On Wed, 24 Sep 2014 11:12:55 -0400, El Mouatez Billah Karbab said:
I am student in Concordia university Montreal, and I have a course about network security. The professor of this course wants us to do a project in both the field of security research with some practical application, and I have chosen kernel linux.
I am looking for a problem to solve has a relation with network security and cryptography.
I will be grateful if you give me any hints or ideas for my project.
Unfortunately, this may be difficult - a lot of the interesting stuff (CISPO labelling, NFS labelling) is already done, and there's not a lot of low-hanging fruit that can be successfully attacked in the context of a 3-credit class by people who aren't already kernel hackers. (Most of the really interesting stuff is usually done in userspace) Something that could be interesting and doable in the time alloted is taking the 'ipisforif' iptables match, which is old code with serious locking problems, and fixing it so it can be upstreamed. http://comments.gmane.org/gmane.comp.security.firewalls.netfilter.devel/1587... Also, this: http://lists.netfilter.org/pipermail/netfilter-devel/2006-May/024613.html http://lists.netfilter.org/pipermail/netfilter-devel/2006-May/024611.html http://lists.netfilter.org/pipermail/netfilter-devel/2006-May/024612.html