 |
|
|
|
|
|
|
Abstract
|
With the explosive growth of the Internet, secure IP networking has
become ever more important. Recently we have seen various ways in
which the Internet is being abused. Examples are denial of service
(DOS) attacks, spam, and viruses. Part of the problem is that when the Internet was designed 25 years ago, nobody could forsee the growth and security was not one of the prime design parameters. For example, basic authentication is missing on most layers of the network
stack. One can trivially forge packet source addresses, e-mail source
addresses or web site names. Also, recent DOS attackes have shown that the current perimiter defense firewall model is insufficient.
We present a security model called "pervasive crypto" which will bring
strong authentication and encryption to all layers of the network. It
involves ideas such as secure email, secure dns, secure storage,
caller-ID for packets, and in-network DOS defense. For each of these,
we only describe the desired endstate, but also discuss non-disruptive
methodologies for reaching it.
|
|
Biography
|
| Wim Sweldens is the Computing Sciences Research Vice President at Bell Laboratories, Lucent Technologies . He received his PhD in Applied Mathematics in 1994 from the Katholieke Universiteit Leuven, Belgium, and has been with Lucent since 1995. His research is concerned with wavelets and multiscale analysis and its application in numerical analysis, signal processing, computer graphics, and wireless communications. He is the inventor of the lifting scheme, a new design and implementation technique for wavelets, which now is part of the JPEG2000 standard.
MIT's "Technology Review" recently chose him as one of 100 most promising young innovators. More recently he has been leading the computer science and software research activities in Bell Labs, which focuses on security, software quality, systems, and scientific computing.
|
|
|
|
|
