Tag Archives: Peeter Laud

Cybersecurity related bachelor’s and master’s theses in University of Tartu 2024 (June)

June 4 room 2045:

Time: 11:45
Student: Uuna Saarela (Computer Science MSc)
Title: Practical Zero-Knowledge within the European Digital Identity Framework: Implementing Privacy-Preserving Identity Checks
Supervisor: Peeter Laud, Chris Brzuska
Reviewer: Härmel Nestra

Time: 13:15
Student: Andres Jõgi (Cyber Security MSc)
Title: Quantitative Analysis on Vulnerability to Electronic Business Identity Theft Among Estonian Companies
Supervisor: Mari Seeba, Tarmo Oja, Markko Merzin
Reviewer: Danielle Melissa Morgan

Time: 14:00
Student: Edgar Miadzieles (Cyber Security MSc)
Title: Digital Twin and Blockchain-Driven Firmware Updates for the Internet of Vehicles
Supervisor: Mubashar Iqbal
Reviewer: Mariia Bakhtina

Time: 14:45
Student: Alar Paas (Cyber Security MSc)
Title: Testing Wireless Security Alarm Systems from the Estonian Market
Supervisor: Danielle Melissa Morgan
Reviewer: Jürgen Laks

June 5 room 2034:

Time: 14:00
Student: Ojus Virendra Tudavekar (Software Engineering MSc)
Title: Blockchain and Digital Twin-based Approach for Securing Water Supply Infrastructure
Supervisor: Mubashar Iqbal
Reviewer: Abasi-amefon Obot Affia

June 6 room 2045:

Time: 10:15
Student: Kerli Markus (Conversion Master in IT MSc)
Title: Awareness of Phishing Attacks: A Case Study of Balt-Hellin OÜ Employees
Supervisor: Kristjan Krips
Reviewer: Alo Peets

Time: 11:45
Student: Kadri Koit (Conversion Master in IT MSc)
Title: Describing the Requirements of the Estonian Information Security Standard (E-ITS) in Public Procurements
Supervisor: Kristjan Krips
Reviewer: Mari Seeba

Time: 14:45
Student: Beata Sillat (Computer Science BSc)
Title: Automated Grading and Grade Uploading in Moodle Environment: A “Computer Security” Case Study
Supervisor: Alo Peets
Reviewer: Eero Vainikko

June 7 room 2034:

Time: 14:45
Student: Diana Šramova (Computer Science BSc)
Title: A Survey of Machine Learning Methods and their Applicability for Security Analysis
Supervisor: Raimundas Matulevičius
Reviewer: Faiz Ali Shah

June 7 room 2045:

Time: 13:45
Student: Ilona Peedosk (Computer Science BSc)
Title: Comparative Analysis of the European Union Digital Operational Resilience Act Based on Information Security Standard ISO/IEC 27001
Supervisor: Sander Saveli, Heili Orav
Reviewer: Linda Rosenkron

June 10 room 2045:

Time: 9:15
Student: Nataliia Pabat (Innovation & Technology Management MA)
Title: Security Risk Management in Teleoperated Driving
Supervisor: Raimundas Matulevičius, Abasi-amefon Obot Affia
Reviewer: Tambet Matiisen

Time: 10:00
Student: Ijeoma Faustina Ekeh (Innovation & Technology Management MA)
Title: A Recommendation Model for Security Risk Management in Car-Sharing Scenarios
Supervisor: Raimundas Matulevičius
Reviewer: Mariia Baktina

Time: 10:45
Student: Herman Rull (Computer Science MSc)
Title: Towards Practical Privacy-preserving Data Analysis with Intel TDX-based Sharemind HI
Supervisor: Armin Daniel Kisand, Raimundas Matulevičius
Reviewer: Tarmo Oja

Time: 13:00
Student: Sander Truu (Computer Science BSc)
Title: Tool-Supported Privacy Analysis of Smart Parking
Supervisor: Mariia Bakhtina, Raimundas Matulevičius
Reviewer: Pille Pullonen Raudvere

June 11 room 2048:

Time: 13:15
Student: Anett Pärismaa (Computer Science BSc)
Title: Researching the Patterns of Estonian Language Passwords and Compiling a Password Dictionary
Supervisor: Alo Peets
Reviewer: Kristjan Krips

June 11 room 2010:

Time: 13:45
Student: Pirgit Pajoma (Conversion Master in IT MSc)
Title: The Use of Blockchain in Public e-services on the Example of Estonia
Supervisor: Jan Villemson, Kristjan Krips
Reviewer: Armin Daniel Kisand

