Where Cyber Security fits at RHUL

Size: px

Start display at page:

Download "Where Cyber Security fits at RHUL"

Elwin Ross
8 years ago
Views:

1 Cyber Security Research at Royal Holloway Information Security Group Activities and Research An Overview Prof. Keith Martin Where Cyber Security fits at RHUL

2 Information Security Group (ISG) Established in Full-time Academics with backgrounds in: Computer science Mathematics Electronic engineering Social science 6 Postdoctoral Research Assistants 40 Research Students 3 ISG objectives To conduct world class information security research To provide graduates with a broad understanding of all aspects of information security To be a source of information security expertise of industrial relevance To maintain close links with the information security industry

class information security research To provide graduates with a broad understanding of all aspects of information security To

3 Core Research Areas (our version) Access control Critical infrastructure protection Cryptography Identity management Network security Smartcards and security modules System security Socio-technical issues Minor interests in security issues associated with trusted computing and virtualization, economics of information security, covert channel analysis, malware analysis, risk management Mapping Staff to ACE Research Areas Research Area Cryptography, Key Management and Related Topics Information Risk Management Systems Engineering and Security Analysis Information Assurance Methodologies Operational Assurance Methodologies Research into the Security of Technologies and Products Science of Cyber Security Building Trusted and Trustworthy Systems Staff Blackburn, Cid, Martin, Mitchell, Murphy, Ng, Paterson Coles-Kemp Cavallaro, Crampton, Hancke, Markantonakis, Mayes, Paterson, Tomlinson, Walter Cavallaro, Coles-Kemp, Markantonakis, Mitchell, Pavlovic, Wolthusen Cavallaro, Wolthusen Mitchell, Paterson, Price Cid, Coles-Kemp, Pavlovic Coles-Kemp, Markantonakis, Pavlovic, Tomlinson, Wolthusen Bold entries indicate primary research area

Staff to ACE Research Areas Research Area Cryptography, Key Management and Related Topics Information Risk Management Systems Engineering and Security Analysis Information Assurance Methodologies

4 Current Research Projects Project Source Investigators Awarded Years International Technology Alliance Cyber Security Cartographies Analysis and Verification of Constrained Workflow Systems Cryptography: Bridging Theory & Practice Application of Security by Obscurity MoD/DoD Cid, Paterson EPSRC Cavallaro, Coles-Kemp, Hancke, Price, Tomlinson EPRSC Crampton, Cohen, Gutin EPSRC Paterson GCHQ Pavlovic Internet of Energy EU FP7/TSB Wolthusen PIs in bold These are the largest of our most recent grants; we have received around 50 awards in the last 6-7 years Lizzie s grant was awarded as part of the first ACE Research Institute call Kenny s grant is an EPSRC Leadership Fellowship International Technology Alliance (ITA) MoD/DoD-funded collaborative research project, universities and companies. IBM as prime contractor. Initial stage ran from 2006 to In current phase (BPP11): 6 projects in 2 Technical Areas: TA5: focus on the security, performance and control of hybrid coalition networks and distributed systems. TA6: focus on exploiting and managing network of data and information sources for effective understanding and decision making across coalition systems. Emphasis on UK-US, academic-industry and cross-ta collaborations. RHUL active in different projects. In initial stage led a project on security for Mobile Ad Hoc Networks. Now lead a task on cryptographic mechanisms for protecting the security of hybrid coalition networks.

5 EPRSC Crampton, Cohen, Gutin 2012 3 EPSRC Paterson 2010 5 GCHQ Pavlovic 2012 3 Internet of Energy EU FP7/TSB Wolthusen 2011 3 PIs in bold These are the largest of our most recent grants; we have

5 Cryptography: Bridging Theory and Practice EPSRC-funded Leadership Fellowship, , 1.24M PI + 2 post-docs + 2 PhD students Aims: To better understand how cryptography is used in practice To develop theory that is better aligned with practice To build a community of researchers in this area Research outputs to date include attacks on and provable security analysis of IPsec, SSL/TLS, SSH and EMV protocols ECRYPT is an EU funded initiative that aims to improve the state of the art in practice and theory of cryptology and to develop a joint infrastructure for the evaluation and benchmarking of cryptographic and watermarking schemes. CySeCa The increasing dependency on a cyber infrastructure results in a more complex security estate and blurred security boundaries The rapid rise in the use of personal mobile devices as business computers (BYOD) being an obvious example CySeCa explores how social and technical controls can be mapped and the effect of those maps on cyber security decision making. BYOD = bring-your-own-device

this area Research outputs to date include attacks on and provable security analysis of IPsec, SSL/TLS, SSH and EMV protocols ECRYPT is an EU funded initiative that aims to improve the state of the

6 Future plans and aspirations for the ACE-CSR scheme

The Research of the Information Security Group

The Research of the Information Security Group Jason Crampton Director of Research Information Security Group Royal Holloway, University of London 11th February 2013 1 Introduction Royal Holloway, University