Centre for Research on Cryptography and Security
Faculty of Informatics
Masaryk University                      
Botanicka 68a                        
602 00 Brno - Czech Republic             E-mail: LastName at fi.muni.cz

GPG/PGP keys - operational (GPG), old (PGP)

Office hours: Mon 11:30-55 & Wed 13:30-55.

• Information Security and Cryptography (PV080 - in English).
• Authentication and Access Control (PV157 - taught in Czech - Autentizace a rizeni pristupu).
• Applied Cryptography (PV079 - in English).
• Advanced Topics in Information Technology Security (PA018 - in English).
• Postgraduate Seminar on IT Security and Cryptography (PA168 - in English).

• Examining certain Denial of Service attacks, where we analyzed the threat of DDoS-for-hire services to low and medium power cloud-based servers or home users, investigating popularity and availability of such services, their payment models, subscription pricing, complexity of the generated attack traffic and performance. Our paper Service in denial – clouds going with the winds was presented at the Network and System Security 2015. Our paper Analyzing traffic features of common standalone DoS attack tools came with a comparative analysis of traffic features of DoS attacks that were generated by state-of-the-art standalone DoS attack tools. We provide a classification of different attack traffic features, including utilized evasion techniques and encountered anomalies. We also proposed a new research direction for the detection of DoS attacks at the source end, based on repeated attack patterns recognition.

• Study of biometric authentication systems. A full version of a paper written with Zdenek Riha and presented at the Computer Information Systems and Industrial Management Applications 2010 conference, is available as the technical report FIMU-RS-2010-07. We have a book on biometric authentication (in Czech), where I took care of co-editing (and writing up some) chapters. An older summary paper reviewing major security and usability issues of biometric authentication systems was presented at the Communications and Multimedia Security Conference, summary of trends and visions was presented at the Information Security Summit 2002, and few other papers presented at other conferences. A good summarizing article Toward Reliable User Authentication through Biometrics appeared in IEEE Security & Privacy and an introductory technical report written also with Zdenek Riha is also available.

• Shouldersurfing attacks, namely in relation to the Chip&PIN card payment authorisation. We conducted an intensive study to compare the (in)security of signature- vs. PINpad-based payment authorisation by customers. More results came out in an IEEE Computer article, results from the first round of our experiments are available either as old slides or drafted lecture notes (final version can be found in the proceedings of 2005 Cambridge Workshop on Security Protocols). A book on these and related issues on authentication and authorization is available in Czech.

• Information privacy, where we undertook another privacy valuation experiment, results from which are prepared for a publication, following the attention of both expert and general public that has been drawn to our Value of Location Privacy paper (copyright ACM, presented at WPES 2006). This work has been undertaken in the framework of activities around the FIDIS Network of Excellence. Earlier on, we also examined ways to model the state of privacy in a given system - and possibly to use this model for evaluating various aspects of privacy. We started with a critical review of the older Common Criteria approach, provided for additional definitions of unlinkability and also refined the approach, revising also the Freiburg Privacy Diamond work of Alf Zugenmeier et al. Preliminary results of our work are in contributions to the Privacy and Security workshops of Ubicomp 2004 and Fourth IEEE International Conference on Data Mining, and the underlying considerations were presented at the Cambridge Workshop on Security Protocols. In my earlier work in this area, I also worked on analysing and reporting doctor-level prescribing information in the Xponent project with IMS Health. A paper (draft of which is available here) for Healthcare Informatics Journal 4.3-4 outlines some of the issues. Yet older work involves participation in drafting the Privacy Class of the Common Criteria, and also work relevant to the Canadian privacy scene that was presented as the Technical Report "Information Privacy in Canada (Legislation in the Face of Changing Technologies)", TR-246, School of Computer Science, Carleton University.

• The Global Internet Trust Register published by MIT Press in March 1999 contains the fingerprints of many important public keys used throughout the world, and you can read more on the effort here.

• IT Security Terminology, of course with focus on the Czech language. A part of this effort is oriented towards "English-Czech Terminology of IT Security" - a dictionary with Czech explanatory notes, published by the Computer Press, s.r.o. Praha 1996. Second issue is now on the horizon.

• Security Evaluation Criteria where did some work on the Communication and Privacy Classes for the Common Criteria v0.9 in cooperation with the Canadian Communications Security Establishment.