SNE master student projects 2009 - 2010

2004-2005

Research Projects 1 and 2 (RP1 and RP2)

The course objective is to ensure that students become acquainted with problems from the field of practice through two short projects, which require the development of non-trivial methods, concepts and solutions. After this course, students should be able to:

Transform a roughly outlined problem into a carefully defined research question, supported by some level of reading up on the topic.
Establish a feasible project schedule for answering the question.
Conduct autonomous research to answer the question at hand, using literature searches, studying, experimentation and/or the development of software and hardware.
Present solutions to a diverse audience (experts as well as non-experts).
Defend solutions in debates.
Provide an appropriate report

TimeLine

RP1:

Wednesday Oct 8th 2009, 10h15: Introduction to the Research Projects.
Dec 16th 2009, 14h30: Detailed discussion on finally chosen subjects for RP1.
Monday Jan 4th - Friday jan 29th 2010: Research Project 1.
Wednesday Feb 3th 2010: Presentations RP1 in 645.C1.112 @ Science.

RP2:

Wednesday ... ..th 2010, 10h00: Detailed discussion on finally chosen subjects for RP2.
Monday May 31th - Friday Jun 25th (or Jul 2th) 2010: Research Project 2.
Wednesday Jun 30th: Presentations RP2 in 645.C0.110 @ Science.

Projects

Here is a list of student projects for Jan 2009 and/or June 2009. In a futile lightweight way to prevent spamming I replaced "@" by "=>" below.

(Find here the left over projects from this year.)
Color: yellow = currently chosen project. Light blue = project plan received. Light green = presentation received. Dark green = also report received.
Light purple = confidentiallity was requested.

