Presentation Schedule and Due date

Each team will present their term project in class on April 24 and April 26 . (I will arrange the order.)

The term project report is due on April 27, Friday by 11am. Give a hard copy to me (ES 3.226) before the deadline. If I am not in my office, please slide your report under my door and send an email to me. You also can give the hard copy to us earlier if you prefer.

Don’t forget a BIG test will be held on May 1, 2012 at 1pm in class. I will tell you how to prepare this test.

Suggestions

The term project can be a literature survey of a selected topic or a design or implementation of something.

Please have 3 or 4 or 5 members in your team. All the members will get the same grade for the project.

Presentation: We do not have enough time to have all students give presentations. For 2 or 3-member teams, please designate one student to present. For 4-member or 5-member teams, please select one or two student to present.

Report: For two or three-member teams, your report should be at least 12 pages long, for four-member teams, at least 14 pages long and for five-member teams, at least 16 pages long. Each report should use single column format with 1.5 line spacing.

You should go to the course web page and find the IEEE link there and start to do literature search. A lot of information is available in the web. This is the beginning of any research.

Possible projects for the course:

Here I just list some possible projects for your considerations. You do not have to choose one of them. Actually I encourage you to come out your own project. You should read the recommendation reading and web sites listed in the textbook to search for the related information. You also can find some information from the course web page and the IEEE link and other links there. Literature search is the beginning of any research. You must learn how to do an extensive literature search.

The possible topics:

• The common methods of spyware, email spams. Study how to avoid them.
• Security issues in Cloud Computing, Network file systems.
• The study of intrusion detection system. Pick some example systems.
• Bluetooth security. Any tools to scan bluetooth or break it?
• Attacks on DNS and routers and how to protect them.
• Embedded System security. Security on Smart card? How to break it using side channel attacks, physical way?
• On line gaming? Security issues on any popular applications?
• Wireless security: attacks and protection. You can install any tools to exploit WEP (or even WPA), for example Backtrack 3.
• Study of Firewalls. You can look into some existing firewalls such as Linux Iptables.
• Security of P2P networks. Security of sensor networks.
• Stack overflow, buffer overflow, integer overflow/underflow, format-string vulnerabilities, and how to prevent them?
• Watermarking, Steganography. Try to put the secrecy into the wav, picture or video files?
• Quantum security. Do you really think you know what it is about?
• How to protect code confidentiality for defending piracy? How to make sure the integrity of codes so you know code has not been modified by any means?
• Database security, Web security, etc. SQL Injection.
• Cryptanalysis: study any methods and the complexity to break common cryptographic systems (such as DES, AES, Blowfish, RC5, RC4 RSA, ECC).
• The study of message authentication and hash functions: cryptanalysis, develop some new ones.
• The study of various anti-virus techniques.
• The study of security of mobile codes: proof-carrying codes, code signing, type checking, constrained execution, etc.
• Legal, privacy and ethical issues related to security.
• The issues related to administrating security: security planning, risk analysis, security policy.
• The applications and protocols of cryptography: you can design your own method f or specific applications. For example some existing ones such as Kerberos, X. 509, PGP, S/Mine.
• The issues on IP security.
• The issues on Web security.
• The issues on wireless security.
• The study of key distributions and managements.
• Case study of virus, warms, etc. and suggestion of protections. For example, how to prevent stack-overflow.
• The management issues for security. If you are an IT security manager, how do you develop an efficient and effective security policy.
• Watermarking study.
• New cryptosystems survey and study such as Quantum Cryptography.
• Security in Database, distributed systems.
• Implementation issue (in hardware and software) for security-related algorithms.
• Welcome any idea.

Revised by Edwin Sha - 2012.