Dissertation Proposal - Shariful Alam

Enhancing System Security: A Multi-Faceted Approach to Preventing Data Leaks

Presented by Shariful Alam, Computing PhD Cybersecurity emphasis

Online presentation: Register to attend online via Zoom

Abstract

Data breaches pose significant challenges in sectors such as finance, healthcare, and government, where the safeguarding of sensitive information is critical. This proposal focuses on investigating the mechanisms behind data leaks, particularly through covert channels and physical attacks like cold boot attacks that exploit system vulnerabilities and circumvent traditional security measures. My proposed research is structured around three key objectives: First, I explore the potential for data ex-filtration through clock modulation in x86 cpu’s, demonstrating that manipulating cpu clock speeds can enable high-speed data transmission. Second, I propose a robust framework designed to protect sensitive data, such as private keys, from physical attacks, ensuring security even when an adversary gains physical access to the system. Experimental results validate the effectiveness of this framework in thwarting such attacks. Third, I aim to develop a AI-driven classification model to map software vulnerabilities responsible for data leaks from the Common Vulnerabilities and Exposures (CVE) database to common coding errors identified in the Common Weakness Enumeration (CWE). This model is intended to identify recurring coding practices that lead to these vulnerabilities. Overall, this proposal seeks to enhance data security by addressing vulnerabilities at both the hardware and software levels.

Committee

Dr. Nasir Eisty (Chair), Dr. Amit Jain, Dr. Edoardo Serra