Proceedings of the Seventh Annual Workshop on Cyber Security and Information Intelligence Research - CSIIRW '11, 2011
ABSTRACT Attack graphs provide a comprehensive overview of attack vectors. Unfortunately, their c... more ABSTRACT Attack graphs provide a comprehensive overview of attack vectors. Unfortunately, their complexity dramatically increases as the number of hosts in a network grows. For realistic networks, the human eye cannot discern the state of a network without tracing individual attack paths. In order to combat this complexity, we discuss and implement mitigation techniques and the use of collaborative multi-touch environments for an intuitive, natural approach to visual analytics.
Proceedings of the Seventh Annual Workshop on Cyber Security and Information Intelligence Research - CSIIRW '11, 2011
ABSTRACT Department of Homeland Security (DHS) Assistant for Research and development Tracking an... more ABSTRACT Department of Homeland Security (DHS) Assistant for Research and development Tracking and Technology Transition (DART3) is a web-based implementation designed to capture US Federally funded research and development (R&D) project descriptions and the ...
In spite of the controversy surrounding the practice of using offensive computer security exercis... more In spite of the controversy surrounding the practice of using offensive computer security exercises in informa-tion assurance curricula, it holds significant educational value. An exercise and architecture for an asymmet-ric (offense-only) security project, nicknamed "Blunder-dome", has been deployed twice at the University of Tulsa: once to graduate students in a security engineer-ing course, and once to high school students as part of a research internship program. This paper discusses the framework, the project, its educational value, and lessons learned for future deployments. Coverage is also given briefly to a summary of our position on the role of offen-sive exercises in security education.
Proceedings of the 5th Annual Workshop on Cyber Security and Information Intelligence Research Cyber Security and Information Intelligence Challenges and Strategies - CSIIRW '09, 2009
Proceedings of the 6th International Symposium on Wikis and Open Collaboration - WikiSym '10, 2010
Wikis have proven to be an invaluable tool for collaboration. The most prominent is, of course, W... more Wikis have proven to be an invaluable tool for collaboration. The most prominent is, of course, Wikipedia. Its open nature is not suitable for all environments; in corporate, government, and research environments it is often necessary to control access to some or all of the information due to confidentially, privacy, or security concerns. This paper proposes a method by which information classified at multiple sensitivity levels can be securely stored and made accessible via the wiki only to authenticated and authorized users. The model allows for each page to be viewed at appropriate levels of classification transparently included or excluded based on the user's access level.
Proceedings of the 9th Annual Cyber and Information Security Research Conference on - CISR '14, 2014
ABSTRACT Critical infrastructures and safety critical systems increasingly rely on the carefully ... more ABSTRACT Critical infrastructures and safety critical systems increasingly rely on the carefully orchestrated interactions between computers, networks and kinetic elements. The dominant formalisms for modeling such hybrid systems (those with discrete and continuous components) are geared towards simple reactive systems working in isolation. By contrast, modern cyber-physical systems depend on highly interconnected computational components and often function in potentially hostile environments. This paper describes linguistic and type extensions to the stateful attack graph, which models the functional nature of attacks on purely discrete information systems, to include continuous system elements and time evolution. The resulting formalism is called the hybrid attack graph, which captures an integrated view of the vulnerability space between information systems and a restricted but useful set of hybrid systems.
Proceedings of the 2014 Annual Conference on Extreme Science and Engineering Discovery Environment - XSEDE '14, 2014
ABSTRACT The OneOklahoma Friction Free Network (OFFN) is a dedicated multi-institutional research... more ABSTRACT The OneOklahoma Friction Free Network (OFFN) is a dedicated multi-institutional research-only “Science DMZ” network that connects the state’s academic Cyberinfrastructure resources – including all four high performance computing centers – that is available for use by all Oklahoma academics plus their collaborators. A project of the OneOklahoma Cyberinfrastructure Initiative (OneOCII), OFFN is based on a collaboration of three universities, a nonprofit, and Oklahoma’s research, education and government Regional Optical Network. OFFN consists of common configurations of Software Defined Networking infrastructure connected across a new set of optical links, at a minimum of 10 Gbps, and foreshadowing the state’s transition to widespread 100 Gbps research connectivity. OneOCII, the parent initiative of OFFN, is a statewide collaboration to offer shared access to resources, both technology and human, to enable the use of advanced computing by research and education statewide. To date, OneOCII has served 52 academic institutions and 48 non-academic organizations.
