Ray Tuttle
1/19/2009
The Institute for Information Security, a leader in the field of information assurance, continues to provide cutting-edge research and solutions for government and private industries.iSec, at the University of Tulsa, has spent more than a decade working with the government to protect critical assets. Today, iSec looks to expand, tackling a variety of digital issues emerging not only from the government and military, but also from the private sector. “Information security is something that has become a staple,” said John Hale, faculty director of iSec and a professor in the Department of Computer Science at TU. “The university has demonstrated it is capable of serving the government,” said David Greer, executive director of the Institute for Information Security. “Now, we want to expand into the private sector.” In the next few weeks, TU expects to make several announcements regarding the expansion of research efforts, the creation of new research initiatives and the formation of new public and private partnerships. One of the new research initiatives on which iSec is focused is verifying the behavior of embedded systems with security functionality. “To accomplish this, iSec researchers will test and verify that the software, hardware and firmware-encoded instructions are doing what they are supposed to, and only what they are supposed to do. We want to make sure that there are no hidden back doors for hackers or saboteurs,” Hale said. Another area of expertise for the institute, based at Keplinger Hall on the TU campus, targets critical infrastructure protection. Closely tied to enterprise security, this research area focuses on securing the SCADA or control systems that run a variety of industries, including oil and gas, water treatment and electric power distribution. “The institute draws on the expertise of multiple disciplines within the university,” said Greer, “including computer science, electrical engineering, mechanical engineering, business and law.” Over the last dozen years, professors and students working for TU’s Center for Information Security have mostly performed sensitive work for the federal government, so they could not advertise their accomplishments and expertise. Now, TU has turned the center into the Institute for Information Security, or iSec, and is not only continuing its work with the government, but is also now emphasizing working for the private sector. The Institute received $2.5 million from a National Defense Authorization Act and Defense Appropriations Act appropriation in October to focus on information security research, including the creation of a Security Engineering and Testing Complex, Hale said. The money is putting in motion a new capability that will enable researchers to evaluate the security of software, hardware and the chips that reside on the hardware for the government, military and critical infrastructure industries. The funds will also allow the institute to enhance and add new facilities that will help iSec offer information security and digital forensics training to law enforcement, government employees, military personal, and the private sector. The institute is dedicated to establishing Tulsa as a hotbed for information security research and development, said Greer. “By combining the strengths and talents of multiple academic departments, iSec possesses the ability to look at all sides of a problem and develop practical solutions.” Greer said. iSec takes information security to another level, testing theories and making them work, Greer said. “Next, our Security Engineering and Testing Complex will allow us to more fully explore the possibilities of the computer-machine interface and will create a natural fit with our mechanical and electrical engineering faculty and researchers,” he said. Recently, the institute has made technology transfer and commercialization a priority, finding ways to turn innovations found in the lab into viable solutions in the marketplace.
|