The Experts below are selected from a list of 435 Experts worldwide ranked by ideXlab platform

Rajat Moona - One of the best experts on this subject based on the ideXlab platform.

  • transCryptFS: A Trusted and Secure File System
    2012
    Co-Authors: Rajat Moona
    Abstract:

    For the reasons of flexibility and availability, the data may be stored in the cloud. However security of sensitive data and the reliability of access of data are two major issues that become immediate concern. Trust on the services for the secure upkeep of data, its regular maintenance and mechanisms for seamless access are other issues related to such organization of data.In this talk, we present an Encrypting File System based on GNU/Linux based servers which can be accessed through standard protocols such as NFS over unsecured networks. At the same time, the data stored in the servers is always in encrypted form. With only a suitable key management protocol and access control mechanisms, it is ensured that data is made available only to right entities. In the trusted domain for the Files, even the System administrators are not included which makes it highly robust yet providing mechanisms for routine administrative jobs such as backup, restoration, duplication and other similar functions on data.We also present a few more applications for this same File System, such as the case where data on a portable device such as laptop can be protected against loss of information in case of thefts etc.

  • ICUMT - TransCryptDFS: A secure distributed Encrypting File System
    International Congress on Ultra Modern Telecommunications and Control Systems, 2010
    Co-Authors: Dharmendra Modi, Rohit Kumar Agrawalla, Rajat Moona
    Abstract:

    Ubiquitous availability and need for transparent remote data access has increased significantly due to increased capacity and widespread availability of computer networks such as Internet. Remote access can be facilitated by storing data at the File server and accessing data as required using distributed File Systems (DFS's). This remote access exposes File server, client and data to various on-line and off-line attacks. Off-line attacks to data can be prevented by using Encrypting File System (EFS) such as TransCrypt [1], NCryptfs [2], Microsoft EFS [3], etc. On-line attacks can be handled by using dynamic security mechanisms such as mutual authentication and secure session establishment. In this paper, a secure DFS for providing access to data residing on a TransCrypt [1] server from a client machine is proposed. The proposed DFS is implemented, and can be used transparently and flexibly without requiring any change to the existing applications.

  • TransCryptDFS: A secure distributed Encrypting File System
    International Congress on Ultra Modern Telecommunications and Control Systems, 2010
    Co-Authors: Dharmendra Modi, Rohit Kumar Agrawalla, Rajat Moona
    Abstract:

    Ubiquitous availability and need for transparent remote data access has increased significantly due to increased capacity and widespread availability of computer networks such as Internet. Remote access can be facilitated by storing data at the File server and accessing data as required using distributed File Systems (DFS's). This remote access exposes File server, client and data to various on-line and off-line attacks. Off-line attacks to data can be prevented by using Encrypting File System (EFS) such as TransCrypt, NCryptfs, Microsoft EFS, etc. On-line attacks can be handled by using dynamic security mechanisms such as mutual authentication and secure session establishment. In this paper, a secure DFS for providing access to data residing on a TransCrypt server from a client machine is proposed. The proposed DFS is implemented, and can be used transparently and flexibly without requiring any change to the existing applications.

  • TransCrypt: an Enterprise Encrypting File System over NFS
    2009
    Co-Authors: Abhay Khoje, Salih K A, Rajat Moona
    Abstract:

    Many organizations have great deal of confidential information which is stored on computers. Such information is desired to be kept securely yet giving a convenience of accessibility from any part of the world. For data security, one can use an Encrypting File System such as eCryptfs (1), dmCrypt (2), File Vault (3). However these Encrypting File sy stems do not address the problem of accessing Files over network from public computers. In this case the public host, the actual FileServer host and the network between them are vulnerable to many attacks. This paper discusses the major problems and proposes a solution for the same using TransCrypt (4) Encrypting File System. It also describes how the proposed solution can b e implemented on a Linux-based environment.

Baodian Wei - One of the best experts on this subject based on the ideXlab platform.

