Columbia University Network Security Lab
 
Projects:

This list provides an introduction to our past projects as well as ongoing efforts. Links to specific project webpages are provided.

Network Security & Survivability

SOS: Secure Overlay Services
SOS and WebSOS. SOS is a network overlay mechansim designed to counter the threats posed by Denial of Service attacks. SOS has been extended to provide WebSOS, a mechanism for protecting web servers from DoS.
DNAD: Distributed Network Anomaly Detection
Distributed Intrusion Detection seeks to identify global network threats through a cooperative framework and collaborative distributed mechanisms.
P2PID: Peer-to-Peer Intrusion Detection
P2P Intrusion Detection seeks to provide a platform for exchanging alert and other security critical information in a collaborative network of untrusted hosts.

Software & System Assurance

Autonomic Software Patching
The network worm vaccine architecture is a system that is designed to automatically patch and defend systems and networks under attack by worms or other network threats.
JDBC SQL Randomization (PachyRand)
PachyRand is an open-source extension to the PostgreSQL JDBC driver that implements SQL randomization in order to counter SQL injection attacks.

Operating Systems

FlowOS
The FlowOS project turns the operating system into a switch or signalling mechanism for data the needs to be processed at high (line) speed.
CamouflageFS
CamouflageFS is a cryptographic filesystem that employs a longer effective key length to increase confidentiality while reducing the performance cost of using this longer key.

Access Control & Security Management

GRIDLOCK
The GRIDLOCK project aims to ease the burden of security management by unifying the concepts of network, host, and application access control.
   
 

Sponsors of the NSL
Copyright © 2003 NSL
Last Updated: 4 August, 2003 16:59