#	title summary	supervisor contact students	R P	1 / 2
1	Self-adaptive Routing One of the basic underlying principles of Internet technology is the end-to-end principle. This principle leads to a model where the network is dumb and end-systems contain most of the intelligence for flow-control and traffic orchestration. If the convergence of voice, broadcasting and web and mail traffic continues, networks need to deliver better than best effort services. Therefore, the network has to make intelligent forwarding decisions for specific types of traffic. In this project, the student is challenged to implement a use-case for better than best effort routing. For this purpose, we will explore how current routing protocols such as OSPF or BGP and current monitoring tools such as NetFlow can be exploited. The strategy is as follows. The student writes a program that uses monitoring tools to gain insight in traffic characteristics. Based on the traffic characteristics, the program implements a decision process, which controls adaptations of OSPF or BGP. This leads to an elementary control loop of observe, decide and act for self-adaptive routing.	Rudolf Strijkers <strijkers=>uva.nl> Marvin Rambhadjan <marvin.rambhadjan=>os3.nl> Arthur van Kleef <arthur.vankleef=>os3.nl>	R P	2
2	Load simulation on [Open]Solaris systems To facilitate storage for students and employees of the UvA a combination of NFS/CIFS and ZFS is used. The storage server uses the Open Solaris OS, the clients are Linux Desktops. In this setup, performance issues have been identified. To identify/observe these performance bottlenecks various tools and methods are used. Identification of the issues can be done by observing current behavior and compare it to normal behavior. Normal behavior can be defined using load simulations in a test environment and creating is a base-line of ”normal system behavior”. Generating a correct base-line creates the need for a representative workload for the load simulations. How can the performance bottlenecks be monitored and identified on an OpenSolaris OS NFS server. What are realistic load simulations and create a base-line? Useful resources: http://opensolaris.org/os/community/dtrace/dtracetoolkit http://www.solarisinternals.com/wiki/index.php/FileBench http://jakarta.apache.org/jmeter	Jeroen Roodhart <j.r.roodhart=>uva.nl> Alain van Hoof <alain.vanhoof=>os3.nl>	R P	0
5	Evaluation of the Handle System to identify and retrieve digital objects. The Handle System is a general purpose distributed information system to identify and retrieve digital objects. AMPAS - the Academy of Motion Picture Arts and Sciences - is a partner in the CineGrid.org community organisation, of which the UvA is founding member. AMPAS suggested the interest in the applicability of the Handle System for the classification of its film archive. This research should focus on the pros and cons of the Handle System, list possible alternative and provide in case an implementation scenario for the AMPAS/CineGrid usecase. The results of this work would be a recommendations list to be presented to AMPAS. For more information see: http://www.ietf.org/rfc/rfc3650.txt http://www.handle.net/ http://www.oscars.org/	Paola Grosso <p.grosso=>uva.nl> Andy Maltz <amaltz=>oscars.org> Taarik Hassanmahomed <Taarik.Hassanmahomed=>os3.nl>	R P	2
7	Modern Age Burglars Until recently alarm systems where connected mostly through the public tele- phone network to their control room. This set up changed because of the wide availability of Internet and VoIP. A lot of Dutch ISPs provide Internet packages containing an Internet connection and VoIP. This combination is much cheaper then having the telephone line separated from the Internet connection. This is the main reason users decide to switch to VoIP and unsubscribe from their sep- arate telephone connection. To communicate between the alarm system and the control room over the internet a transceiver is needed. This device emulates the telephone signal from the alarm system over the internet to the control room. The transceiver is plugged into the alarm system and connected to a switch or router in the local network. Compared with the old telephone network which is point to point and not easy accessible, the internet is easier accessible by everyone. The protocols that are used on the internet where not developed with security as primary concern. Over 20 years of the internet it’s clear that security in the different layers of protocols are important. Is it possible to perform a burglary without getting noticed by influencing the communication between the alarm system and the control room?	Christiaan J. Roselaar <c.roselaar=>itsec.nl> Kevin de Kok <kevin.dekok=>os3.nl> Jeroen Klaver <jeroen.klaver=>os3.nl>	R P	1
10	Trustworthiness of Cyber Infrastructure for e-Science The 'trustworthiness' of systems in a large-scale Grid system depends on many factors. A Grid consists of many different systems, spread over multiple administrative domains. This has an impact on security and reliability of the system. For medical applications, a large degree of assurance is required that systems cannot be hacked, because the data and computations running on those systems can be very privacy sensitive. Hospitals are legally responsible for providing the highest possible degree of assurance that data concerning their patients remains well protected, which makes named aspects very important in practice. For more information, see for example http://www.science.uva.nl/~noordend/publications/ccgrid08.pdf In this project, you should analyze how you can construct machine-readable descriptions of systems in such a way, that it becomes possible to reason over this system's level of security, in particular the system's ability to withstand attack. For this, a description of all the software running on this machine, from the operating system version up to the version numbers of all relevant (network-accessible or otherwise security critical) software packages, and configuration aspects of the system, should be generated. Next, this description should be compared with information obtained from (public or private) vulnerability report databases. In this project, you should explore the possibilities for generating host descriptions, as well as potential difficulties in obtaining information from vulnerability databases and comparing this information with the generated host descriptions.	Guido van 't Noordende <guido=>science.uva.nl> Niels Monen <Niels.Monen=>os3.nl> Berry Hoekstra <Berry.Hoekstra=>os3.nl>	R P	1
13	Bright Cluster Manager inc. Failover Research A cluster consist usually of a master node (at least from the end user point of view) and multiple slave nodes. The master nodes functions as a single point of communication for the end user. Thereby it is also a communication point for the slave nodes as well. In this situation the master node is a single point of failure. When the master node is not working correctly, the whole cluster is not unusable. To prevent this single point of failure, master nodes are usually replicated by means of secondary master nodes. When the primary master node fails, one of the secondary master nodes can take over so the cluster is still usable. This mechanism is referred as failover. There are a lot of things to keep in mind to prevent data corruption and to provide a continuous service for the end users. For example a well known problem that can occur is a "split-brain". This means having duplicate instances of services running (two master nodes for example) which may cause data corruption on the shared storage. Bright Cluster Manager (formerly known as ClustervisionOS) is cluster management software which has implemented several mechanisms to prevent situations like the split-brain problem. There is no extensible research done on testing these mechanisms. Clustervision knows for a fact the mechanism works, but can they fail or be improved? The research project consists of evaluating the failover mechanism implemented in the Bright Cluster Manager. Some questions we have to answer: Is it possible to break the failover mechanism? Is it possible to improve the failover mechanism? How does the failover mechanism compare to other solutions ? For our research we will create a virtual cluster on which we will do our practical research. This cluster will run multiple master nodes and multiple slave nodes. We can achieve this in the SNE lab but we also have the opportunity to use hardware at Clustervision to create a more 'real' environment. Website: http://www.clustervision.nl	Martijn de Vries <martijn=>clustervision.com> Cosmin Dumitru <cosmin.dumitru=>os3.nl> Niek Timmers <niek.timmers=>os3.nl>	R P	1
15	Horse-ID In the EU, all domestic equidae (horse animals) should have a passport that identifies them. As of 1 July 2009, it is also mandatory to implant an RFID tag in the neck of the animal, which corresponds to the passport document. Reasons for the passport/RFID tagging are: * prevent/fight fraud in sports and trade * prevent/fight theft * keep record of health/ treatment by vets * record whether the horse is for human consumption --> when not, more kinds of medicine are allowed As one of the main goals of the (electronic) identification is to prevent fraud, it is key that its security is adequate. Insecurity may even open up fraud scenario's that would not have been possible without the system of RFID tags and passports. For more informations, please see: <http://www.pve.nl/wdocs/dbedrijfsnet/up1/ZggmrubIW_PVV9001_paardenpaspoort_LR.pdf>.	Jeroen van Beek <jeroen=>dexlab.nl> Vic Ding <vic.ding=>os3.nl> Laurens Bruinsma <laurens.bruinsma=>os3.nl>	R P	1
