![]() |
![]() |
||
| The library is a collection of some of my papers from graduate school at Carnegie Mellon University (August 2003-December 2004), as well as some random computer security, code, and other related materials. If you have any questions about this material, please contact me directly. | |||
| The library entries are available in the following formats: | |||
| RSA Key Generation in JAVA | |||
RSA: Everyone uses it - it's the underpinning of PGP encryption, digital signatures, SSL, you name it. Now learn how it works, even if the math thing isn't really your forte. I've put some toy code together for you, as well as a weak description of how RSA keys are generated. And yes, math links. |
|||
| Enumerating and Reducing the Threat of Transnational Cyber Extortion Against Small and Medium Sized Businesses (a.k.a. The Carnegie Mellon Cyber Extortion Study) | |||
| Author: Gregory M. Bednarski | |||
Abstract: Cyber extortion is a sophisticated threat, combining computer intrusion, theft, destruction, and modification of data, social engineering, and fear instilled in victims by threats from would-be extortionists. Without a clear understanding of this emerging crime, businesses cannot adequately defend themselves against it. Unfortunately, current existing research documents or statistics on this subject are in short supply, or non-existent. This paper examines cyber extortion not only as an old crime employing new methods, but as a fundamentally changed threat against small and medium sized organizations that rely on information systems in the conduct of their business. An information system actually becomes the object, the liability through which this type of crime is manifested against a target. |
|||
| Study Proposal: Enumerating and Reducing the Threat of Transnational Cyber Extortion Against Small and Medium Sized Businesses | |||
| Author: Gregory M. Bednarski | |||
Abstract: My proposal is twofold: First, I will generate non-biased anonymous data regarding extortion threats made against small and medium sized (less than 10,000 employees) organizations. The main method for accomplishing this will be via in-person interviews, plus the collection of a survey focused specifically on cyber-extortion experiences and readiness. Building on this information, I will create a list of guidelines organizations can implement to reduce their exposure to the threat of extortion. |
|||
| Information Warfare: Understanding Network Threats through Honeypot Deployment | |||
| Authors: Gregory M. Bednarski, Jacob L. Branson | |||
Abstract: The automation of exploit scripts and massive global scanning for vulnerabilities enable adversaries to compromise computer systems shortly after vulnerabilities become known. One way we can strengthen our defenses against these scans and exploit scripts is to learn from our adversaries by deploying and monitoring computer systems on a network that we expect to be broken into. These systems we deploy to be broken into are called Honeypots. 727Kb/23 pages |
|||
| BO2K: Use, Function, and Security Considerations | |||
| Author: Gregory M. Bednarski | |||
Although the developers of this ‘remote administration tool’ claim its existence as legitimate for network management, many major computer security firms classify it as a Trojan or virus, or more specifically a Remote Administration Trojan/Tool (R.A.T.). This paper takes an in-depth look at the creators, uses of, and behavior during execution of Back Oriface 2000. 290Kb/10 pages |
|||
| Security Challenges in Wireless Network Communication | |||
| Authors: Gregory M. Bednarski, Janine Burbage, Keith Eich | |||
Abstract: As with many emerging technologies, 802.11-based networks are being designed and installed with little or no consideration for security. This paper presents the reader with topics related to the booming wireless technology, specifically: an introduction to the basics, some methods used to secure networks, known vulnerabilities to security, and an overview of Carnegie Mellon University’s wireless network. 401Kb/27 pages |
|||
| CAPPS II: Privacy Concerns | |||
| Author: Gregory M. Bednarski | |||
The CAPPS II system (Computer Assisted Passenger Prescreening System) is being developed to identify potential high-risk passengers using data mining technology similar to the now defunct TIA project. But, we have to ask, does this also generate 4th Amendment concerns? Can it accomplish its mission? 15Kb/2 pages |
|||