Team for Research in
Ubiquitous Secure Technology

TRUST Annual Report 2007-2008
Faculty and Staff

Citation
Faculty and Staff. "TRUST Annual Report 2007-2008". Technical report, Team for Research in Ubiquitous Secure Technology (TRUST), June, 2008; Previous TRUST annual reports are also available for 2006 and 2007.

Abstract
The Team for Research in Ubiquitous Security Technology (TRUST) was created in response to a growing sense of urgency in dealing with all aspects of cybersecurity as it affects society. First, the role and penetration of computing systems and networks in our societal infrastructure continues to grow, and their importance to societal safety and the security has never been greater. Beyond mere connection to the internet and access to global resources, information systems are now used for controlling critical infrastructures for electricity, healthcare, finance, and medical networks. Second, and somewhat contradictorily, many such control systems remain untrustworthy. Waves of viruses and worms sweep the Internet and exhibit increasing virulence and rate of speed that is also directly proportional to their growing ease of deployment. Privacy remains poorly understood and poorly supported; security is generally inadequate, and some speak of a “market failure” in the domain. Broader issues of software usability, reliability and correctness remain challenging. Industry stakeholders are unable to recruit new employees adequately trained in these technologies. Society is placing computers into critical roles, although they do not meet the requirements of trust. TRUST is composed of several universities that have joined forces to organize a multifaceted response. TRUST represents the strongest and most diverse engagement of the issue of trusted systems ever assembled. TRUST is the first to recognize the breadth of the problem and to combine fundamental science with a broader multidisciplinary focus on economic, social and legal considerations and a substantial educational mission. TRUST will enable dialog with stakeholders whose needs simply cannot be approached in a narrower and purely technical manner, or by any single research group. TRUST seeks to be an intermediary between the policy makers and society at large on the one hand, and the researchers, academics, and industrial providers of services and technology on the other. TRUST seeks to achieve its mission through research as well as a global policy for engaging in education of society as a whole. This annual report of TRUST details the experience of the center along many dimensions—research, industrial outreach and knowledge transfer, education, and diversity outreach. In research, TRUST has achieved success along several fronts and is addressing fundamental scientific and technological problems and advancing the state-of-the-art in a number of areas: security and privacy issues associated with the rapidly increasing use of electronic media for the archival and access of patient medical records; web authentication, end-user privacy, next-generation browser security, malware detection, and improved system forensic techniques to combat online attacks; application defenses for network-level intrusions and attacks including compromised and malfunctioning legacy applications, viruses, worms, and spyware; incentives for research, investment, policies, and procedures for technology that enhance system security, privacy, and trustworthiness; secure embedded sensor networks for large-scale applications critical to the nation’s economy, energy, security, and health; and techniques that ensure trustworthy computing by securing hardware, improving software robustness, and increasing the survivability of critical systems. In education, TRUST is leveraging an existing learning technology infrastructure to quickly enable TRUST courseware and material to be assembled, deposited in a repository, and adapted for wide web-based content dissemination. In addition to developing special courses for undergraduate and graduate curricula, and regular seminars and webcasts, TRUST has hosted a series of workshops on sensor networks, privacy, identity theft, and electronic medical records. A major thrust in the third year was increasing content in the TRUST Academy Online (TAO) and redesigning the TAO portal as well as the center’s Education Community Development efforts. Again, all these are reported below in the section on education. In knowledge transfer, TRUST has continued a robust program of technology transition with industry (from bug reports of open source software to tools such as Spoofguard and various consulting activities) and active engagement with governmental agencies such as the Department of Homeland Security (DHS), the Air Force Office of Scientific Research (AFOSR), the Department of Defense (DoD), and the Department of Energy (DoE) which are all concerned with issues of cyber security and trustworthiness. TRUST also has an active set of industrial partners such as Intel, Microsoft, Sun, Telecom Italia, and United Technologies with whom we are beginning to engage in collaborations of mutual interest. More details are provided in the section on knowledge transfer. In diversity, TRUST has an ambitious goal of reaching a diversity goal of 30% of women in its faculty and students, and 10% of researchers from underrepresented communities, and has been proactive in this regard. Several activities for enhancing diversity are reported in the corresponding section. Overall, we are happy to report that the center is making excellent progress towards its goals, its participants are actively engaged, and the outlook is positive.

Electronic downloads

Citation formats  
  • HTML
      Faculty and Staff. <a
    href="http://www.truststc.org/pubs/538.html"><i>TRUST
    Annual Report 2007-2008</i></a>, Technical
    report,  Team for Research in Ubiquitous Secure Technology
    (TRUST), June, 2008; Previous TRUST annual reports are also
    available for <a
    href="http://www.truststc.org/pubs/106.html">2006</a>
    and <a
    href="http://www.truststc.org/pubs/257.html"
    >2007</a>.
  • Plain text
      Faculty and Staff. "TRUST Annual Report
    2007-2008". Technical report,  Team for Research in
    Ubiquitous Secure Technology (TRUST), June, 2008; Previous
    TRUST annual reports are also available for <a
    href="http://www.truststc.org/pubs/106.html">2006</a>
    and <a
    href="http://www.truststc.org/pubs/257.html"
    >2007</a>.
  • BibTeX
    @techreport{FacultyandStaff08_TRUSTAnnualReport20072008,
        author = {  Faculty and Staff},
        title = {TRUST Annual Report 2007-2008},
        institution = {Team for Research in Ubiquitous Secure Technology
                  (TRUST)},
        month = {June},
        year = {2008},
        note = {Previous TRUST annual reports are also available
                  for <a
                  href="http://www.truststc.org/pubs/106.html">2006</a>
                  and <a
                  href="http://www.truststc.org/pubs/257.html"
                  >2007</a>.},
        abstract = {The Team for Research in Ubiquitous Security
                  Technology (TRUST) was created in response to a
                  growing sense of urgency in dealing with all
                  aspects of cybersecurity as it affects society.
                  First, the role and penetration of computing
                  systems and networks in our societal
                  infrastructure continues to grow, and their
                  importance to societal safety and the security has
                  never been greater. Beyond mere connection to the
                  internet and access to global resources,
                  information systems are now used for controlling
                  critical infrastructures for electricity,
                  healthcare, finance, and medical networks. Second,
                  and somewhat contradictorily, many such control
                  systems remain untrustworthy. Waves of viruses and
                  worms sweep the Internet and exhibit increasing
                  virulence and rate of speed that is also directly
                  proportional to their growing ease of deployment.
                  Privacy remains poorly understood and poorly
                  supported; security is generally inadequate, and
                  some speak of a âmarket failureâ in the
                  domain. Broader issues of software usability,
                  reliability and correctness remain challenging.
                  Industry stakeholders are unable to recruit new
                  employees adequately trained in these
                  technologies. Society is placing computers into
                  critical roles, although they do not meet the
                  requirements of trust. TRUST is composed of
                  several universities that have joined forces to
                  organize a multifaceted response. TRUST represents
                  the strongest and most diverse engagement of the
                  issue of trusted systems ever assembled. TRUST is
                  the first to recognize the breadth of the problem
                  and to combine fundamental science with a broader
                  multidisciplinary focus on economic, social and
                  legal considerations and a substantial educational
                  mission. TRUST will enable dialog with
                  stakeholders whose needs simply cannot be
                  approached in a narrower and purely technical
                  manner, or by any single research group. TRUST
                  seeks to be an intermediary between the policy
                  makers and society at large on the one hand, and
                  the researchers, academics, and industrial
                  providers of services and technology on the other.
                  TRUST seeks to achieve its mission through
                  research as well as a global policy for engaging
                  in education of society as a whole. This annual
                  report of TRUST details the experience of the
                  center along many dimensionsâresearch,
                  industrial outreach and knowledge transfer,
                  education, and diversity outreach. In research,
                  TRUST has achieved success along several fronts
                  and is addressing fundamental scientific and
                  technological problems and advancing the
                  state-of-the-art in a number of areas: security
                  and privacy issues associated with the rapidly
                  increasing use of electronic media for the
                  archival and access of patient medical records;
                  web authentication, end-user privacy,
                  next-generation browser security, malware
                  detection, and improved system forensic techniques
                  to combat online attacks; application defenses for
                  network-level intrusions and attacks including
                  compromised and malfunctioning legacy
                  applications, viruses, worms, and spyware;
                  incentives for research, investment, policies, and
                  procedures for technology that enhance system
                  security, privacy, and trustworthiness; secure
                  embedded sensor networks for large-scale
                  applications critical to the nationâs economy,
                  energy, security, and health; and techniques that
                  ensure trustworthy computing by securing hardware,
                  improving software robustness, and increasing the
                  survivability of critical systems. In education,
                  TRUST is leveraging an existing learning
                  technology infrastructure to quickly enable TRUST
                  courseware and material to be assembled, deposited
                  in a repository, and adapted for wide web-based
                  content dissemination. In addition to developing
                  special courses for undergraduate and graduate
                  curricula, and regular seminars and webcasts,
                  TRUST has hosted a series of workshops on sensor
                  networks, privacy, identity theft, and electronic
                  medical records. A major thrust in the third year
                  was increasing content in the TRUST Academy Online
                  (TAO) and redesigning the TAO portal as well as
                  the centerâs Education Community Development
                  efforts. Again, all these are reported below in
                  the section on education. In knowledge transfer,
                  TRUST has continued a robust program of technology
                  transition with industry (from bug reports of open
                  source software to tools such as Spoofguard and
                  various consulting activities) and active
                  engagement with governmental agencies such as the
                  Department of Homeland Security (DHS), the Air
                  Force Office of Scientific Research (AFOSR), the
                  Department of Defense (DoD), and the Department of
                  Energy (DoE) which are all concerned with issues
                  of cyber security and trustworthiness. TRUST also
                  has an active set of industrial partners such as
                  Intel, Microsoft, Sun, Telecom Italia, and United
                  Technologies with whom we are beginning to engage
                  in collaborations of mutual interest. More details
                  are provided in the section on knowledge transfer.
                  In diversity, TRUST has an ambitious goal of
                  reaching a diversity goal of 30% of women in its
                  faculty and students, and 10% of researchers from
                  underrepresented communities, and has been
                  proactive in this regard. Several activities for
                  enhancing diversity are reported in the
                  corresponding section. Overall, we are happy to
                  report that the center is making excellent
                  progress towards its goals, its participants are
                  actively engaged, and the outlook is positive.},
        URL = {http://www.truststc.org/pubs/538.html}
    }
    

Posted by Larry Rohrbough on 13 Feb 2009.
Groups: trust
For additional information, see the Publications FAQ or contact webmaster at www truststc org.

Notice: This material is presented to ensure timely dissemination of scholarly and technical work. Copyright and all rights therein are retained by authors or by other copyright holders. All persons copying this information are expected to adhere to the terms and constraints invoked by each author's copyright.