16	DFRWS Forensics Challenge 2010 The DFRWS 2010 Challenge primarily focuses on the development of tools and research techniques for analysing mobile phones. In particular the challenge provides the NOR and NAND flash memory of a Sony Ericsson K800i Cybershot. The challenge requires to analyse both memory files and recover any evidence like who was contacted, what messages were sent, pictures, videos, etc. http://www.dfrws.org/2010/challenge/index.shtml	Hans Wim Tinholt <Tinholt.HansWim=>kpmg.nl> Joeri Blokhuis <Joeri.Blokhuis=>os3.nl> Axel Puppe <Axel.Puppe=>os3.nl>	R P	2
18	Performance Measuring Performance monitoring seems currently more an art than a science. The network performance between two end hosts can be influenced and limited by a sheer number of parameters, including the capacities and badnwidth usage of individual links in the network, the memory buffer of routers and switches along the way, as well as the memory size, CPU power, bus speed, and hardware configuration of end hosts. Furthermore, runtime parameters such as number of parallel streams, protocols on the network and TCP window size greatly affect the achieved performance. Multiple tools exist today to measure the overall achieved performance. However, these tools sometimes report different measurements and hardly any tools exists to determine these individual parameters, which makes it hard to determine the cause of reduced network performance. There are two questions to this problem: Is it possible to determine individual parameters that influence the performance, especially for the (local) host but also the (remote) network? Is it possible to determine the cause of reduced network performance given these parameters?	Freek Dijkstra <Freek.Dijkstra=>sara.nl> Jeroen Vanderauwera <jeroen.vanderauwera=>os3.nl> Alex Giurgiu <alex.giurgiu=>os3.nl>	R P	2
19	Des-Plus encryptie on IP over the powernet: HomePlug Security This project will revolve around the security of homeplugs. These homeplugs are devices that connect network devices to each other across the powerlines. They can be a nice alternative if Wi-Fi is not powerful enough to penetrate thick walls or cover large distances. This powerline technology could also leak to uncontrolled areas (for example to neighbours), just like Wi-Fi which can also reach neighbours. While Wi-Fi is nearing a more mature stage, including the security of it, the homeplugs are still relatively young. For example the first homeplugs use 56-bit DES[1] encryption, this was considered outdated and insecure since 1998[2][3]. Because the homeplugs appear to be using weak cryptography we question the strength of the security measures, and this is exactly what is going to be investigated. The goal is to find flaws in these homeplugs that allow to eavesdrop on traffic meant to be private.	Christiaan J. Roselaar <c.roselaar=>itsec.nl> Jeroen Vanderauwera <jeroen.vanderauwera=>os3.nl> Axel Puppe <axel.puppe=>os3.nl>	R P	1
28	Security Virtual Infrastructure; Study possible security issues with a virtual infrastructure BELNET uses a virtual infrastructure based on VMware. The virtual infrastructure runs hosts that are "internal" and "public". The infrastructure uses a SAN to store the virtual machines. The virtual machines are a mix of Linux and Windows hosts. A virtual infrastructure that serves hosts in different logical network segments poses a security and maintenance challenge. The goal of this project is to write a report that contains recommendations for the setup of such an infrastructure. The report should contain recommendations on these topics : Firewalling of the host OS and remote management BELNET needs recommendations on the preferred setup for the firewalling of the host OS and the preferred ways for safe remote management. Recommendations for safe access to the central storage and recommendations on the backup and integrity check procedures. BELNET wants to create one or more 'virtual' DMZs for public hosts and one or more 'virtual LAN's for the internal hosts. The report should contain recommendations for the different scenarios (separate -non interconnected- Host OSes, shared Host OSes) on how to achieve this. Questions that needs to answered involve but are not limited to configuration of the roles for administrator accounts, network connections, shared resources (memory, disk) and virtual switches. Recommendations on how to monitor and audit the security state of the virtual infrastructure. BELNET does not expect that the writer of the report needs actual access to the virtual infrastructure. BELNET will provide the necessary information (like the current setup, current list of virtual machines, future use) and BELNET will provide necessary resources (like a server running VMware server and network access) to do some testing.	Lionel Ferette <lionel.ferette=>belnet.be> Jean-Christophe Real <jean-christophe.real=>belnet.be> Niels Monen <Niels.Monen=>os3.nl> Berry Hoekstra <Berry.Hoekstra=>os3.nl>	R P	1
