| description: |
Modern information systems consist of components of different type and performance. This considerbly complicates the security design and analysis. Heterogenous systems are not only a challenge for the human intuition but also for the formal apparatus, which is used in security analysis and proofs today. Current theoretical methods are mostly applicable to the systems with a relatively small number of different components and to a limited number of attack scenarios. The aim of this project is to support the development of theories that are able to handle the main security aspects of heterogenous systems, as well as to develop suitable security solutions. In addition to developing new cryptographic protocols and primitives we plan to strengthen the links between security theory and practice by adopting traditional risk analysis methods for measuring security in a quantitative way. Studies are planned in the following main theoretical directions: (1) Practice-driven security notions for cryptographic primitives; (2) Constructing secure protocols from simple base primitives; (3) Primitives that are secure in arbitrary environments and configurations; and (4) Efficient constructions of cryptographic primitives; and also in the following practice-oriented directions: (5) Quantitative definitions and evaluation of security, (6) Security in systems with low performance, and (7) Developing efficient security management technologies. |