Manifest: Monday 13 November and Wednesday 15 November 2000

Assignments Due

Make sure to schedule a project team progress meeting with me by Wednesday. Check your email for details.

Wednesday: Guest Lecture - Gary McGraw on Smart Card Security

Gary McGraw is the Vice President of Corporate Technology at Cigital. Dr. McGraw co-authored both Java Security: Hostile Applets, Holes, & Antidotes (Wiley, 1996) and Securing Java: Getting down to business with mobile code (Wiley, 1999) with Prof. Ed Felten of Princeton. He holds a dual PhD in Cognitive Science and Computer Science from Indiana University and a BA in Philosophy from the University of Virginia.

Readings
Read before Monday 20 November:

• Stallings, Chapter 15.1: Intruders.
• Computer Immunology, Stephanie Forrest, Steven Hofmeyr and Anil Somayiji. Communications of the ACM, October 1997.

Links

• Cedilla Systems - Peter Lee's company trying to commercialize proof-carrying code
• George Necula's Proof Carrying Code page
• Gary McGraw's Home Page

Questions

• What is proof-carrying code?
• What are the advantages and disadvantages of proof-carrying code?
• How hard is it to prove interesting properties about programs?

University of Virginia Department of Computer Science CS 551: Security and Privacy on the Internet

David Evans evans@virginia.edu