MCSoft Security Solutions
 
Home
Projects
Overview

Cryptography
ECDSA

Network
Shellcodes
CIS

Security Projects
Unterleitner

MCSoft Projects - Cryptography Overview

Elliptic Curve Cryptography
Project for the optimization of the Elliptic Curve Digital Signature Algorithm (ECDSA). The execution time of the ECDSA was drastical reduced by speed optimization of the Projective Elliptic Scalar Multiplication and the needed functions of the binary field arithmetic.

   

MCSoft Projects - Network Overview

Polymorphic Shellcodes
Common methods for the recognition such as Signature Scanning, integrity examination, or string scanning fail at the detection of polymorphic code. Modern virus scanners use an advanced heuristic analysis and a behavior analysis of the code. Through the precise analysis of polymorphic shell codes as well as polymorphic viruses we will search for better suitable methods. In the Anomaly Detection field some algorithms can achieve even better detection results. At this time we are working on the training of neural networks, hidden Markov models as well as Fuzzy Logic.

Computer Immune System for Intrusion and Virus Detection
The model of the computer immune system (CIS) is based on several mechanisms of the human immune system. It is shown how effective the implementation of the CIS is at detecting malicious code in packets of the network traffic. The targets for this system are Internet worms, different kinds of viruses and shellcodes which are possibly polymorph. Today's computer systems are running (mostly) one kind of operating system which makes it easy for a new virus to spread rapidly. Independently evolving immune systems will make computers in a network more diverse. Because of that, systems will become more robust to today's common threats. The implementation in this work is intended to shield computers in a LAN from new network driven attack attempts. Each network node is equipped with a sensor which is used to train an individual set of detectors. This set evolves in response to the network traffic at this node. Therefore, the set of detectors will be different in each node. That makes the whole network system highly diverse.
Applying the CIS with multiple independent sensors across a network ensures a distributed detection system which is not centrally or hierarchically controlled. The implementation takes advantage of the network intrusion detection system called Snort. It provides the basis for processing the network packets.

 

Security Projects

Security Projects (Unterleitner)
On the page several projects from the computer security domain are presented. Most of them result in a highly secure ActiveX component which is excellent suitable for the development of software.