June 12 room 2034:

Time: 10:15
Student: Erki Külaots (Computer Science MSc)
Title: Two-Party Multi-Point Function Secret Sharing
Supervisor: Toomas Krips
Reviewer: Sven Laur

June 13 room 2039:

Time: 13:00
Student: Uku Parts (Computer Science BSc)
Title: Assessing the Security of a Smart Lock
Supervisor: Danielle Melissa Morgan
Reviewer: Alo Peets

June 13 room 2045:

Time: 11:15
Student: Karl Mumme (Computer Science BSc)
Title: Surveillance System for Additional Security of Tactical Objects
Supervisor: Erkki Laaneoks
Reviewer: Andres Namm

June 14 room 2034:

Time: 13:30
Student: Risto Voor (Computer Science BSc)
Title: Third-party Libraries Security Tools Analysis and Improvements
Supervisor: Kristiina Rahkema
Reviewer: Maj-Annika Tammisto

Links:
https://cs.ut.ee/en/content/thesis-deadlines-and-guidelines

Cybersecurity related bachelor’s and master’s theses in University of Tartu 2022 (June)

Leave a reply

The defences are taking place on the first and second week of June.

May 31 (online):

Time: 09:15
Student: Xuejun Wu (Computer Science MSc)
Title: Security in Remote Update of Medical Devices
Supervisor: Tuomas Aura, Arnis Paršovs
Reviewer: Denizalp Kapisiz

May 31 (online):

Time: 13:00
Student: Kert Tali (Computer Science BSc)
Title: Parallel and Cloud-Native Secure MultiParty Computation
Supervisor: Riivo Talviste, Pelle Jakovits
Reviewer: Eero Vainikko

Time: 13:45
Student: Karl Hannes Veskus (Computer Science MSc)
Title: Privacy-preserving data synthesis using trusted execution environments
Supervisor: Liina Kamm, Sven Laur
Reviewer: Arnis Parsovs

June 3 (online):

Time: 11:45
Student: Geitrud Pank (Computer Science BSc)
Title: Lab Package: Mobile application security testing
Supervisor: Dietmar Pfahl, Hina Anwar
Reviewer: Alejandra Duque-Torres

June 3 (online):

Time: 10:30
Student: Olivier Levasseur (Cyber Security MSc)
Title: Model-Driven Engineering of Blockchain Oracles
Supervisor: Mubashar Iqbal, Raimundas Matulevičius
Reviewer: Vimal Kumar Dwivedi

Time: 11:15
Student: Ekaterina Zhuchko (Cyber Security MSc)
Title: Formal Analysis of Non-Malleability for Commitment Schemes in EasyCrypt
Supervisor: Denis Firsov, Sven Laur
Reviewer: Peeter Laud

Time: 12:00
Student: Sanam Nisar (Cyber Security MSc)
Title: Defining Blockchain-Based Techniques for Privacy Conflict-Resolution in CrossOrganizational Processes for E-Health Systems
Supervisor: Aleksandr Kormiltsyn, Alex Norta, Vimal Dwivedi
Reviewer:

Time: 12:45
Student: Anel Abylkassymova (Cyber Security MSc)
Title: Machine Learning Method For Detecting Botnet Attacks Originated From The Iot Networks
Supervisor: Hayretdin Bahsi, Sven Nõmm, Raimundas Matulevicius
Reviewer: Risto Vaarandi

Time: 13:30
Student: Gediminas Milašius (Cyber Security MSc)
Title: Integration Analysis of Various eID Authentication Solutions Used in the Private Sector of Estonia
Supervisor: Arnis Paršovs
Reviewer: Kristjan Krips

Time: 14:15
Student: Elizabete Liene Šterna (Cyber Security MSc)
Title: Security Architecture of the Latvian eParaksts mobile
Supervisor: Arnis Paršovs
Reviewer: Inguss Treiguts

June 7:

Time: 12:15
Student: Anna Shamritskaya (Innovation and Technology Management MSc)
Title: Information security assessment in a startup
Supervisor: Mari Seeba, Raimundas Matulevičius
Reviewer: Juliia Trabskaja

Time: 9:15
Student: Anita Sarv (Computer Science BSc)
Title: Implementation of multifactor authentication in Bank of Estonia
Supervisor: Toomas Krips
Reviewer: Jürmo Mehine

Time: 10:45
Student: Mark Robin Kalder (Computer Science BSc)
Title: Bug bounty programs and ethical hacking
Supervisor: Alo Peets, Margus Niitsoo
Reviewer: Anne Villems