29	Automatic Network Configuration in Clouds Cloud computing is gaining popularity with companies such as Amazon, Google and Microsoft, which already offer resources on demand. The cloud computing paradigm is built on virtualization of computing resources from physical devices. In general this means that virtual machines (VM) can be created and destroyed as requested. Automating virtual network connectivity between VMs is not yet addressed. The goal of this project is to investigate how automatic creation, configuration and teardown of virtual networks can be achieved using the Xen virtualization environment.	Rudolf Strijkers <strijkers=>uva.nl> Paola Grosso <p.grosso=>uva.nl> Alex Giurgiu <Alex.Giurgiu=>os3.nl>	R P
30	SSD performance. SARA recently bought six Solid State Drives (SSDs) in order to increase disk I/O for demanding applications. SSDs are more complex than traditional hard drives. They can read/write in 4K blocks, but can only erase blocks of 512K. Therefore SSDs have a sophisticated garbage collection system that constantly relocates disk blocks. TRIM is a new ATA command feature for SSDs that prevents excessive block movements. In this project the I/O performance of SSDs will be investigated. A choice of several performance parameters needs to be chosen and these parameters need to be investigated. Possible parameters are: The filesystem type (traditional versus ZFS). Hardware versus software RAID versus JBOD (Just a Bunch Of Disks). The effect of TRIM. The performance degradation caused by fragmentation, etc. Theoretical predictions should be compared with the experimental data.	Ronald van der Pol <Ronald.vanderPol=>rvdp.org> Daan Muller <Daan.Muller=>os3.nl> Sebastian Carlier <Sebastian.Carlier=>os3.nl>	R P	1
31	SURFnet Cloud Computing Design SURFnet is the primary supplier of advanced networking to Colleges, Universities and Research Institutions. They wish to optimize their computing capacity, they hope to realize this with the use of cloud computing. With the rising interest in cloud computing, a lot of new techniques are being developed and SURFnet wishes advice which technique best fits their needs. Computing overcapacity could be shared between SURFnet and educational institutions or network equipment could be shut down to save energy. Within this project we will research the best available options. SURFnet always searches for new techniques to improve their overall systems, if these are a great success they advice this to their institutions (like NREN), In the hope for better co ̈operation like possible with cloud computing. Which cloud computing platform meets the requirements best, set by SURFnet, to share resources between them and their institutions?	Rogier Spoor <Rogier.Spoor=>SURFnet.nl> Arthur Schutijser <arthur.schutijser=>os3.nl> Marvin Rambhadjan <marvin.rambhadjan=>os3.nl>	R P	1
32	SURFnet storage Design Ten behoeve van de toekomstige SURFnet cloud moet er voor de applicaties die binnen de cloud draaien voldoende storage beschikbaar zijn. Traditionele ICT-omgevingen maken gebruik van dure SAN/NAS storage voor hun opslag. Dit type storage biedt een zeer goede performance en is bijzonder geschikt voor gebruik door databases of VM-images. Echter voor diverse andere toepassingen is een SAN/NAS storage omgeving veel te prijzig. Daarnaast schalen de traditionele SAN/NAS omgevingen slecht. Opdracht: Ontwerp een nieuw storage systeem dat het mogelijk maakt om een single "mountpoint" storage aan te bieden waarin het vervolgens mogelijk is om data tussen zogenaamd storage tiers dynamische te verplaatsen. Bijvoorbeeld als een specifieke file veel geraadpleegt wordt dan moet deze file op een solid-state disk gehost worden echter als deze file nauwelijks geraadpleegt wordt moet deze naar een SATA-disk environment verplaatst worden. Er zijn inmiddels commerciele oplossingen die deze functionaliteit bieden binnen hun hardware domein. SURFnet is op zoek naar een oplossing die tussen verschillende hardware domeinen werkt.	Rogier Spoor <Rogier.Spoor=>SURFnet.nl> Jeroen Klaver <jeroen.klaver=>os3.nl> Roel van der Jagt <Roel.vanderJagt=>os3.nl>	R P	2
34	GPU-based password cracking KPMG gives to their clients as part of their advise also a recommendation on password length. With GPU-based password cracking on the horizon this advice may have to change. GPU-based password cracking is probably several times faster than CPU based cracking. So passwords can be faster compromised. KPMG’s central question is: ”what should we advise our clients regarding password length and complexity now that GPU-based password cracking has become a reality?” What are the theoretical differences between a CPU and GPU? What tools are available for GPU based cracking? What is the actual performance gain of GPU versus CPU-based cracking? What is the recommended password length for clients of KPMG? What is the recommended cracking strategy for KPMG?	Marc Smeets <Smeets.Marc=>kpmg.nl> Roel van der Jagt <roel.vanderjagt=>os3.nl> Marcus Bakker <marcus.bakker=>os3.nl>	R P	1
