Call For Papers: Online Game Security

By Tadayoshi Kohno at 2:52 pm on August 16, 2008 | No comments

Gary McGraw (Cigital, Inc.) and Ming Chow (Tufts University) are editing a special issue of the IEEE Security and Privacy magazine focused on security and privacy for online games. Papers are due September 5th. We’ve talked about security and privacy for online games on this blog already. If you have any neat ideas for an article, I’m sure Gary and Ming would love to hear from you.

Filed under: Announcements Leave A Comment »

Pacemaker and Implantable Defibrillator Security Paper at Oakland

By Tadayoshi Kohno at 6:54 am on May 26, 2008 | 1 Comment

University of Washington CSE PhD student Dan Halperin et al.’s paper on the security and privacy for pacemakers and implantable defibrillators just received the Best Paper Award at the annual IEEE Symposium on Security and Privacy (a.k.a. the “Oakland” conference).

Dan and the rest of the team from UW, UMass Amherst, and Harvard Medical School found that an implantable cardioverter defibrillator can leak private information and can allow unauthorized parties to modify settings that control, among other things, shock therapies.  

You can read Dan’s full paper and the FAQ, as well as his earlier work on the topic of medical device security.  You can also read summaries of Dan’s work in The New York Times, the Wall Street Journal, Reuters, and the Associated Press.  Bruce Schneier also provides excellent commentary.

Congratulations Dan!

Filed under: Announcements, Current Events, Research, Security Reviews1 Comment »

Happy Spring Break!

By Tadayoshi Kohno at 9:58 am on March 25, 2008 | 1 Comment

Have a great spring break everyone!

To readers of this blog: Please expect low activity for a while. The University of Washington is on the quarter system, and our quarter just ended. Everyone in the class is, of course, encouraged to still contribute articles to this blog. And we’ll continue using this blog (or more sophisticated forum environments) in future courses.  Stay tuned for more information :-) .

Filed under: Announcements, Security Reviews1 Comment »

Time to test our security mindset

By felixctc at 6:52 pm on March 13, 2008 | 4 Comments

Hey everyone. I found a website where you can try to use various ways to hack through levels of password. I think this is a fun way to get in touch with our security mindsets and see how far you can go. I wish everyone good luck :)

http://hackerskills.com/

Filed under: Announcements, Miscellaneous4 Comments »

Security Review: Apple iPhone 3rd party application support

By jimg at 10:54 pm on March 9, 2008 | 1 Comment

On Thursday, Apple happily unveiled its plan for third party support of native iPhone applications. The plan involves an application development and distribution pipeline including an iPhone SDK, a suite of IDE tools, and a sales and distribution plan through the new iPhone “App Store”. Apple is restricting the distribution of 3rd party applications through their app store by requiring an iPhone developer account. There will be no other supported way to get 3rd party iPhone applications onto the iPhone. Apple has also made the claim that no malicious, pornographic, or software with security vulnerabilities will be distributed through their store.
(Read on …)

Filed under: Announcements, Current Events, Ethics, Security Reviews1 Comment »

Example Security Review #5

By Tadayoshi Kohno at 2:03 pm on January 7, 2008 | No comments

Michael Levine provided this example CSE 490K Security Review.

(Read on …)

Filed under: Announcements, Security Reviews Leave A Comment »

Example Security Review #4

By Tadayoshi Kohno at 9:18 am on December 31, 2007 | No comments

John Kurkowski provided this example CSE 490K Security Review.

(Read on …)

Filed under: Announcements, Security Reviews Leave A Comment »

Example Security Review #3

By Tadayoshi Kohno at 9:18 am on | No comments

Here’s another example CSE 490K Security Review.

(Read on …)

Filed under: Announcements, Security Reviews Leave A Comment »

Example Security Review #2

By Tadayoshi Kohno at 9:18 am on | No comments

Erin Covington provided this example CSE 490K Security Review.

(Read on …)

Filed under: Announcements, Security Reviews Leave A Comment »

Example Security Review #1

By Tadayoshi Kohno at 9:18 am on | No comments

David Chen provided this example CSE 490K Security Review.

(Read on …)

Filed under: Announcements, Security Reviews Leave A Comment »
Next Page »