Time: 12:00
Student: Allan Alikas (Computer Science BSc)
Title: Privacy preserving anonymization software
Supervisor: Sulev Reisberg
Reviewer: Liina Kamm

June 8:

Time: 10:00
Student: Semjon Kravtšenko (Computer Science BSc)
Title: The Estonian Mobile-ID implementation on the SIM card
Supervisor: Arnis Paršovs
Reviewer: Jürgen Niinre

June 9:

Time: 13:00
Student: Kristjan Pühvel (Computer Science BSc)
Title: Password cracking and hashing functions on the example of UT accounts
Supervisor: Alo Peets
Reviewer: Kristjan Krips

June 10:

Time: 14:30
Student: Kalmer Keerup (Computer Science BSc)
Title: Implementation of an user access control respecting file server
Supervisor: Tarmo Oja, Heili Orav
Reviewer: Mart Oruaas

Links:
https://cs.ut.ee/sites/default/files/2022-06/Defence7.6.22.pdf
https://cs.ut.ee/sites/default/files/2022-06/Kaitsmine%2008.06.2022_0.pdf
https://cs.ut.ee/sites/default/files/2022-06/Kaitsmine%2010.06.2022_0.pdf

Cyber Security master’s theses defense in TalTech/UT (August 2020)

Leave a reply

Defences of master theses of Cyber Security curriculum on August 17th 2020. The defences will take place online.

Time: 9:30
Student: Tarmo Oja
Title: X-ROAD TRUST MODEL AND TECHNOLOGY THREAT ANALYSIS
Supervisor: Ahto Buldas, Mari Seeba
Reviewer: Aleksandr Lenin

Time: 10:10
Student: Nikita Snetkov
Title: PRACTICAL IMPLEMENTABILITY OF TWO-PARTY ECDSA SIGNATURE SCHEMES
Supervisor: Ahto Buldas
Reviewer: Aleksandr Lenin

Time: 10:50
Student: Liubomyr Kushnir
Title: BENCHMARKING OF POST-HOC LOCAL INTERPRETABILITY METHODS FOR CLASSIFYING MALICIOUS TRAFFIC
Supervisor: Hayretdin Bahsi, Sven Nõmm
Reviewer: Pavel Tšikul

Time: 12:00
Student: Timm Jeff E Luyten
Title: RAISING CYBER AWARENESS WITH NON-IT PROFESSIONALS WORKING IN A HOME OFFICE ENVIRONMENT USING A PILOT VIDEO GAME CONCEPT
Supervisor: Birgy Lorenz
Reviewer: Sten Mäses

Time: 12:40
Student: Andrew J Roberts
Title: Development of a cybersecurity evaluation test bed for autonomous self-driving vehicles
Supervisor: Olaf Maennel
Reviewer: Tobias Eggendorfer

Time: 13:20
Student: Ilkin Huseynov
Title: THE ANALYSIS OF THE CURRENT CYBER SECURITY ACTIONS TAKEN IN THE E-GOVERNMENT OF AZERBAIJAN AND PROPOSAL OF THE IMPROVEMENT PLAN
Supervisor: Mika Kerttunen
Reviewer: Adrian Venables

Time: 14:15
Student: Andres Pihlak
Title: CONTINUOUS DOCKER IMAGE ANALYSIS AND INTRUSION DETECTION BASED ON OPEN-SOURCE TOOLS
Supervisor: Mauno Pihelgas
Reviewer: Kristian Kivimägi

Time: 14:55
Student: Eduard Iltšuk
Title: Two-Party ECDSA Protocol for Smart-ID
Supervisor: Arnis Paršovs
Reviewer: Jan Villemson

Time: 15:35
Student: Aivo Toots
Title: Zero-Knowledge Proofs for Business Processes
Supervisor: Peeter Laud
Reviewer: Marlon Dumas, Janno Siim

Cyber Security master’s theses defense in TalTech (May/June 2020)

Leave a reply

Defence of master theses of Cyber Security curriculum on May 28th 2020 online

Time: 10:00
Student: Cheng-Yu Lu
Title: Analyse Journal of XFS Filesystem for Assisting in Event Reconstruction
Supervisor: Pavel Laptev
Reviewer: Hayretdin Bahsi

Time: 10:40
Student: Simon Victor Jean Laurent Brun
Title: Comprehensive Digital Forensics Analysis of Smart Home Environment
Supervisor: Hayretdin Bahsi, Pavel Tšikul
Reviewer: Matthew Sorell