  • Provable security of the modified Encrypting File System for Microsoft Windows
    2009 7th International Conference on Information Communications and Signal Processing (ICICS), 2009
    Co-Authors: Baodian Wei
    Abstract:

    EFS is the encryption mechanism for Microsoft Windows. In this paper, by introducing two additional hash functions, we present a security-improved variant of the original EFS scheme. The minor modification has almost negligible effect on the performance of the operating System. Then we apply the Fujisaki-Okamoto's technique to prove its security against adaptive chosen ciphertext attacks in the random oracle model. Compared with the more confidence in the security for EFS in Microsoft Windows, the minor modification and the minor cost incremental is worthwhile, we believe.

Matt Blaze - One of the best experts on this subject based on the ideXlab platform.

  • key management in an Encrypting File System
    USENIX Summer Technical Conference, 1994
    Co-Authors: Matt Blaze
    Abstract:

    As distributed computing Systems grow in size, complexity and variety of application, the problem of protecting sensitive data from unauthorized disclosure and tampering becomes increasingly important. Cryptographic techniques can play an important role in protecting communication links and File data, since access to data can be limited to those who hold the proper key. In the case of File data, however, the routine use of encryption facilities often places the organizational requirements of information security in opposition to those of information management. Since strong encryption implies that only the holders of the cryptographic key have access to the cleartext data, an organization may be denied the use of its own critical business records if the key used to encrypt these records becomes unavailable (e.g., through the accidental death of the key holder). This paper describes a System, based on cryptographic "smartcards," for the temporary "escrow" of File encryption keys for critical Files in a cryptographic File System. Unlike conventional escrow schemes, this System is bilaterally auditable, in that the holder of an escrowed key can verify that, in fact, he or she holds the key to a particular directory and the owner of the key can verify, when the escrow period is ended, that the escrow agent has neither used the key nor can use it in the future. We describe a new algorithm, based on the DES cipher, for the on-line encryption of File data in a secure and efficient manner that is suitable for use in a smartcard.

  • USENIX Summer - Key management in an Encrypting File System
    1994
    Co-Authors: Matt Blaze
    Abstract:

    As distributed computing Systems grow in size, complexity and variety of application, the problem of protecting sensitive data from unauthorized disclosure and tampering becomes increasingly important. Cryptographic techniques can play an important role in protecting communication links and File data, since access to data can be limited to those who hold the proper key. In the case of File data, however, the routine use of encryption facilities often places the organizational requirements of information security in opposition to those of information management. Since strong encryption implies that only the holders of the cryptographic key have access to the cleartext data, an organization may be denied the use of its own critical business records if the key used to encrypt these records becomes unavailable (e.g., through the accidental death of the key holder). This paper describes a System, based on cryptographic "smartcards," for the temporary "escrow" of File encryption keys for critical Files in a cryptographic File System. Unlike conventional escrow schemes, this System is bilaterally auditable, in that the holder of an escrowed key can verify that, in fact, he or she holds the key to a particular directory and the owner of the key can verify, when the escrow period is ended, that the escrow agent has neither used the key nor can use it in the future. We describe a new algorithm, based on the DES cipher, for the on-line encryption of File data in a secure and efficient manner that is suitable for use in a smartcard.

Dowling Anthony - One of the best experts on this subject based on the ideXlab platform.

  • Digital Forensics: A Demonstration of the Effectiveness of The Sleuth Kit and Autopsy Forensic Browser
    'University of Otago Library', 2010
    Co-Authors: Dowling Anthony
    Abstract:

    The Sleuth Kit is a collection of Linux tools that perform different aspects of a File System analysis. The Autopsy Forensic Browser is a graphical user interface that provides a user friendly interface to the command line tools contained within The Sleuth Kit. This research project investigates the use of The Sleuth Kit and Autopsy Forensic Browser as forensic investigation tools, with the aim of demonstrating the effectiveness of these tools in real world case studies as digital forensic tools. The research found that The Sleuth Kit and Autopsy Forensic Browser provide an effective File System analysis toolset. The flexibility of the tools contained within The Sleuth Kit often lead to complex command line strings, the complexity of which is overcome by the automation provided by the Autopsy Forensic Browser. Not only do The Sleuth Kit and Autopsy Forensic browser provide an effective toolset, they also offer an affordable alternative to expensive commercial or proprietary based toolsets. Digital Forensics is an area of increasing importance with an expanding field of coverage requiring many different tools to help perform varying functions. It is with this in mind that the focus of this research project is three case studies that are utilised to demonstrate the effectiveness of The Sleuth Kit and Autopsy Forensic Browser. The demonstration of The Sleuth Kit and Autopsy Forensic Browser contained within the case studies could serve as an introductory overview of a new toolset for investigators looking for an alternative or complementary Digital Forensics toolset.NIJ, Solicitation for Concept Papers - Electronic Crime Research and Development. 2005. p. 1-13. Carrier, B., Open Source Digital Forensic Tools: The Legal Argument. 2002. Farmer, D. and W. Venema. The Coroners Toolkit Project Page. 2004 [cited; Available from: httpi//wwwporcupine.org/forensics/tct.html. Vacca, J.R., Computer Forensics: Computer Crime Scene Investigation. 2002, Hingham, Massachusetts: David F. Pallai. 731. Casio Computer Company Ltd. Casio E-Data Bank Watches. 2005 [cited; Available from: http://world.casio.com/pacific/wat/e_data/. MacSema Inc. Contact Memory Button (CMB'S). 2001 [cited; Available from: http://www.macsema.com/buttonmemory.htrn. Wikimedia Foundation. Wikipedia - Data Recovery Definition. 2005 [cited; Available from: http://en.wikipedia.org/wiki/Data recovery. Lee, H., T. Palmbach, and M. Miller, Henry Lee's Crime Scene Handbook. 2001, London: Academic Press. Ltd, C.F.N. Data Recovery & Computer Investigations. 2005 [cited; Available from: http://www.datarecovery.co.nz/datarecovery/ index.html?source=adwords-datarecov. New Zealand Police E-crime Lab. Fighting e-crime in New Zealand. 2002 [cited; Available from: http://www.police.govt.nz/service/ecrime/. Wikimedia Foundation. Wikipedia - Sulphonylurea Definition. 2005 [cited; Available from: http://en.wikipedia.org/wiki/Sulphonylurea. NZHerald.co.nz. Jury quick to convict doctor of murder. 2001 [cited; Available from: http://www.nzherald.co.nz/index.cfm?Ob'ectiD=229152. Police, N.Z. New Zealand Police Youth Education Service. 2005 [cited; Available from: http://www.police.govt.nz/service/yes/. Police, N.Z. Keeping Ourselves Safe. 2005 [cited; Available from: http://www.police. ovt.nz/service/yes/resources/violence/kos.html. Farmer, D. and W. Venema, Forensic Discovery. 2004: Addison-Wesley. Office of e-Government. Forensic Plan. 2004 [cited; Available from: http://www.egov.dpc.wa.gov.au/. Gutmann, P., Secure Deletion of Data from Magnetic and Solid-State Memory, in Sixth USENIX Security Symposium Proceedings. 1996, University of Auckland. Gutmann, P. Data Remanence in Semiconductor Devices. 2001 [cited. Carrier, B., File System Forensic Analysis. 2005: Addison-Wesley. Optical Storage Technology Association. Understanding CD-R CD-RW Disc Longevity. 2001 [cited; Available from: http://www.osta.org/technolo /cda13.htm. Instruments, V. Veeco Instruments Web Site. 2005 [cited; Available from: http://www.veeco.com/. Garfinkel, S.L. and A. Shelat, Remembrance of Data Passed: A Study of Disk Sanitization Practices. 2003, Massachusetts Institute of Technology. American Institute of Physics. Heisenberg - Quantum Mechanics, 1925 - 1927: The Uncertainty Principle. 2005 [cited; Available from: http://www.aip.org/history/heisenberg/p08.htm. Seagate. Seagate Barracuda 7200.8 ST3400832A Specs. 