36	On Demand Grid on Cloud. Researchers that develop new and potentially disruptive technologies for Grid computing often do not get the required access privileges to Grids in order to test and deploy their work. Here, we investigate bootstrapping of an on-demand experimental Grid platform on the Amazon EC2 Cloud that provides researchers unlimited access. The Amazon EC 2 cloud supports programmatic control to create manage a large number of nodes. How can we use the Cloud to provide an on-demand experimental Grid platform of hundreds of nodes? The goal is to have a workable bootstrapping process to run our experiments.	Rudolf Strijkers <strijkers=>uva.nl> Paola Grosso <p.grosso=>uva.nl> Willem Toorop <willem.toorop=>os3.nl> Alain van Hoof <alain.vanhoof=>os3.nl>	R P	2
38	Secure services on TomTom PND's. TomTom earn revenue from after market sales of additional maps and services. To secure that revenue TT have implemented a new security model in their ARM 11 platforms. From power on / reset the microprocessor executes code from a ROM physically located in the CPU package. The ROM code is the root of a Chain of Trust (CoT) that verifies the integrity of each step in the boot process before passing control of the CPU to it. The CoT extends from the boot ROM to the RootFS In this project, the student is challenged to find weaknesses in the TomTom implementation and potential exploits that could allow the execution of abitrary code. Access to hardware, source codes and build tools will be provided by TomTom. The outcome of the project should be a detailed analysis of the TomTom implentation highlighting potential exploits & recommendations to enhance the exisiting implementation. The student should also survey modern CPUs and consider which are most suitable when implementing a CoT.	Jaap-Jan Boor <Jaap-Jan.Boor=>tomtom.com> Cosmin Dumitru <cosmin.dumitru=>os3.nl> Niek Timmers <niek.timmers=>os3.nl>	R P	2
39	Detecting illegal use in TomTom PND's. TomTom currently has a large installed base (millions) of users using the pre-ARM11, open platform, hardware. This current platform was not designed to be secure and provides relatively easy mechanisms to bypass the existing DRM system used to protect maps. In this project the student is challenged to find and demonstrate gaps in the design and provide recommendations to improve it without having the ability to update key components like hardware. TomTom will provide access to hardware, source code and build tools.	Jaap-Jan Boor <Jaap-Jan.Boor=>tomtom.com> Karl Robinson <Karl.Robinson=>tomtom.com> Daan Muller <daan.muller=>os3.nl> Arthur Schutijser <arthur.schutijser=>os3.nl>	R P	2
40	Mail client IPv6 interoperabillity problems. The depletion of IPv4 is apparent and the transaction to IPv6 still lacks behind. When IANA and the various Regional Internet Registries (RIR’s) run out of IPv4 addresses and only delegation of IPv6 addresses is possible we could face connectivity problems if we do not look for any issues beforehand. E-mail based communication is still one of the most important techniques used in electronic communication. The different protocols that are involved in e-mail transport (SMTP, POP3 and IMAP) could give IPv6 interoperability problems if various implementation do not follow standards. This project will look if there are any pitfalls if one would introduce IPv6 on e-mail transport mechanisms. The research question for this project is: Can we pinpoint connectivity problems if we would deploy IPv6 on various e-mail agents at a large worldwide scale?	Freek Dijkstra <Freek.Dijkstra=>sara.nl> Michiel Timmers <michiel.timmers=>os3.nl> Sebastian Carlier <Sebastian.Carlier=>os3.nl>	R P	2
41	HTTP session identification Two former OS3 students T. Kinkhorst and M. van Kleij did a research about detection of drive-by downloads [1]. This has developed the need to be able to identify HTTP sessions. An HTTP session can be defined as all the HTTP traffic that is generated from visiting one single webpage. Thus, not only the content of the main webpage, but also all content retrieved from other sources. For example, pictures and advertisements that are also part of the web-page. This research project will look into methods on how to identify HTTP sessions and how to separate each HTTP session. The application for this research is not limited to the previous research mentioned above. Many other applications can benefit from the ability to identify HTTP sessions. This solution to identify HTTP sessions can for example be used to analyze HTTP traffic. Since HTTP is a stateless protocol it is hard to identify each session from each other. Project goals: Define a way to identify HTTP sessions Develop a possible prototype. References [1] T. Kinkhorst and M. van Kleij. Busting the ghost on the web: real time de- tection of drive-by-infections, 2009. URL http://www.delaat.net/~cees/ sne-2008-2009/p46/report.pdf.	Bart Roos <roos=>fox-it.com> Marcus Bakker <marcus.bakker=>os3.nl> Kevin de Kok <kevin.dekok=>os3.nl>	R P	2

