@conference {587, title = {Verifying OAuth Implementations Through Encrypted Network Analysis}, booktitle = {Proceedings of the 24th ACM Symposium on Access Control Models and Technologies}, year = {2019}, publisher = {Association for Computing Machinery}, organization = {Association for Computing Machinery}, address = {New York, NY, USA}, abstract = {

Verifying protocol implementations via application analysis can be cumbersome. Rapid development cycles of both the protocol and applications that use it can hinder up-to-date analysis. A better approach is to use formal models to characterize the applications platform and then verify the protocol through analysis of the network traffic tied to the models. To test this method, the popular protocol OAuth is considered. Currently, formal models of OAuth do not take into consideration the mobile environment, and implementation verification is largely based on code analysis. Our preliminary results are two fold; we sketch an extension to a formal model that incorporates the specifics of the Android platform and classify OAuth device types using machine learning on encrypted VPN traffic.

}, keywords = {Android, authorization, formal models, network analysis, oauth}, isbn = {9781450367530}, doi = {10.1145/3322431.3326449}, url = {https://doi.org/10.1145/3322431.3326449}, author = {Talkington, Josh and Dantu, Ram and Morozov, Kirill} } @article {65, title = {A Virtual Environment for Network Testing}, journal = {J. Netw. Comput. Appl.}, volume = {32}, year = {2009}, pages = {184{\textendash}214}, abstract = {

The testing of network-based solutions demands a series of tedious tasks such as the deployment of the solution at different nodes and the configuration of different topologies. The manual execution of these tasks is very time consuming and a configurable environment to facilitate these tasks and consequently improve testing performance is desired. In this paper a virtual network environment that can be easily re-configured is presented to address this problem. The environment has been evaluated by a series of case studies: one dealing with the deployment and containment of a worm propagation attack and one dealing with detecting a denial of service attack. Three smaller case studies have also been developed. The results are a clear indication of the flexibility and usefulness of the virtual network environment.

}, keywords = {Re-configuration, Software testing, Virtual network}, issn = {1084-8045}, doi = {10.1016/j.jnca.2008.03.008}, url = {http://dx.doi.org/10.1016/j.jnca.2008.03.008}, author = {Fagen, Wade and Cangussu, Jo{\~a}o and Ram Dantu} } @article {43, title = {VoIP Security: Attacks and Solutions}, journal = {Information Security Journal: A Global Perspective}, volume = {17}, year = {2008}, pages = {114{\textendash}123}, abstract = {

Voice over IP (VoIP) technology is being extensively and rapidly deployed. Flexibility and cost efficiency are the key factors luring enterprises to transition to VoIP. Some security problems may surface with the widespread deployment of VoIP. This article presents an overview of VoIP systems and its security issues. First, we briefly describe basic VoIP architecture and its fundamental differences compared to PSTN. Next, basic VoIP protocols used for signaling and media transport, as well as defense mechanisms are described. Finally, current and potential VoIP attacks along with the approaches that have been adopted to counter the attacks are discussed.

}, keywords = {attack, defense mechanism, PSTN, Security, VoIP}, issn = {1939-3555}, doi = {10.1080/19393550802308618}, url = {http://dx.doi.org/10.1080/19393550802308618}, author = {Phithakkitnukoon, Santi and Ram Dantu and Baatarjav, Enkh-Amgalan} } @article {190, title = {VoIP: Are We Secured}, year = {2004}, month = {06/2004}, publisher = {VoIP: Are We Secured}, address = {Plano, TX, USA}, author = {Ram Dantu} } @article {191, title = {VoIP Security}, year = {2004}, month = {05/2004}, publisher = {3rd Annual Dallas Wireless Security Conference}, address = {Dallas, Texas, USA}, author = {Ram Dantu} } @article {189, title = {VoIP Security}, year = {2004}, month = {07/2004}, publisher = {Annual DFW Secret Service Agents Meeting}, address = {Dallas, Texas, USA}, author = {Ram Dantu} } @booklet {283, title = {Vision Algorithms For VLSI Wafer Probing}, year = {1990}, abstract = {

This paper deals with an important problem encountered in automating VLSI wafer probing. In this automation, vision is used for accurately guiding and lowering a probe to make contact with the wafer. In this paper, we discuss various algorithms used in measurement of the distance of the micro-manipulator from the wafer surface. In particular, we describe algorithms for alignment of consecutive frames of the wafer, separation of probe and wafer regions, and getting a clean image of the probe by eliminating traces of the background patterns. We also describe a three-level procedure for obtaining the proximity of the probe from the wafer. These algorithms are verified with the experimental data.

}, doi = {10.1117/12.969934}, url = {https://doi.org/10.1117/12.969934}, author = {Ram Dantu and Patel, Rajni and Dimopoulos, Nikitas and Al-Khalili, Asim} }