2005 [cited; Available from: http://www.seagate.com/cda/products/discsales/marketing/detail/0.html. ACPO. ALPO Good Practice Guide to Computer Based Evidence. 2003 [cited; Version 3.0:[Available from: http://www.acpo.police.uk/asp/policies/Data/gpg_computer_based_evidence_v3.pdf. New Technologies Inc. File Slack Defined. 2004 [cited; Available from: http://www.forensics-intl.com/def6.html. PCTechGuide. Hard Disks. 2003 [cited; Available from: http://www.pctechguide.com/04disks.htm. Wikimedia Foundation. Wikipedia - Endianness. 2005 [cited; Available from: http://en.wiki edia.or /wiki/Biendian. 29. www.lookuptables.com. ASCII Table and Description. 2005 [cited; Available from: http://www.lookuptables.com/. Inc, U. Unicode Home Page. 2005 [cited; Available from: http://www .unicode.org/ Inc, U. Unicode v4.1.0. 2005 [cited; Available from: http://www.unicode.org/versions/Unicode4.1.0/. Microsoft. FAT32 File System Specification. 2000 [cited; Available from: http://www.microsoft ..oiT!/vvlidc/System/platform/fin-nware/fa en.ms x: Carrier, B. The Sleuth Kit and Autopsy Project Page. 2004 [cited; Available from: http://www.sleuthkit.org. Brzitwa, M. gpart - Guess PC-type hard disk partitions. 2001 [cited; Available from: http://www.stud.uni-hannover.de/user/76201/gpart/. cgSecurity. TestDisk - Tool to check and undelete partition. 2005 [cited; Available from: htt.://www.c_ security.org/index.html?testdisk.html. PJRC. Understanding FAT32 FileSystems. 2005 [cited; Available from: http://www.pjrc.com/tech/8051/ide/fat32.html. Brouwer, A. Partition Types. 2005 [cited; Available from: http://www.win.tue.n1/~aeb/partitions/partition_types.html. Microsoft. Encrypting File System Overview. 2005 [cited; Available from: http://www.microsoft.com/resources/documentation/windows/x /all/proddocs/ en-us/encrypt_overview.mspx. PGP Corporation. PGP Corporation Website. 2005 [cited; Available from: http://www.com/. Devine, C. Encrypted Root FileSystem HOWTO. 2005 [cited; Available from: http://linuxfromscratch.org/~devine/erfs-howto.html Wolfe, H., Penetrating Encrypted Evidence. Journal of Digital Investigation, 2004. 1(2). "@stake". "gstake.com". 2004 [cited; Available from: http://www.atstake.com/. NIST. National Software Reference Library. [Project Web Site] 2004 [cited; Available from: http://www.nsrl.nist.gov/index.html. The Honeynet Project. The Honeynet Project Website. The Honeynet Project 2004 [cited; Available from: http://www.honeynet.org/misc/project.html. The Honeynet Project. The Honeynet Project Scan of the Month 24. The Honeynet Project 2001 [cited; Available from: http://www.honeynet.org/scans/scan24/. The Honeynet Project. The Honeynet Project Scan of the Month 26. The Honeynet Project 2002 [cited; Available from: http://www.honeynet.org/scans/scan26/. The Honeynet Project. The Honeynet Project Forensic Challenge. The Honeynet Project 2001 [cited; Available from: http://www.honeynet.org/challenge/index.html. Digital Forensic Research Workshop. Digital Forensic Research Workshop website. 2005 [cited; Available from: http://www.dfrws.org/. 49. Hamilton, E. JPEG File Interchange Format v1.02. 1992 [cited; Available from: http://www.w3.org/Graphics/JPEG/. Kessler, G. File Signature Table. 2005 [cited; Available from: http//www.garykessler.net/library/File_sigs.html. United States Air Force Office of Special Investigation. Foremost - Webpage. 2005 [cited; Available from: http://foremost.sourceforge.net/. Provos, N. Stegdetect - Webpage. 2005 [cited; Available from: http//www.outguess.org/. NeoByte Solutions. Invisible Secrets - Webpage. 2005 [cited; Available from: http://www.invisiblesecrets.com/. Roesch, M. SNORT. 2005 [cited; Available from: http://www.snort.org/. Roesller, T. Lastlog File Analyser Source File. 2000 [cited; Available from: http://www.honeynet.org/challenge/results/submissions/roessler/Files/lastlog.c. CERT/CC. CERT® Coordination Center (CERT/CC). 2005 [cited; Available from: http://www.cert.org/nav/index_main.html. CERT/CC. CERT® Advisory CA-2000-17 Input Validation Problem in rpc.statd. 2000 [cited; Available from: http://www.cert.org/advisories/CA- 2000-17.html. Red Hat Network. Revised advisory: Updated package for nfs-utils available. 2000 [cited; Available from: https://rhn.redhat.com/errata/RHSA-2000- 043.html