Contact

Cees de Laat

Presentations-rp1

Wednesday feb 3th in room 645.C1.112 at Science Park 904 NL-1098XH Amsterdam. Program:

09h55	Cees de Laat	Welcome, introduction.	#
10h00	Vic Ding & Laurens Bruinsma	Horse-ID	15
10h30	Cosmin Dumitru & Niek Timmers	Bright Cluster Manager inc. Failover Research	13
11h00	*	Pauze
11h15	Niels Monen & Berry Hoekstra	Security Virtual Infrastructure; Study possible security issues with a virtual infrastructure	28
11h45	Daan Muller & Sebastian Carlier	SSD performance.	30
12h15	Alain van Hoof	Load simulation on [Open]Solaris systems	2
12h35	*	Lunch
13h30	Arthur Schutijser & Marvin Rambhadjan	SURFnet Cloud Computing Design	31
14h00	Roel van der Jagt & Marcus Bakker	GPU-based password cracking	34
14h30	Alex Giurgiu	Automatic Network Configuration in Clouds	29
14h50	*	Pauze
15h15	Kevin de Kok & Jeroen Klaver	Modern Age Burglars	7
15h45	Jeroen van de Rauwera & Axel Puppe	Des-Plus encryptie on IP over the powernet: HomePlug Security	19
16h15	Cees de Laat & OS3 team	Evaluation
16h45	*	End

Presentations-rp2

I hereby would like to invite you to the annual RP2 presentations, where the SNE students will be presenting their research. Considering the wide variety of presentations the day promises to be very interesting, and we hope you will join us. At the end of the day there will be time for drinks and discussion.

Please register with delaat@uva.nl, and let us know with how many people you will be attending.

Wednesday June 30th, 2010 in room 645.C0.110 at Science Park 904 NL-1098 XH Amsterdam. Program:

9h55	Cees de Laat	Welcome, introduction.	#
10h00	Marcus Bakker, Kevin de Kok	HTTP session identification	41
10h30	Marvin Rambhadjan, Arthur van Kleef	Self-adaptive Routing	1
11h00	*	Pauze
11h15	Niels Monen, Berry Hoekstra	Trustworthiness of Cyber Infrastructure for e-Science *)	10
11h45	Joeri Blokhuis, Axel Puppe	DFRWS Forensics Challenge 2010	16
12h15	Jeroen Vanderauwera, Alex Giurgiu	Performance measurement tools	18
12h45	*	Lunch
13h35	Taarik Hassanmahomed	Evaluation of the Handle System to identify and retrieve digital objects.	5
14h00	Jeroen Klaver, Roel van der Jagt	SURFnet storage Design	32
14h30	Willem Toorop, Alain van Hoof	On Demand Grid on Cloud.	36
15h00	*	Pauze
15h20	Daan Muller, Arthur Schutijser	Detecting illegal use in TomTom PND's.	39
15h50	Cosmin Dumitru, Niek Timmers	Secure services on TomTom PND's.	38
16h20	Michiel Timmers, Sebastian Carlier	Mail client IPv6 interoperabillity problems.	40
16h50	Cees de Laat	Closing
17h00	*	Borrel in SNE lab

(*) = RP1 research presentation

Process

Selection

Preferably do not choose subjects that will be covered in subsequent courses.

working alone or in pairs

Preference for pairs because:

students can help each other when one gets stuck in a problem...

investigate more solutions in parallel

learn to collaborate
contribution of each student must be clear in report and presentation

However, doing an RP alone is also allowed
At the presentations pairs get 30 minutes, singles get 20 minutes.

Feedback during RP

During both RP1 as RP2 a group meeting on the third monday afternoon 15h00.

Purpose is to exchange progress information and discuss potential or real encountered problems.

fifth week

Presentation will be on wednesday, report must be submitted by friday of the fifth week.
Optionally week 5 of the RP in June is available to continue and finish research.

RP order

A student must successfully complete RP1 before starting RP2.
RP1 and RP2 can be done arbitrarily in January or June.
If failed for RP2, it is allowed to redo a RP2 at any time.

