Tulsa World: Grant helps TU tackle malware

MAKE US YOUR HOMEPAGE | Tuesday, February 09, 2010 | WIRELESS

Home > Business

Newspaper View Print this story

Comment

RSS

Bookmark

Grant helps TU tackle malware

By ROBERT EVATT World Staff Writer
Published: 3/11/2009 2:24 AM
Last Modified: 3/11/2009 4:10 AM

Viruses, trojans and other malware aren't just for computers anymore.

They're now infecting music players, cell phones, digital picture frames — anything that interacts with a computer, said John Hale, associate professor of computer science and director of the Institute for Information Security, or iSec, at the University of Tulsa.

"There are a lot more attack vectors, and one of the more interesting ones are through intelligent gadgets," he said.

Hale and iSec hope to fight back against malicious merchandise with the help of a $2.5 million federal grant. The money will pay for the creation of an information system security engineering and testing complex at TU.

Starting this summer, as many as five faculty and up to a dozen students will work on developing methods and hardware to secure devices from attacks and provide them to manufacturers within three years.

The insertion of malware into commercial devices occurs at some point between the manufacturing process and arrival on store shelves, Hale said.

Usually the attacks involve software loaded into the device, but there has been at least one case where a piece of hardware was installed into credit card processing machines.

Though attacks are uncommon, they're growing in number thanks to the increasing sophistication of both devices and hackers.

"It's now quite a bit easier to do, and you can have smaller organized-crime units doing this," Hale said.

To combat this, Hale hopes to create tools to quickly verify the state of the machine. This will likely include complex mathematical models to reflect the behavior of a healthy machine, then to detect differences in the behavior of infected machines.

The new complex will also help teach. Hale feels it's time for hardware and software makers to make security a bigger priority.

"We have to change the way computer scientists are trained," he said. "They have to think about security in the design process."

The three-year goal sounds high tech — Hale says it is — but due to the constant improvement of cyber vandals, he wants the new center to endure long past the goal.

"Security is a cat-and-mouse kind of game," he said. "The tools we develop now will still have utility, but the bad guys will come up with new tricks."

Robert Evatt 581-8447
robert.evatt@tulsaworld.com By ROBERT EVATT World Staff Writer

Newspaper View Print this story

Comment

RSS

Bookmark

Reader Comments

Show: Most Recent Comment First

Add your comment

0 comments have been made on this story so far. Tell us what you think below!

Reporting Comments

If you see a comment that violates our terms and conditions, please help us by clicking the "Report this Comment" link next to a comment. That will alert the web staff to review the comment. Thank you. -- Web Editor Jason Collington

Add Your Comment
In order to post a comment on this article, you must sign in to Tulsaworld.com. If you do not have a site account, you can create an account for free.