Sean Wallbridge - One of the best experts on this subject based on the ideXlab platform.

  • Administering Active Directory
    Windows 2000 Server System Administration Handbook, 2000
    Co-Authors: Sean Wallbridge
    Abstract:

    Within Windows 2000, many new features have been added or modified from earlier versions. One of the main features added is the Active Directory. This directory service provides a store of available network resources and gives the users the ability to access and use them. Many of the new features that have been added, such as the Encrypting File System and certificate authorities require the robustness provided with Active Directory. The directory is used to house the information stored within Active Directory. It is its core component. This service is replicated throughout the domain on domain controllers. Several different naming conventions are used in Windows 2000 and Active Directory. Client software is also an important part of Active Directory services. Organizational Units are created in Active Directory to provide a hierarchical management structure. They are used for several different reasons, including security delegation, and provide boundaries for features, such as the group policy.

  • Implementing Security in a Windows 2000 Network
    Windows 2000 Server System Administration Handbook, 2000
    Co-Authors: Sean Wallbridge
    Abstract:

    Within any organization, security should be a prime concern for all IT managers or professionals. The need to provide secure services increases as networks grow and become more complex. As more companies link to and provide new Internet-related services, administrators must understand and provide a secure network environment. There are risks associated with new and existing technologies, and an administrator who does not know what tools and options are available can cause more damage than good. Windows 2000 includes new advanced features and tool sets, including major security revisions and additions that provide a more stable and secure platform. Another feature is the Encrypting File System (EFS). In conjunction with NT File System , this provides a more advanced File and folder security feature set. The security configuration tool set has been created to ease the deployment of security configurations. The EFS is used to provide a more secure method of storing Files and folders. With security becoming vitally necessary in every environment, additional and more advanced tools are needed to keep up with the changing times. Windows 2000 provides enhancements and new features that provide this additional level of security.

  • Managing Data Storage
    Windows 2000 Server System Administration Handbook, 2000
    Co-Authors: Sean Wallbridge
    Abstract:

    This chapter discusses several solutions for data management in Windows 2000. Managing data in Windows 2000 involves data compression, setting disk quotas, data encryption, and disk defragmentation. Data compression decreases the amount of disk space required for File storage. Compression can be performed on Files, folders, or whole NT File System (NTFS) volumes. Disk quotas are used to manage the growth and size of File storage for each user or groups of users. They help in allocating disk space for each user or groups of users (credit limits) and ensure that they do not go over that limit or quota. Like compression, disk quotas can only be used with the NTFS. Data encryption ensures that data is not viewed by the wrong users. EFS is the acronym for the Windows 2000 Encrypting File System. It allows users to encrypt data in selected NTFS Files and folders so that it can be stored securely on the computer. Using EFS, users can encrypt, decrypt, access, move, copy, and rename their Files. Windows 2000 disk defragmenter can be used to defragment the Files on the hard disks periodically. This consolidates all the pieces of the flies into a single space on the hard drive so that the computer can access the Files more quickly and efficiently. Disk defragmentation speeds up the processor time of the computer.