-04-09

no meeting today (bank holiday)

2004-04-23

Richard Clayton, Steve Bishop: TCP Reset attacks (20 min).

2004-05-07

Meeting starts today at 15:20 with practice talks for WEIS, to leave time for those who want to attent Rabin's talk.

2004-05-28

Meeting this time in room FW26 (our normal room FW11 was already booked). Several people are in Toronto (IHW/PET) anyway.

2004-06-04

Meeting this time in room GS15 (our normal room FW11 was already booked). Several people are in Cologne (MS) anyway.

2004-07-09

Helen Nissenbaum visits (may talk about her work on privacy)

2004-07-16

Ford Long Wong: A tutorial on password based public-key crypto (IEEE 1363.2)

2004-08-13

Tony Finch, Computing Service: Protecting against email forgery in Cambridge (60 min)

2004-08-20

Yue Li: Two-way authentication PAM module for Linux (Diploma project, 10 min).

2004-08-27

Martin Vuagnoux: CBC pad timing attack on SSL/TLS1.0 (30 min).

2004-09-24

Meeting this time in room FW26 (our normal room FW11 is used for lectureship interviews).

2004-10-15

No meeting today, due to a Security Seminar.

2004-11-26

George Danezis: Conference trip reports (CCS and WPES).

2004-12-24

no meeting today

2004-12-31

no meeting today

2005-01-07

no meeting today

2005-01-14

Steven Murdoch, Stephen Lewis, George Danezis: Report from CCC 2004.

2005-01-21

Markus Kuhn: Intel's new VMX extension (Vanderpool Technology).

2005-02-18

Tyler Moore: Foundations of social capital (30 min).

2005-02-25

Leendert van Doorn visits.
Suggested discussion paper: Arjen Lenstra: Further progress in hashing cryptanalysis

2005-05-20

Piotr Zieliński: Latency-optimal fault-tolerant replication (45 min).

2005-06-03

Joon Woong Kim visits (hosted by Frank Stajano).
Meeting this time in room FW09 (our normal room FW11 is used for exam preparations).

2005-06-10

Meeting this time in room FW26 (our normal room FW11 is used for a School of Technology Council meeting).

2005-07-15

Ben Medlock (NLP group) will talk on his work on anonymising free-form text.

2005-08-05

Marcus Granado: Attacking Windows Kerberos password security (20 min).

2005-08-19

Gerhard Hancke: An RFID distance bounding protocol. (25 min, practice talk for SecureComm 2005)

2005-10-07

Various conference reports (SECURECOMM, etc.)

2005-10-14

Marcus Granado: report from FOSAD?

2005-10-21

Security Seminar: Steve Belovin (LT2)

2005-10-28

Pedro Adão: How concrete is the Dolev-Yao model? (25 min)

2005-12-23

no meeting today

2005-12-30

no meeting today

2006-01-06

no meeting today

2006-02-10

Richard Clayton: Some notes on the Great Firewall of China (20 min)

2006-02-17

Feng Hao: Remarks on Kish's "Totally secure classical communication system utilising Johnson(-like) noise and Kirchoff's law" (20 min)
Meeting this time in room FW26 (our normal room FW11 is used for a "Group Project syndicate" meeting).

2006-03-03

Meeting this time in room FW26 (our normal room FW11 is used for a "Group Project syndicate" meeting).

2006-03-10

Tyler Moore: Collusion attacks on sensor networks (PERSEC practice talk) (20 min)

2006-03-24

Hao Feng: Anonymous veto protocol (20 min, practice talk for SPW)

2006-03-31

Jeff Yan: Enhancing signature-based collaborative spam detection

2006-04-21

JoonWoong Kim: Remark on HB protocol: RFID protocol using LPN. (15 min)

2006-06-16

Meeting this time in room FW26 (our normal room FW11 is used for a School of Technology Council meeting).

2006-09-08

Security Seminar in LT2

2006-09-15

Piotr Zieliński: Low-latency Atomic Broadcast in the presence of contention. (20 min, DISC'06 practice talk)

2006-09-22

Joseph Bonneau: Cache collision timing attacks against AES (20 min)

Subsequent talks

Since October 2006, Security Group meeting talks have been announced on the talks.cam website.