Time: 11:20
Student: Shaymaa Mamdouh Mohammed Radwan Khalil
Title: Analysis of Windows 10 Hibernation File
Supervisor: Hayretdin Bahsi, Pavel Tšikul
Reviewer: Matthew Sorell

Time: 12:40
Student: Kevin Patric Schmidt
Title: EXTRACTION OF FORENSIC ARTIFACTS FROM HOME ROUTERS
Supervisor: Hayretdin Bahsi
Reviewer: Matthew Sorell

Time: 13:20
Student: Weerarathna Patabendige Samoda Abeydeera
Title: Fileless Malware Detection in Cloud Environment Using Machine Learning Techniques
Supervisor: Alejandro Guerra Manzanares
Reviewer: Sven Nõmm

Defence of master theses of Cyber Security curriculum on May 29th 2020 online

Time: 10:00
Student: Andreas Jürimäe
Title: The Effectiveness of DMARC and Usage of DMARC in Estonian Government Institutions
Supervisor: Kieren Lovell
Reviewer: Dan Heering

Time: 10:40
Student: Liubomyr Kushnir
Title: Benchmarking of Post-hoc Local Interpretability Methods for Classifying Malicious Traffic
Supervisor: Hayretdin Bahsi, Sven Nõmm
Reviewer: Alejandro Manzanares

Time: 11:20
Student: Huu Phuc Nguyen
Title: Research Method in Detecting Swapped Face Image and Video Forgery
Supervisor: Matthew Sorell
Reviewer: Pavel Tšikul

Time: 12:40
Student: Rohin Sambath Kumar
Title: Analyzing the Face Value of Fake Accounts in Online Social Networks
Supervisor: Birgy Lorenz
Reviewer: Adrian Venables

Time: 13:20
Student: Mykyta Zaitsev
Title: Developing learning pathways for massive open online courses by the example of the rangeforce cyberskills training platform
Supervisor: Olaf Maennel, Margus Ernits
Reviewer: Birgy Lorenz

Time: 14:00
Student: Martin Chmelař
Title: Utilizing Mitre att&ck to Create Adversary Reports of Live-fire Cybersecurity Exercises for Feedback Purposes
Supervisor: Olaf Maennel
Reviewer: Rain Ottis

Time: 14:40
Student: Ilkin Huseynov
Title: The Analysis of the Current Cyber Security Actions Taken in the e-Government of Azerbaijan and Proposal of the Improvement Plan
Supervisor: Mika Juha Kerttunen
Reviewer: Adrian Venables

Time: 15:20
Student: Belgin Tastan
Title: Comparing the Security Assessment Models on the Detection of Critical Vulnerabilities in Web Services
Supervisor: Mika Kerttunen, Andro Kull
Reviewer: Pavel Tšikul

Defence of master theses of Cyber Security curriculum on June 1st 2020 in ICT-315 (closed defences) & online

Time: 10:00
Student: Juri Kononov
Title: Network Policy Management is Service Rich Environment
Supervisor: Olaf Maennel, Jaan Priisalu
Reviewer: Mart Järvi, Uko Valtenberg

Time: 10:40
Student: Maria Toomsalu
Title: Vulnerability Analysis of an Organisation on the basis of a Semi-Formal Model
Supervisor: Peeter Laud, Jaan Priisalu
Reviewer: Aleksandr Lenin

Time: 11:20
Student: Kaarel Allemann
Title: Effects of the New Integration Design on the KOLT Security
Supervisor: Ahto Buldas
Reviewer: Aleksandr Lenin

Time: 14:00
Student: Fernando Gonzalo Bauzá Sáinz De Baranda
Title: How to Mess with Log Collectors and Analyze their Response in Microsoft Networks with an Example of the Elk Stack
Supervisor: Toomas Lepik
Reviewer: Risto Vaarandi

Time: 14:40
Student: Andres Pihlak
Title: Continuous Docker Image Analysis and Intrusion Detection Based on Open-source Tools
Supervisor: Mauno Pihelgas
Reviewer: Kristian Kivimägi

Time: 15:20
Student: Maarja-Liisa Tammepõld
Title: Securing the centralized logging system by the example of Elasticsearch
Supervisor: Toomas Lepik
Reviewer: Risto Vaarandi

Defence of master theses of Cyber Security curriculum on June 2nd 2020 online

Time: 10:00
Student: Kadri Cahani
Title: Aligning Information Security Risks with Strategic Goals
Supervisor: Hayretdin Bahsi
Reviewer: Kaie Maennel

