Wave Systems Corp. (fka WAVXQ)

[Countryboy]

SKDMARCS.

October 15, 2004 Seminar
Duty, Honor, Country, and Security:
What's Going on at West Point in Information Assurance
The Information Assurance Research center of gravity at West Point is in the Information Technology and Operations Center (ITOC), which is housed in the Department of Electrical Engineering and Computer Science (EECS). Much of the research is funded by the National Security Agency (NSA) under the direction of the NSA Visiting Professor, Dr. Aaron J. Ferguson, and the ITOC Director, MAJ(P) Ronald Dodge. All project teams include cadets. Projects that will be discussed include the PKI-XML Allied Coalition Information System (ACIS); the XML Commercial Digital Signature Testing, Analysis Tool (XSTATIC); Web Distributed Authoring and Versioning (WebDAV), Secure Content Dissemination Analysis and Retrieval Computer System (SKDMARCS), and the West Point Carronade.

PKI-XML ACIS is an identity management system for cross-security domain information sharing. This prototype used PKI (digital signatures) to bind meta-tags to XML documents.

XSTATIC is a XML Digital Signature benchmarking tool that will allow XML application developers to test commercial XML digital signature tools for compliance with the XML Digital Signature Standard. A compliance grid will allow DoD Information Technology decision-makers to make informed public-key technology integration decisions.

The WebDAV team will design and build a prototype network that will allow the research team to evaluate he various WebDAV features and inherent security risks. WebDAV is the IETF standard mechanism for distributed authoring and versioning in collaborative environments. Although widely implemented in DoD, a detailed security analysis of this mechanism has not been performed, leaving many DOD servers vulnerable to attack.

SKDMARCS is a Constructive Key Management-based technology used in conjunction with PKI that will facilitate development of a smart card-enabled content dissemination system. This system that will allow members in allied-coalition enterprise environments to access information based on role and "cneed-to-know". Cadets will write smart card reader "trustlets" (written in C) that will allow smart card readers to authenticate multiple smartcards/tokens into the enterprise.

The West Point Carronade was an email security aware exercise conducted at West Point. The results will surprise you!

Speaker:
Dr. Aaron Ferguson, Department of Defense and West Point US
Military Academy.
The meeting took place in room 8005 of the DePaul Center , in the Loop Campus, 6.00 pm.
http://cinsc.cti.depaul.edu/Seminar.html