WORLDCOMP'09 Tutorial: Prof. Ray Kresman

Cryptographic Features and Applications: Java (C) Prof. Ray Kresman Bowling Green State University, USA Date: July 15, 2009 Time: 6:00 - 9:30 PM Location: Ballroom 2

Abstract



Java is already becoming the preferred language of choice for both stand-alone and web enabled applications. However, aspects of Java Cryptography are less well understood. Java Cryptography has relevance in network security, and in the design and deployment of real-life secure Java application by software developers. For example, the Java Cryptographic Extension (JCE) promises plug-in cryptographic libraries and seamless addition of a number of security components and services such as message digests, digital signatures, random number generators and algorithms for symmetric and public key cryptography.

This 3-hour tutorial provides an overview of network security and Java cryptographic library features. We will describe some of the cryptographic mechanisms, and their use, in Java. Where applicable, we will also discuss application of these techniques in C++. Attendees will benefit from the interaction and building/examining software components for securing applications.


Objectives of the Tutorial



• Understand basics of cryptography and their provisions in Java
• Be familiar with the role of Java security manager
• Know how to override methods of the security manager
• Know the methods and usage options of Java cryptographic modules
• Write cryptographic programs for computing digests and doing authentications
• Understand basics of SSL and their deployment in Java

Intended Audience



This tutorial is geared for information analysts, computer professionals and software developers who want to understand or write real-life secure applications.


Background of the Audience



Web surfing. Proficiency in object-oriented concepts in Java and/or C++ programming languages. Exposure to security concepts such as digests, encryption and certificates, while a plus, is not necessary.


Tutorial Outline


• Network Security (15 Minutes)
• Language overview (15 minutes)
  - Java Overview and relationship to C++
  - Applets & applications
  
• Java security (20 minutes)
  - Visibility and security features
  - Rights of application
  - Rights of Applet
  
• Java Cryptographic Extension (JCE) (20 minutes)
  - Security
  - What is JCE?
  - JCE components
  - JCE in applications and applets.
  
• Secure communication (20 minutes)
  - DES classes
  - Member functions
  - Implementation of DES
  - Java and C++ examples
  
• Key Exchange (20 minutes)
  - Key exchange b/w strangers
  - Diffie Hellman protocol
  - MD5 and Secure hash
  - Java and C++ examples
• Digest Algorithms (20 minutes)
  - Message digest class
  - Securing a digest in Java
  - MD5 and Secure hash
  - Java and C++ examples
  
• Secure Socket Layer (20 minutes)
  - How does it work?
  - Encapsulation
  
• Questions and Answers, Concluding Remarks (20 minutes)

Biography of Instructor



Ray Kresman is a Professor of Computer Science at Bowling Green State University, Bowling Green, OH. His applied computer science interests include computer security and web-to-database connectivity, three-tier architectures and secure internet technologies, and data warehousing. Dr. Kresman's work on distributed systems was supported by the National Science Foundation. He has published widely in the area of distributed systems and complexity of algorithms.



Dr. Ray Kresman
Professor of Computer Science
Bowling Green State University
Bowling Green, OH, USA
E-mail: rama@cs.bgsu.edu