Time: 10:40
Student: Martin Leppik
Title: Improving AWS S3 Security at a Medium-sized Company: Challenges and Solutions
Supervisor: Hayretdin Bahsi
Reviewer: Tiia Sõmer

Time: 11:20
Student: Karl Lubja
Title: Systematic Generation of Cyber Attack Scenarios Against A Ship
Supervisor: Hayretdin Bahsi
Reviewer: Olaf Maennel

Time: 12:40
Student: Illia Petrash
Title: User Behaviour During Covid-19 from the Perspective of a Telco Server
Supervisor: Olaf Maennel
Reviewer: Toomas Lepik

Time: 13:20
Student: Rishikesh Ram Shankaran
Title: Comparative Study on Perception and Preparedness of a User Towards Cybersecurity Threats in IoT and Mobile Devices
Supervisor: Stefan Sütterlin
Reviewer: Eneken Tikk

Time: 14:00
Student: Ilja Šmarjov
Title: OWASP secure coding practices checklist and training: assessment of effectiveness in a technology company
Supervisor: Olaf Maennel
Reviewer: Margus Ernits

Time: 14:40
Student: Marvin Uku
Title: Evaluation method for smart home and smart grid authentication protocols
Supervisor: Olaf Maennel
Reviewer: Hayretdin Bahsi

Time: 15:20
Student: Sania Akif Malik
Title: The Effect of Interindividual Differences in Metacognitive Accuracy on Cybersecurity Decisions
Supervisor: Stefan Sütterlin
Reviewer: Mika Juha Kerttunen

Cyber Security master’s theses defense in TalTech (May 2019)

Leave a reply

May 27th, 2019, Akadeemia Tee 15a, Room ICT-411.

Time: 10:00
Student: Olesia Yaremenko
Title: Skills Evaluation of Participants of Cybersecurity Exercises on the Example of a Virtual Hands-on Forensic Lab
Supervisor: Sten Mäses
Reviewer: Kaie Maennel

Time: 10:40
Student: Saber Yari
Title: Creating Cyber Security Exercises for Open Source Intelligence and Reverse Engineering
Supervisor: Sten Mäses
Reviewer: Birgy Lorenz

Time: 11:20
Student: Heleri Aitsam
Title: Teaching Cyberethics and Measuring Cyberethical Behavior in a Classroom Setting
Supervisor: Sten Mäses
Reviewer: Birgy Lorenz

LUNCH 12:00-12:40

Time: 12:40
Student: Jaana Metsamaa
Title: Framework for Measuring and Maximizing Security Feature Impact in Business to Business SaaS Products
Supervisor: Andro Kull
Reviewer: Erwin Orye

Time: 13:20
Student: Bitchiko Kodua
Title: Creating Labs for Web Application Security and Methods of Defining Difficulty Levels
Supervisor: Hayretdin Bahsi
Reviewer: Kaie Maennel

BREAK 14:00-14:30

Time: 14:30
Student: Jorge Alberto Medina Galinda
Title: Generation of Malware Behavioral Datasets in a Medium Scale IoT Networks
Supervisor: Hayretdin Bahsi
Reviewer: Olaf Maennel

Time: 15:10
Student: Roman Kononov
Title: Macintosh Operating System Exploitation and Intrusion Prevention
Supervisor: Toomas Lepik
Reviewer: Olaf Maennel

Time: 15:50
Student: Kristine Hovhannisyan
Title: Applying Confidence-Building Measures to Cyber Conflict: Computer Emergency Response Cooperation and Cyber Espionage
Supervisor: Eneken Tikk; Olaf Maennel
Reviewer: Anna-Maria Osula

May 28th, 2019, Akadeemia Tee 15a, Room ICT-315.

Time: 10:00
Student: Alberto Zorrilla Garza
Title: Beaconleak: Use and Detection of 802.11 Beacon Stuffing as a Covert Channel
Supervisor: Olaf Maennel
Reviewer: Hayretdin Bahsi

Time: 10:40
Student: Krishna Vaishnav
Title: Analysis of WhatsApp Data Obtained before the General Election (Lok Sabha) 2019 in India
Supervisor: Olaf Maennel
Reviewer: Adrian Venables

Time: 11:20
Student: Alessandro Mirani
Title: Unintentional Cybercrime
Supervisor: Tiia Sõmer
Reviewer: Sten Mäses

LUNCH 12:00-12:40

Time: 12:40
Student: Abenezer Berhanu Weldegiorgis
Title: Developing National Cybersecurity Strategy for Ethiopia
Supervisor: Mika Kerttunen
Reviewer: Tiia Sõmer

