{"590949":{"#nid":"590949","#data":{"type":"event","title":"PhD Proposal by Yeongjin Jang","body":[{"value":"\u003Cp\u003ETitle: Building Trust in the User I\/O in Computer Systems\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\r\n\r\n\u003Cp\u003EYeongjin Jang\u003C\/p\u003E\r\n\r\n\u003Cp\u003ESchool of Computer Science\u003C\/p\u003E\r\n\r\n\u003Cp\u003ECollege of Computing\u003C\/p\u003E\r\n\r\n\u003Cp\u003EGeorgia Institute of Technology\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\r\n\r\n\u003Cp\u003EDate: Monday, May 1st, 2017\u003C\/p\u003E\r\n\r\n\u003Cp\u003ETime: 12:00pm - 2:00pm\u003C\/p\u003E\r\n\r\n\u003Cp\u003ELocation: Klaus 3126\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\r\n\r\n\u003Cp\u003ECommittee\u003C\/p\u003E\r\n\r\n\u003Cp\u003E--------------------\u003C\/p\u003E\r\n\r\n\u003Cp\u003EDr. Wenke Lee (Advisor), School of Computer Science, Georgia Institute of Technology\u003C\/p\u003E\r\n\r\n\u003Cp\u003EDr. Taesoo Kim (co-advisor), School of Computer Science, Georgia Institute of Technology\u003C\/p\u003E\r\n\r\n\u003Cp\u003EDr. Mustaque Ahamad, School of Computer Science, Georgia Institute of Technology\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\r\n\r\n\u003Cp\u003EAbstract\u003C\/p\u003E\r\n\r\n\u003Cp\u003E--------------------\u003C\/p\u003E\r\n\r\n\u003Cp\u003EUser input plays an important role in computer security because it\u003C\/p\u003E\r\n\r\n\u003Cp\u003Ecan control system behavior and make security decisions in the system.\u003C\/p\u003E\r\n\r\n\u003Cp\u003ESystem output to users, or user output, is also important because\u003C\/p\u003E\r\n\r\n\u003Cp\u003Eit often contains security-critical information that must be protected\u003C\/p\u003E\r\n\r\n\u003Cp\u003Ein terms of integrity and confidentiality, such as passwords and user\u0026#39;s\u003C\/p\u003E\r\n\r\n\u003Cp\u003Eprivate data. Despite the importance of user input and output (I\/O),\u003C\/p\u003E\r\n\r\n\u003Cp\u003Emodern computer systems often fail to provide basic security guarantees\u003C\/p\u003E\r\n\r\n\u003Cp\u003Eon them, which has resulted in serious security breaches.\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\r\n\r\n\u003Cp\u003EMy dissertation research aims to build trust in the user I\/O in computer\u003C\/p\u003E\r\n\r\n\u003Cp\u003Esystems and keep systems secure by blocking attack pathways. To this end,\u003C\/p\u003E\r\n\r\n\u003Cp\u003EI analyze user I\/O path on popular platforms including desktop operating\u003C\/p\u003E\r\n\r\n\u003Cp\u003Esystems, mobile operating systems, and trusted execution environments\u003C\/p\u003E\r\n\r\n\u003Cp\u003Esuch as Intel SGX, and then develop systems that guarantee three key\u003C\/p\u003E\r\n\r\n\u003Cp\u003Esecurity properties of user I\/O: integrity, confidentiality, and authenticity.\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\r\n\r\n\u003Cp\u003EFirst, Gyrus addresses the integrity of user input by matching the user\u0026#39;s\u003C\/p\u003E\r\n\r\n\u003Cp\u003Eoriginal input with the content of outgoing network traffic and authorizing\u003C\/p\u003E\r\n\r\n\u003Cp\u003Euser-intended network transactions. Second, M-Aegis addresses the\u003C\/p\u003E\r\n\r\n\u003Cp\u003Econfidentiality of user I\/O by implementing an encryption layer on top of\u003C\/p\u003E\r\n\r\n\u003Cp\u003Euser interface layer that provides user-to-user encryption. Third,\u003C\/p\u003E\r\n\r\n\u003Cp\u003Ethe A11y Attack addresses the importance of verifying user I\/O authenticity\u003C\/p\u003E\r\n\r\n\u003Cp\u003Eby demonstrating twelve new attacks, which stem from missing proper security\u003C\/p\u003E\r\n\r\n\u003Cp\u003Echecks to verify input sources and output destinations on alternative user\u003C\/p\u003E\r\n\r\n\u003Cp\u003EI\/O paths in operating systems.\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\r\n\r\n\u003Cp\u003EFinally, to establish trust in user I\/O, I propose a system called SGX-USB,\u003C\/p\u003E\r\n\r\n\u003Cp\u003Ewhich combines three security properties to ensure the assurance of user I\/O.\u003C\/p\u003E\r\n\r\n\u003Cp\u003ESGX-USB establishes a trusted communication channel between the USB\u003C\/p\u003E\r\n\r\n\u003Cp\u003Econtroller and an enclave instance of Intel SGX. The system supports common\u003C\/p\u003E\r\n\r\n\u003Cp\u003Euser input devices such as a keyboard and a mouse over the trusted channel,\u003C\/p\u003E\r\n\r\n\u003Cp\u003Ewhich guarantees the assurance of user input. Having assurance in user I\/O\u003C\/p\u003E\r\n\r\n\u003Cp\u003Eallows the computer system to securely handle commands and data from\u003C\/p\u003E\r\n\r\n\u003Cp\u003Ethe user and eliminate attacks to I\/O paths.\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u003Cbr \/\u003E\r\n\u0026nbsp;\u003C\/p\u003E\r\n","summary":null,"format":"limited_html"}],"field_subtitle":"","field_summary":"","field_summary_sentence":[{"value":"Building Trust in the User I\/O in Computer Systems"}],"uid":"27707","created_gmt":"2017-04-26 10:47:37","changed_gmt":"2017-04-26 10:47:37","author":"Tatianna Richardson","boilerplate_text":"","field_publication":"","field_article_url":"","field_event_time":{"event_time_start":"2017-05-01T13:00:00-04:00","event_time_end":"2017-05-01T15:00:00-04:00","event_time_end_last":"2017-05-01T15:00:00-04:00","gmt_time_start":"2017-05-01 17:00:00","gmt_time_end":"2017-05-01 19:00:00","gmt_time_end_last":"2017-05-01 19:00:00","rrule":null,"timezone":"America\/New_York"},"extras":[],"groups":[{"id":"221981","name":"Graduate Studies"}],"categories":[],"keywords":[{"id":"102851","name":"Phd proposal"}],"core_research_areas":[],"news_room_topics":[],"event_categories":[{"id":"1788","name":"Other\/Miscellaneous"}],"invited_audience":[{"id":"78761","name":"Faculty\/Staff"},{"id":"78771","name":"Public"},{"id":"78751","name":"Undergraduate students"}],"affiliations":[],"classification":[],"areas_of_expertise":[],"news_and_recent_appearances":[],"phone":[],"contact":[],"email":[],"slides":[],"orientation":[],"userdata":""}}}