Proceedings of the Seventh Annual Workshop on Cyber Security and Information Intelligence Research - CSIIRW '11, 2011
ABSTRACT Attack graphs provide a comprehensive overview of attack vectors. Unfortunately, their c... more ABSTRACT Attack graphs provide a comprehensive overview of attack vectors. Unfortunately, their complexity dramatically increases as the number of hosts in a network grows. For realistic networks, the human eye cannot discern the state of a network without tracing individual attack paths. In order to combat this complexity, we discuss and implement mitigation techniques and the use of collaborative multi-touch environments for an intuitive, natural approach to visual analytics.
Proceedings of the Seventh Annual Workshop on Cyber Security and Information Intelligence Research - CSIIRW '11, 2011
ABSTRACT Department of Homeland Security (DHS) Assistant for Research and development Tracking an... more ABSTRACT Department of Homeland Security (DHS) Assistant for Research and development Tracking and Technology Transition (DART3) is a web-based implementation designed to capture US Federally funded research and development (R&D) project descriptions and the ...
In spite of the controversy surrounding the practice of using offensive computer security exercis... more In spite of the controversy surrounding the practice of using offensive computer security exercises in informa-tion assurance curricula, it holds significant educational value. An exercise and architecture for an asymmet-ric (offense-only) security project, nicknamed "Blunder-dome", has been deployed twice at the University of Tulsa: once to graduate students in a security engineer-ing course, and once to high school students as part of a research internship program. This paper discusses the framework, the project, its educational value, and lessons learned for future deployments. Coverage is also given briefly to a summary of our position on the role of offen-sive exercises in security education.
Proceedings of the 5th Annual Workshop on Cyber Security and Information Intelligence Research Cyber Security and Information Intelligence Challenges and Strategies - CSIIRW '09, 2009
Proceedings of the 6th International Symposium on Wikis and Open Collaboration - WikiSym '10, 2010
Wikis have proven to be an invaluable tool for collaboration. The most prominent is, of course, W... more Wikis have proven to be an invaluable tool for collaboration. The most prominent is, of course, Wikipedia. Its open nature is not suitable for all environments; in corporate, government, and research environments it is often necessary to control access to some or all of the information due to confidentially, privacy, or security concerns. This paper proposes a method by which information classified at multiple sensitivity levels can be securely stored and made accessible via the wiki only to authenticated and authorized users. The model allows for each page to be viewed at appropriate levels of classification transparently included or excluded based on the user's access level.
Proceedings of the 9th Annual Cyber and Information Security Research Conference on - CISR '14, 2014
ABSTRACT Critical infrastructures and safety critical systems increasingly rely on the carefully ... more ABSTRACT Critical infrastructures and safety critical systems increasingly rely on the carefully orchestrated interactions between computers, networks and kinetic elements. The dominant formalisms for modeling such hybrid systems (those with discrete and continuous components) are geared towards simple reactive systems working in isolation. By contrast, modern cyber-physical systems depend on highly interconnected computational components and often function in potentially hostile environments. This paper describes linguistic and type extensions to the stateful attack graph, which models the functional nature of attacks on purely discrete information systems, to include continuous system elements and time evolution. The resulting formalism is called the hybrid attack graph, which captures an integrated view of the vulnerability space between information systems and a restricted but useful set of hybrid systems.
Proceedings of the 2014 Annual Conference on Extreme Science and Engineering Discovery Environment - XSEDE '14, 2014
ABSTRACT The OneOklahoma Friction Free Network (OFFN) is a dedicated multi-institutional research... more ABSTRACT The OneOklahoma Friction Free Network (OFFN) is a dedicated multi-institutional research-only “Science DMZ” network that connects the state’s academic Cyberinfrastructure resources – including all four high performance computing centers – that is available for use by all Oklahoma academics plus their collaborators. A project of the OneOklahoma Cyberinfrastructure Initiative (OneOCII), OFFN is based on a collaboration of three universities, a nonprofit, and Oklahoma’s research, education and government Regional Optical Network. OFFN consists of common configurations of Software Defined Networking infrastructure connected across a new set of optical links, at a minimum of 10 Gbps, and foreshadowing the state’s transition to widespread 100 Gbps research connectivity. OneOCII, the parent initiative of OFFN, is a statewide collaboration to offer shared access to resources, both technology and human, to enable the use of advanced computing by research and education statewide. To date, OneOCII has served 52 academic institutions and 48 non-academic organizations.
Uploads
Papers by George Louthan