Time: 13:20
Student: Tambet Paljasma
Title: Validating Docker Image and Container Security Using Best Practices and Company Policies
Supervisor: Margus Ernits
Reviewer: Alejandro Guerra Manzanares

BREAK 14:00-14:20

Time: 14:20
Student: Kirke Pralla
Title: Creation of Freely Accessible Interactive Training Materials for Secure Android Development
Supervisor: Margus Ernits
Reviewer: Alejandro Guerra Manzanares

Time: 15:00
Student: Annika Aavaste
Title: How to Improve Data Protection and Information Security in Local Governments Using GDPR compliant training
Supervisor: Eneken Tikk
Reviewer: Matthew Sorell

Time: 15:40
Student: Randel Raidmets
Title: A Comparative Analysis of Open-Source Full Packet Capture Software Solutions
Supervisor: Mauno Pihelgas
Reviewer: Risto Vaarandi

May 29th, 2019, Akadeemia Tee 15a, Room ICT-315.

Time: 10:00
Student: Nikita Kuznietsov
Title: Researching Underground Forums to Improve Fraud Detection at TransferWise [RESTRICTED defense]
Supervisor: Jaan Priisalu; Sandra Horma
Reviewer: Aleksandr Lenin

Time: 10:40
Student: Kristopher Ryan Price
Title: Analysis of the Impact of Poisoned Data within Twitter Classification Models
Supervisor: Jaan Priisalu; Sven Nõmm
Reviewer: Kieren Lovell

Time: 11:20
Student: Andreas Jürimäe
Title: The Security Implications of DMARC in Estonian Goverment Institutions Based on Phishing Attacks in Cambridge University
Supervisor: Kieren Lovell
Reviewer: Hayretdin Bahsi

LUNCH 12:00-12:40

Time: 12:40
Student: Vita Krainik
Title: Distributed Consensus Problems and Protocols: a Systematic Literature Review
Supervisor: Ahto Buldas
Reviewer: Alex Norta

Time: 13:20
Student: Deniz Basar
Title: Uniqueness Criteria for Blockchain Type Distributed Ledgers
Supervisor: Ahto Buldas
Reviewer: Jaan Priisalu

BREAK 14:00-14:20

Time: 14:20
Student: Henry Okere
Title: Analysis of a Node-based Integrity Attack on Networked SCADA Power Plant
Supervisor: Hayretdin Bahsi
Reviewer: Ahto Buldas

Time: 15:00
Student: Mostafa Hadi
Title: Making the shift from DevOps to DevSecOps at Distribusion Technologies GmbH
Supervisor: Hayretdin Bahsi
Reviewer: Kieren Lovell

Time: 15:40
Student: Joanna Rose Castillon Del Mar
Title: Automated Photo Categorization for Digital Forensic Analysis Using a Machine Learning-Based Classifier
Supervisor: Hayretdin Bahşi; Leo Mršić; Krešimir Hausknecht
Reviewer: Matthew Sorell

May 30th, 2019, Akadeemia Tee 15a, Room ICT-315.

Time: 10:00
Student: Kayla Marie Cannon
Title: America’s Panopticon: Privacy Implications of Facial Recognition By Law Enforcement
Supervisor: Mika Kerttunen
Reviewer: Hayretdin Bahsi

Time: 10:40
Student: Andres Antonen
Title: Securing an Automated Code Testing System
Supervisor: Ago Luberg
Reviewer: Toomas Lepik

Time: 11:20
Student: Jessica Ai Truong
Title: Evaluating the Detection Accuracy of JA3 and JA3S in Security Monitoring of SSL Communication
Supervisor: Hayretdin Bahsi
Reviewer: Toomas Lepik

LUNCH 12:00-12:40

Time: 12:40
Student: Tornike Nanobashvili
Title: Improving the Use of a Cyber-Insurance Product in Georgia: the Example of Commercial Banks
Supervisor: Eneken Tikk; Mika Kerttunen
Reviewer: Hayretdin Bahsi

Time: 13:20
Student: Arefeh Fathollahi Kalkhoran
Title: Data Breach: NIST and GDPR
Supervisor: Eneken Tikk
Reviewer: Mika Kerttunen

BREAK 14:00-14:20

Time: 14:20
Student: Chinmay Khandekar
Title: Cookie Security and its Implementation in the Light of GDPR and E-Privacy Regulation
Supervisor: Eneken Tikk
Reviewer: Rain Ottis

Time: 15:00
Student: Nurbanu Konayeva
Title: Application of Active Learning for Botnet Detection
Supervisor: Hayretdin Bahsi; Sven Nõmm
Reviewer: Risto Vaarandi

Time: 15:40
Student: Raul Ezequiel Jimenez Haro
Title: Forensic Tool to Study and Carve Virtual Machine Hard Disk Files
Supervisor: Pavel Laptev
Reviewer: Hayretdin Bahsi

May 31th, 2019, Akadeemia Tee 15a, Room ICT-315.

