The library is a collection of some of my papers from graduate school at Carnegie Mellon University (August 2003-December 2004), as well as some random computer security, code, and other related materials. If you have any questions about this material, please contact me directly.
 
The library entries are available in the following formats: HTML Web Page JAVA Code Adobe Acrobat PDF
 
RSA Key Generation in JAVA

RSA: Everyone uses it - it's the underpinning of PGP encryption, digital signatures, SSL, you name it. Now learn how it works, even if the math thing isn't really your forte. I've put some toy code together for you, as well as a weak description of how RSA keys are generated. And yes, math links.

and

Enumerating and Reducing the Threat of Transnational Cyber Extortion Against Small and Medium Sized Businesses (a.k.a. The Carnegie Mellon Cyber Extortion Study)
Author: Gregory M. Bednarski

Abstract: Cyber extortion is a sophisticated threat, combining computer intrusion, theft, destruction, and modification of data, social engineering, and fear instilled in victims by threats from would-be extortionists. Without a clear understanding of this emerging crime, businesses cannot adequately defend themselves against it. Unfortunately, current existing research documents or statistics on this subject are in short supply, or non-existent. This paper examines cyber extortion not only as an old crime employing new methods, but as a fundamentally changed threat against small and medium sized organizations that rely on information systems in the conduct of their business. An information system actually becomes the object, the liability through which this type of crime is manifested against a target.

Study Proposal: Enumerating and Reducing the Threat of Transnational Cyber Extortion Against Small and Medium Sized Businesses
Author: Gregory M. Bednarski

Abstract: My proposal is twofold: First, I will generate non-biased anonymous data regarding extortion threats made against small and medium sized (less than 10,000 employees) organizations. The main method for accomplishing this will be via in-person interviews, plus the collection of a survey focused specifically on cyber-extortion experiences and readiness. Building on this information, I will create a list of guidelines organizations can implement to reduce their exposure to the threat of extortion.

Information Warfare: Understanding Network Threats through Honeypot Deployment
Authors: Gregory M. Bednarski, Jacob L. Branson

Abstract: The automation of exploit scripts and massive global scanning for vulnerabilities enable adversaries to compromise computer systems shortly after vulnerabilities become known. One way we can strengthen our defenses against these scans and exploit scripts is to learn from our adversaries by deploying and monitoring computer systems on a network that we expect to be broken into. These systems we deploy to be broken into are called Honeypots. 727Kb/23 pages

BO2K: Use, Function, and Security Considerations
Author: Gregory M. Bednarski

Although the developers of this ‘remote administration tool’ claim its existence as legitimate for network management, many major computer security firms classify it as a Trojan or virus, or more specifically a Remote Administration Trojan/Tool (R.A.T.). This paper takes an in-depth look at the creators, uses of, and behavior during execution of Back Oriface 2000. 290Kb/10 pages

Security Challenges in Wireless Network Communication
Authors: Gregory M. Bednarski, Janine Burbage, Keith Eich

Abstract: As with many emerging technologies, 802.11-based networks are being designed and installed with little or no consideration for security. This paper presents the reader with topics related to the booming wireless technology, specifically: an introduction to the basics, some methods used to secure networks, known vulnerabilities to security, and an overview of Carnegie Mellon University’s wireless network. 401Kb/27 pages

and

CAPPS II: Privacy Concerns
Author: Gregory M. Bednarski

The CAPPS II system (Computer Assisted Passenger Prescreening System) is being developed to identify potential high-risk passengers using data mining technology similar to the now defunct TIA project. But, we have to ask, does this also generate 4th Amendment concerns? Can it accomplish its mission? 15Kb/2 pages