Evaluation

Advice from the supervisor about the research done on location.
Advice on presentation and report is welcome.
this information must be delivered by supervisor before end of fifth week.

report and presentation are evaluated by the OS3 team.
Marks for presentatie are determined before end of fifth week.
Evaluation and if needed corrections of report can take up to 6 weeks (pending holidays in july.
If rest is positive there is an opportunity to correct the report.

average and the mark for report must be 6 or more and the other marks must be more than or equeal 5.

Publication of results

the marks will be posted on blackboard.

Colloquia

We aim to schedule colloquia about research in computer science to give more context for the RP's.

Communication

All communication happens using email addresses from either OS3 or UVA.

Faculty process:

When applying for a bachelor or master certificate the student must submit an approved copy (with a mark 6 or higher) of the student’s bachelor or master thesis. Students are requested to submit their thesis for two reasons:
• De Faculty is obliged to register all theses in order to be - amongst others - accountable for the standard and assessment of its theses to the visiting Quality Assessment Committees of the disciplines.
• The theses can be a source of information to students and teachers.
These rules and regulations are applicable to all bachelor- and master theses submitted to the archives of the Faculty of Science. The student hands in the thesis at the Education Office when applying for a certificate.
The supervisor of the bachelor- or master final research project (and/or the Board of Examiners) may demand that the student hands over one or more hard copies of the thesis. This will be agreed on at the start of the final research project.
When applying for the certificate the student submits a digital copy of the thesis of the final research project. The student has to take care that this copy is either in PDF or Word (and not a mix of both for e.g. separate parts of the thesis, cover, index, appendices).
The supervisor of the final research project must take care of two things:
• The supervisor has to indicate whether the copy that is submitted is the true version that has been concluded with a satisfactory result
• The supervisor has to indicate (in agreement with the student) whether the thesis contains confidential information, and therefore must not be submitted to the - public – catalogue of the library. These theses will only be registered confidentially.
The Education Office only provides diplomas to students who have submitted a Thesis. Please note the role of the supervisor.
The Education Office sees to it that the approved document will be filed by the library of the Faculty of Science. The thesis will be stored on the faculty’s server, which also takes care of a back-up.
The library transfers the thesis to the on-line catalogue (UvA-DARE), unless the supervisor has indicated that there are strong objections against it because of its confidential character.
A student may decide not to actively contribute to publication on the internet. For that reason the student may request the Education Office not to publish the thesis, and the thesis will only be registered in the Faculty’s archives.
This procedure will be published on the programme website (<http://www.student.uva.nl>).
You will find the procedure attached (PDF).

TIPS

Make a formal scientific report front page (not: This ia a consultancy report...)
Check English spelling
it is always: "bla bla, which" or "bla bla that", so not "bla bla which" or "bla bla, that"
be careful when using it's, it is, etc. It is the cat that was castrated. Its balls are on the table.
when using it's or their or which or this, make sure it is clear to what it points.
make complete sentences.
do not add several sentences together separated with commas.
it is always "However,"
use formal language: "one can" in stead of "you can"
check for stupid errors like of <-> off
structure report, numbering, etc.
read: http://en.wikipedia.org/wiki/Scientific_method

SNE master student projects 2009 - 2010

Research Projects 1 and 2 (RP1 and RP2)

TimeLine

Projects

Self-adaptive Routing

Load simulation on [Open]Solaris systems

Evaluation of the Handle System to identify and retrieve digital objects.

Modern Age Burglars

Trustworthiness of Cyber Infrastructure for e-Science

Bright Cluster Manager inc. Failover Research

Horse-ID

DFRWS Forensics Challenge 2010

Performance Measuring

Des-Plus encryptie on IP over the powernet: HomePlug Security

Security Virtual Infrastructure; Study possible security issues with a virtual infrastructure

Automatic Network Configuration in Clouds

SSD performance.

SURFnet Cloud Computing Design

SURFnet storage Design

GPU-based password cracking

On Demand Grid on Cloud.

Secure services on TomTom PND's.

Detecting illegal use in TomTom PND's.

Mail client IPv6 interoperabillity problems.

HTTP session identification

Contact

Presentations-rp1

Presentations-rp2

Links

Process