Time: 10:00
Student: Maarja Heinsoo
Title: Implications of Information Security Culture on Risk Management – Case of a Technology Company
Supervisor: Hayretdin Bahsi
Reviewer: Kaie Maennel

Time: 10:40
Student: Prabin Krishna Subedi
Title: Forensics Analysis of Client-Side Artifacts in Cloud-Based Applications
Supervisor: Hayretdin Bahsi
Reviewer: Matthew Sorell

Time: 11:20
Student: John Chukwufumnanya George
Title: Analysis of the Impact of Bank Verification Number on Financial Security in Nigeria and Potential Cyber Threat Through Social Engineering
Supervisor: Andro Kull
Reviewer: Sten Mäses

LUNCH 12:00-12:40

Time: 12:40
Student: Roman Müller
Title: Analysis of the Estonian X-tee network based on centralized log data [RESTRICTED defence]
Supervisor: Jaan Priisalu; Sven Nõmm
Reviewer: Peeter Laud

Time: 13:20
Student: Ragnar Kobin
Title: A Model for Evaluating State Cyber Security Exercises
Supervisor: Rain Ottis; Kim Joonsoo
Reviewer: Tiia Sõmer

Time: 14:20
Student: Sasan Rezaeifars
Title: Hands-on Lab for Teaching Security Misconfiguration and Broken Authentication
Supervisor: Sten Mäses
Reviewer: Andro Kull

Smart-ID paper: Server-Supported RSA Signatures for Mobile Devices

Leave a reply

Abstract
We propose a new method for shared RSA signing between the user and the server so that: (a) the server alone is unable to create valid signatures; (b) having the client’s share, it is not possible to create a signature without the server; (c) the server detects cloned client’s shares and blocks the service; (d) having the password-encrypted client’s share, the dictionary attacks cannot be performed without alerting the server; (e) the composite RSA signature “looks like” an ordinary RSA signature and verifies with standard crypto-libraries. We use a modification of the four-prime RSA scheme of Damgård, Mikkelsen and Skeltved from 2015, where the client and the server have independent RSA private keys. As their scheme is vulnerable to dictionary attacks, in our scheme, the client’s RSA private exponent is additively shared between server and client. Our scheme has been deployed and has over 200,000 users.

The paper was published in proceedings of the conference ESORICS 2017, Oslo, Norway, September 11-15, 2017.

The paper contains several pages of cryptographic proofs. The RSA key generation involves “l-safe” primes, which is not a standard practice in generating RSA primes. This is worrisome, especially after it became known that the flaw in ID card was caused by other instance of nonstandard RSA prime generation.

Links:
https://link.springer.com/chapter/10.1007/978-3-319-66402-6_19

Cyber Security master’s theses defense in Tallinn University of Technology (May 2017)

Leave a reply

Monday, May 29, 2017, Akadeemia Tee 15a, Room ICT-315.

Grades received (random order): 5, 4, 4, 3, 3, 3, 2, 2.

Time: 10:00
Student: Kristjan Oja
Title: Cyber Security Awareness For IT Students Through Practical Assignments
Supervisor: Sten Mäses
Reviewer: Tiia Sõmer

Time: 10:40
Student: Sander Arnus
Title: Providing guaranteed log delivery and proof value of logs
Supervisor: Risto Vaarandi
Reviewer: Tiit Hallas

Time: 11:20
Student: Bolaji Ayoola Ladokun
Title: An Analytical Approach to Characterization of Targeted and Untargeted Attack in Critical Infrastructure Honeypot
Supervisor: Hayretdin Bahsi
Reviewer: Risto Vaarandi

Time: 12:00-13:00 – Lunch

Time: 13:00
Student: Iryna Bondar
Title: LUDROID: Evaluation of Android Malware Detection Tools and Techniques and Development of a First Line of Defense For the User
Supervisor: Emin Caliskan
Reviewer: Toomas Lepik

Time: 13:40
Student: Seifollah Akbari
Title: A New Method for the SYNful Knock Attack Implementation
Supervisor: Truls Ringkjob
Reviewer: Bernhards Blumbergs

Time: 14:20
Student: Safak Tarazan
Title: GPS Spoofing/Jamming Resilient Mini UAV Implementation Strategy
Supervisor: Truls Ringkjob
Reviewer: Juhan Ernits

Time: 15:20
Student: Danielle Morgan
Title: Security of Loyalty Cards Used in Estonia
Supervisor: Rain Ottis, Arnis Paršovs
Reviewer: Aleksandr Lenin

Time: 16:00
Student: Katrin Kukk
Title: Ensuring the digital continuity of e-Estonia in different crisis scenarios
Supervisor: Rain Ottis
Reviewer: Jaan Priisalu

Tuesday, May 30, 2017, Akadeemia Tee 15a, Room ICT-315.

