Create an Interface for Adaptive Computer Security


Co-Sponsors Phyllis Schneck
Karsten Schwan
phyllis,schwan@cc.gatech.edu
CoC 216D
Area Adaptive Protocols

Problem
"Computer security" is frequently quoted as being one of today's "hot" issues. Scientists and mathematicians have developed technology to provide secure transactions over otherwise insecure media, such as the Internet. Why, then, is this strong security not widely used? Strong computer security is often avoided due to the significant application performance degradation that often results from the intensive computational overheads that accompany the strongest security algorithms. We are now developing ways to address this issue, and focus on the key issue: system resources. Our work includes the development of a protocol we call "Authenticast," which is designed to mitigate the inherent tradeoffs in providing adequate security when needed while sustaining acceptable performance. For example, one might hesitate to send a piece of secure video over an insecure medium such as the Internet. However, that same piece of video is of no use the the receiver, no matter how secure it is, if it cannot be received fast enough to be correctly viewed. One of the main contributions within "Authenticast" is the provision of adaptable security. We approach this as mainly a systems resource issue, and create a specification to fit user requirements. We dynamically modify several security parameters during application execution in order to provide the specific user/application the best fit of performance and security offered. These dynamic changes can be user-initiated (and communicated through a display) through a notion we call the "Security Thermostat."

Your task is to create a GUI for this thermostat. We would like it to resemble a standard thermostat as much as possible, but any creativity you would like to provide would be much appreciated. Further explanation and parameters that should be displayed and controlled will be explained to you in detail, should you choose to do this project. We have 2 goals in this project:

1) To use your work as our front-end so that our adaptive security provisions can be i) perceived visually and ii) demonstrated for grant sponsors.

2) To expose you to some of the ongoing work in computer security and other areas in the Systems group, and invite you to participate in this work -- or even to create a niche of your own.

Please note that the environment (e.g., Mosaic, X, XForms) in which you implement your GUI is your choice. However, we ask that the code be ready, upon delivery, for a smooth, modular integration into other code.

Deliverables: Your deliverables are the GUI and documentation on its use.

Evaluation
Evaluation is based on the quality and functionality of your GUI, and how well we can use your GUI based on your documentation.