Abstract:

Time is a fundamental building block for computing applications, and time synchronization is crucial for the security of many cryptographic protocols and the correctness of many distributed systems. Time on computer clocks is commonly set using the Network Time Protocol (NTP). This talk considers the security of the NTP specification and its reference implementation ntpd. We consider various threats to NTP that allow an attacker to either (a) alter time on computer systems that set their clocks using NTP (timeshifting attacks), or (b) prevent those systems from synchronizing their clocks (denial of service attacks). We also discuss protocols that can secure NTP against these classes of attacks.

Bio:

Sharon Goldberg is an associate professor in the Computer Science Department at Boston University. Her research uses tools from theory (cryptography, game-theory, algorithms), and networking (measurement, modeling, and simulation) to solve practical problems in network security. She received her Ph.D. from Princeton University in 2009, her B.A.Sc. from the University of Toronto in 2003, has worked as a researcher at IBM, Cisco, and Microsoft, as an engineer at Bell Canada and Hydro One Networks, and has served on working groups of the Federal Communications Commission (FCC) and the Internet Engineering Task Force (IETF). In 2014 she received two IETF/IRTF Applied Networking Research Prizes, an NSF CAREER Award, and a Sloan Research Fellowship.