Grades received (random order): 4, 4, 3, 3, 2, 1.

Time: 10:00
Student: Christopher David Raastad
Title: Euro 2.0 – Securing an Ethereum Crypto Fiat Currency System
Supervisor: Alex Norta
Reviewer: Raimundas Matulevicius

Time: 10:40
Student: Mobolarinwa Taofeek Balogun
Title: Comparative Analysis of Industrial IoT and HealthCare System IoT for Cyberterrorism
Supervisor: Hayretdin Bahsi
Reviewer: Ahto Buldas

Time: 11:20
Student: Chengxiang Wang
Title: Classification of Black-Box Security Reductions and Oracle Separation Techniques
Supervisor: Ahto Buldas
Reviewer: Peeter Laud

Time: 12:00-13:00 – Lunch

Time: 13:00
Student: Celik Neslisah
Title: Anomaly Detection Using Locked Shields Logs
Supervisor: Olaf Maennel
Reviewer: Mauno Pihelgas

Time: 13:30
Student: Sophio Sakhokia
Title: Developing a Cyber Security Master Programme for Georgia
Supervisor: Tiia Sõmer
Reviewer: Olaf Maennel

Time: 14:20
Student: Zaghum Awan
Title: Analytical Comprehensive Approach to Cyber Laundering and its Solutions
Supervisor: Tiia Sõmer
Reviewer: Andro Kull

Study on the lifecycle of cryptographic algorithms 2016

2 Replies

cybernetica_ria_crypto_algorithms_report

This study is a natural continuation of three previous studies conducted in 2011, 2013 and 2015. The fourth version of cryptographic algorithms life cycle study published on June 9, has more than 10 authors and has 163 reference source. The 2016 report is the first one in its sequence to be written in English, because the study is unique on a global scale, and the previous versions has been of great international interest.

The foreword of the report has been written by Anto Veldre:

The Dutch DigiNotar case in 2011 demonstrated the hard choices a country faces if a PKI supporting its government’s IT systems is compromised. [..] Therefore, it was decided in 2011 to assemble a scientific task force to analyse the problems and risks that reliance on cryptography is posing on the sustainable functioning of our society.

Among the usual topics in cryptography, there is quite revealing section “Cryptographic protocols over radio connection”. For example, there the authors find that Estonian public transportation cards are vulnerable to various kinds of Denial of Service and cloning attacks:

The transportation cards in Tallinn are built on MIFARE Classic, whereas in Tartu MIFARE Ultralight C cards are used. However, even though both of the cards support cryptographic authentication, this functionality is not used. In both cases, the protocol running between the card and the reader is essentially the same, consisting of transmitting the card’s unique ID and a signature. [..] While this measure prevents unauthorised parties from issuing new cards, it does not stop the card cloning attack. [..] Cloning a card that carries a monthly ticket causes direct financial loss to the transportation service provider and must hence be urgently addressed.

Even though the ID fields of transportation cards are not writeable, other fields may be. This is for example the case with Tartu bus cards that allow e.g. the signature field to be overwritten by a standard app working on a regular NFC-capable smartphone. As a result, the card will become invalid, giving us a potential Denial of Service attack.

The report analyzes different radio frequency card technologies used for physical access control. There are many problems – transparency issues, use of weak cryptography or no cryptography at all. The authors have also interviewed Hardmeier and G4S to study deployment issues. Some of the deployment issues revealed are quite disturbing:

Interview with a company installing NFC-based access control systems revealed that it is common practice to use same keys also in several installations, making e.g. door keys of one company work at the door of another company, too.

Links:
https://www.ria.ee/public/RIA/Cryptographic_Algorithms_Lifecycle_Report_2016.pdf
https://www.ria.ee/ee/eriik-2018-valmis-2016-aasta-kruptograafiliste-algoritmide-elutsukli-uuring.html
https://blog.ria.ee/ria-aastakonverentsi-i-sessiooni-otseblogi/