Difference between revisions of "Current Research"

From Simson Garfinkel
Jump to navigationJump to search
m
m
(One intermediate revision by the same user not shown)
Line 1: Line 1:
My primary area of research is in the area of document and media exploitation (DOMEX) and computer forensics. Projects that I am currently working on in this area include:
Since the mid 1980s, my primary research interests have centered on data, and specifically data security, privacy, and storage. In the 1990s my emphasis was largely on data security, largely driven by my experiences working ailityt an Internet service provider on Martha's Vineyard. From 1998-2003 I worked on network monitoring---first telephone networks, then IP networks---at Sandstorm Enterprises. From 2003 through 2014 I worked mostly on the digital forensics of stored data. Since 2015 I have mostly worked on privacy issues, exploring de-identification at NIST and now differential privacy at the US Census Bureau. I also have strong interest in usability.
* Developing techniques for [[ADOMEX|Automated Document and Media Exploitation]] (ADOMEX). Current exploitation projects involve:
** Rapid disk analysis --- techniques for determining the content of a terabyte hard drive in 2-3 minutes, rather than 2-3 hours or 2-3 days.
** User profiling --- techniques for automatically figuring out who was the primary use of a hard drive, who were the other users, what the user did with the files, who they contacted, and their social network.
* Creating the [[Real Data Corpus]], a large-scale unclassified corpus of real information from real computer users all over the world. Most work done in computer forensics today is done with little scientific controls on personal data belonging to the experimenter. We are creating a corpus of real and realistic data that can be used for research and training. The Real Data Corpus currently has more than 2000 images of disk drives and USB memory sticks. This corpus is available for us by researchers with minimal restrictions. I am also exploring the use of anonymization techniques to create corpora for use by researchers.


As of April 2019, I was working on these specific research projects:
* Completing NIST 800-188, de-identifying government datasets.
* A paper on the philosophy of differential privacy


The remainder of my research is in the field of usability and security. Here I am involved in several projects, including:
* An evaluation of best practices for email security, with a special emphasis on the S/MIME and Domain Keys standards.
* An on-going evaluation in the use of human subjects in computer security research.


Other information that you will find here includes:
Other information that you will find on this site includes:
* [[Students|My students]]
* [[Students|My students]]
* [[Unpublished|Unpublished research papers]]
* [[Unpublished|Unpublished research papers]]
* [[:Category:Resources|Resources for students]]
* [[:Category:Resources|Resources for students]]
* [http://www.forensicswiki.org/wiki/Open_Research_Topics Open Research Projects] in computer forensics.
* [http://www.forensicswiki.org/wiki/Open_Research_Topics Open Research Projects] in computer forensics.

Revision as of 15:33, 27 April 2019

Since the mid 1980s, my primary research interests have centered on data, and specifically data security, privacy, and storage. In the 1990s my emphasis was largely on data security, largely driven by my experiences working ailityt an Internet service provider on Martha's Vineyard. From 1998-2003 I worked on network monitoring---first telephone networks, then IP networks---at Sandstorm Enterprises. From 2003 through 2014 I worked mostly on the digital forensics of stored data. Since 2015 I have mostly worked on privacy issues, exploring de-identification at NIST and now differential privacy at the US Census Bureau. I also have strong interest in usability.

As of April 2019, I was working on these specific research projects:

  • Completing NIST 800-188, de-identifying government datasets.
  • A paper on the philosophy of differential privacy


Other information that you will find on this site includes: