Project GRACE - Revision history

Pinfold at 04:58, January 25, 2023

2023-01-25T04:58:44Z

← Older revision		Revision as of 04:58, January 25, 2023
Line 29:		Line 29:
	* Provide a secure scheme rooted in hardware with counter-measures against the crippling side-channel attacks.		* Provide a secure scheme rooted in hardware with counter-measures against the crippling side-channel attacks.
	\|demonstration=Project GRACE provides the end-to-end security architecture. It shall be deployed in a live environment with active user loads to the cloud and within the cloud.		\|demonstration=Project GRACE provides the end-to-end security architecture. It shall be deployed in a live environment with active user loads to the cloud and within the cloud.
			\|chapter=Practical Guide: IoT Cybersecurity & Privacy
	\|supercluster=Wireless		\|supercluster=Wireless
	\|year=2018		\|year=2018

Pinfold at 05:26, July 12, 2022

2022-07-12T05:26:32Z

← Older revision		Revision as of 05:26, July 12, 2022
Line 2:		Line 2:
	\|image=gctc-proj-grace.jpg		\|image=gctc-proj-grace.jpg
	\|team=QuantumCIEL, Cyber Security Agency of Singapore, Government Technology Agency of Singapore, VIBE Cybersecurity, University of Glasgow, Ark Holding, Longway AI, TechNarwhals, Wisecure Technologies, Cyber Security Agency of Singapore, Government Technology Agency of Singapore		\|team=QuantumCIEL, Cyber Security Agency of Singapore, Government Technology Agency of Singapore, VIBE Cybersecurity, University of Glasgow, Ark Holding, Longway AI, TechNarwhals, Wisecure Technologies, Cyber Security Agency of Singapore, Government Technology Agency of Singapore
	\|leader=Dr KangWei Woo		\|leader=KangWei Woo
	\|imagecaption=Project Grace – Towards a Secure Internet		\|imagecaption=Project Grace – Towards a Secure Internet
	\|municipalities=Singapore		\|municipalities=Singapore

Pinfold at 03:08, April 7, 2022

2022-04-07T03:08:17Z

← Older revision		Revision as of 03:08, April 7, 2022
Line 6:		Line 6:
	\|municipalities=Singapore		\|municipalities=Singapore
	\|status=Development		\|status=Development
	\|website=https://drive.google.com/open?id=1TFx7np8HeO2EPJgPMQQ3D4i5nZBOoDLt ~~Tech Jam Presentation~~		\|website=https://drive.google.com/open?id=1TFx7np8HeO2EPJgPMQQ3D4i5nZBOoDLt
			\|download=100 A 6 Project GRACE QuantumCIEL - GCTC 20180620.pdf
	\|description=The present Public Key Infrastructure (PKI) is known to be inadequate for the current scale of the Internet and the situation is exacerbated with the advent of IoT. Project GRACE (Graceful Remediation with Authenticated Certificateless Encryption) implements a security architecture using an advanced form of pairing-based cryptography called Verifiable Identity-based Encryption (VIBE) to provide a simple, scalable and secure key management for the cloud services, the IoT and indeed the Critical Information Infrastructure (CII) which are otherwise vulnerable to the extant and new cyber-physical attacks.		\|description=The present Public Key Infrastructure (PKI) is known to be inadequate for the current scale of the Internet and the situation is exacerbated with the advent of IoT. Project GRACE (Graceful Remediation with Authenticated Certificateless Encryption) implements a security architecture using an advanced form of pairing-based cryptography called Verifiable Identity-based Encryption (VIBE) to provide a simple, scalable and secure key management for the cloud services, the IoT and indeed the Critical Information Infrastructure (CII) which are otherwise vulnerable to the extant and new cyber-physical attacks.
	\|challenges=* PKI is costly to operate. Client certificates are rarely used in the applications due to costs.		\|challenges=* PKI is costly to operate. Client certificates are rarely used in the applications due to costs.

Pinfold at 03:06, April 7, 2022

2022-04-07T03:06:45Z

← Older revision		Revision as of 03:06, April 7, 2022
Line 1:		Line 1:
	{{ActionCluster		{{ActionCluster
	\|image=gctc-proj-grace.jpg		\|image=gctc-proj-grace.jpg
	\|team=QuantumCIEL, Cyber Security Agency of Singapore, Government Technology Agency of Singapore, VIBE Cybersecurity, University of Glasgow, Ark Holding, Longway AI, TechNarwhals, Wisecure Technologies]		\|team=QuantumCIEL, Cyber Security Agency of Singapore, Government Technology Agency of Singapore, VIBE Cybersecurity, University of Glasgow, Ark Holding, Longway AI, TechNarwhals, Wisecure Technologies, Cyber Security Agency of Singapore, Government Technology Agency of Singapore
	\|leader=Dr KangWei Woo		\|leader=Dr KangWei Woo
	\|imagecaption=Project Grace – Towards a Secure Internet		\|imagecaption=Project Grace – Towards a Secure Internet
	\|municipalities=Singapore~~<!--Cyber Security Agency of Singapore, Government Technology Agency of Singapore-->~~		\|municipalities=Singapore
	\|status=Development		\|status=Development
	\|website=https://drive.google.com/open?id=1TFx7np8HeO2EPJgPMQQ3D4i5nZBOoDLt Tech Jam Presentation		\|website=https://drive.google.com/open?id=1TFx7np8HeO2EPJgPMQQ3D4i5nZBOoDLt Tech Jam Presentation
Line 31:		Line 31:
	\|year=2018		\|year=2018
	\|title=Graceful Remediation with Authenticated Certificateless Encryption		\|title=Graceful Remediation with Authenticated Certificateless Encryption
	~~<!--~~
	\|email=kangwei.woo@quantumciel.com		\|email=kangwei.woo@quantumciel.com
	\|replicability=The existing infrastructure, the standards, the protocols are largely retained with minor modification to ensure continued inter-operability.		\|replicability=The existing infrastructure, the standards, the protocols are largely retained with minor modification to ensure continued inter-operability.
	}}		}}

Pinfold at 03:05, April 7, 2022

2022-04-07T03:05:28Z

← Older revision		Revision as of 03:05, April 7, 2022
Line 1:		Line 1:
	{{ActionCluster		{{ActionCluster
	~~\| title = Graceful Remediation with Authenticated Certificateless Encryption~~		\|image=gctc-proj-grace.jpg
	<!--\| team = [http://www.quantumciel.com QuantumCIEL], [https://www.csa.gov.sg Cyber Security Agency of Singapore], [https://www.tech.gov.sg Government Technology Agency of Singapore], [https://vibecyber.com/ VIBE Cybersecurity], [https://www.gla.ac.uk/schools/computing/staff/syeloongkeoh/ University of Glasgow], [http://arkholding.com.sg Ark Holding], [https://www.longwayai.com Longway AI], [https://www.technarwhals.com TechNarwhals], [http://www.quantumciel.com Wisecure Technologies]		\|team=QuantumCIEL, Cyber Security Agency of Singapore, Government Technology Agency of Singapore, VIBE Cybersecurity, University of Glasgow, Ark Holding, Longway AI, TechNarwhals, Wisecure Technologies]
	~~\| leader = [mailto:kangwei.woo@quantumciel.com Dr KangWei Woo]~~		\|leader=Dr KangWei Woo
	\| image = gctc-proj-grace.jpg		\|imagecaption=Project Grace – Towards a Secure Internet
	~~\| imagecaption = Project Grace – Towards a Secure Internet~~		\|municipalities=Singapore<!--Cyber Security Agency of Singapore, Government Technology Agency of Singapore-->
	~~\| municipalities = [https://www.csa.gov.sg Cyber Security Agency of Singapore], [https://www.tech.gov.sg Government Technology Agency of Singapore]-->~~		\|status=Development
	\| team = QuantumCIEL, Cyber Security Agency of Singapore, Government Technology Agency of Singapore, VIBE Cybersecurity, University of Glasgow, Ark Holding, Longway AI, TechNarwhals, Wisecure Technologies]		\|website=https://drive.google.com/open?id=1TFx7np8HeO2EPJgPMQQ3D4i5nZBOoDLt Tech Jam Presentation
	\| leader = Dr KangWei Woo		\|description=The present Public Key Infrastructure (PKI) is known to be inadequate for the current scale of the Internet and the situation is exacerbated with the advent of IoT. Project GRACE (Graceful Remediation with Authenticated Certificateless Encryption) implements a security architecture using an advanced form of pairing-based cryptography called Verifiable Identity-based Encryption (VIBE) to provide a simple, scalable and secure key management for the cloud services, the IoT and indeed the Critical Information Infrastructure (CII) which are otherwise vulnerable to the extant and new cyber-physical attacks.
	~~\| email = kangwei.woo@quantumciel.com~~		\|challenges=* PKI is costly to operate. Client certificates are rarely used in the applications due to costs.
	~~\| image = gctc-proj-grace.jpg~~		* PKI is difficult to operate. Many implementations are error-prone because of the certificates.
	\| imagecaption = Project Grace – Towards a Secure Internet		\|solutions=* VIBE as a core key management of the open Internet is nominally 70% less costly, relative to PKI.
	\| municipalities = Singapore
	<!--Cyber Security Agency of Singapore, Government Technology Agency of Singapore-->
	\| status = Development
	\| website =
	~~\| download~~ = [https://drive.google.com/open?id=1TFx7np8HeO2EPJgPMQQ3D4i5nZBOoDLt Tech Jam Presentation]
	\| description =
	The present Public Key Infrastructure (PKI) is known to be inadequate for the current scale of the Internet and the situation is exacerbated with the advent of IoT. Project GRACE (Graceful Remediation with Authenticated Certificateless Encryption) implements a security architecture using an advanced form of pairing-based cryptography called Verifiable Identity-based Encryption (VIBE) to provide a simple, scalable and secure key management for the cloud services, the IoT and indeed the Critical Information Infrastructure (CII) which are otherwise vulnerable to the extant and new cyber-physical attacks.
	\| challenges =
	* PKI is costly to operate. Client certificates are rarely used in the applications due to costs.
	* PKI is difficult to operate. Many implementations are error-prone because of the certificates.
	\| solutions =
	* VIBE as a core key management of the open Internet is nominally 70% less costly, relative to PKI.
	* VIBE is certificate-less.		* VIBE is certificate-less.
	* Project GRACE integrates the VIBE capabilities directly into the protocol (i.e. TLS) and the systems for greater efficiency.		* Project GRACE integrates the VIBE capabilities directly into the protocol (i.e. TLS) and the systems for greater efficiency.
	\| requirements =		\|requirements=The Critical Information Infrastructure (CII) requires protection and resiliency against frequent and massive cyber-physical attacks. It is not coincidental that confidentiality, integrity, and availability (cyber space) are closely related to privacy, safety, and reliability (physical space) respectively.
	The Critical Information Infrastructure (CII) requires protection and resiliency against frequent and massive cyber-physical attacks. It is not coincidental that confidentiality, integrity, and availability (cyber space) are closely related to privacy, safety, and reliability (physical space) respectively.
	* Data at rest. Each node in the network (IoT, VM, etc) is assigned an immutable digital identity in the private key stored in the secure hardware. As there is an efficient key management, all critical data (in the files, directories, databases, etc.) are transparently encrypted.		* Data at rest. Each node in the network (IoT, VM, etc) is assigned an immutable digital identity in the private key stored in the secure hardware. As there is an efficient key management, all critical data (in the files, directories, databases, etc.) are transparently encrypted.
	* Data in use. All crypto functions and the private keys are used only within the secure hardware. All main CPUs/memories are attested to be free of malicious processes to run other applications securely.		* Data in use. All crypto functions and the private keys are used only within the secure hardware. All main CPUs/memories are attested to be free of malicious processes to run other applications securely.
	* Data in transit. TLS is GRACE-enabled to provide transport security among devices and virtual machines (VMs).		* Data in transit. TLS is GRACE-enabled to provide transport security among devices and virtual machines (VMs).
	\| kpi =		\|kpi=* Elimination of known vulnerabilities. Vulnerability assessment, penetration testing with cryptanalysis.
	* Elimination of known vulnerabilities. Vulnerability assessment, penetration testing with cryptanalysis.
	* Elimination of username/password (except authentication PIN or equivalent) in the secure transactions either in the P2P mode or with a cloud service.		* Elimination of username/password (except authentication PIN or equivalent) in the secure transactions either in the P2P mode or with a cloud service.
	* Real-time security audit is possible by system attestation.		* Real-time security audit is possible by system attestation.
	* The architecture is application-agnostic since the security controls are implemented at the system level and they blend into the existing infrastructure and platforms. This design ensures easy and wide-spread adoption across any domain or industry.		* The architecture is application-agnostic since the security controls are implemented at the system level and they blend into the existing infrastructure and platforms. This design ensures easy and wide-spread adoption across any domain or industry.
	\| measurement = The GRACE system and its operation are certifiable to ISO 27001:2013.		\|measurement=The GRACE system and its operation are certifiable to ISO 27001:2013.
	\| standards =		\|standards=Project GRACE adopts the best practices which exceed those in ISO 27002:2013. It implements the platform interfaces (hardware, hypervisor, OS, cloud services, IoT, etc.) and the IETF standard for transport security, i.e. TLS.
	Project GRACE adopts the best practices which exceed those in ISO 27002:2013. It implements the platform interfaces (hardware, hypervisor, OS, cloud services, IoT, etc.) and the IETF standard for transport security, i.e. TLS.		\|cybersecurity=Project GRACE contains a complete implementation of the security controls (authentication, authorization, audit - AAA) to achieve the security objectives (Confidentiality, Integrity and Availability - CIA). Privacy is closely related to confidentiality. Both the CIA and AAA triads are rooted in the secrecy of the private keys which bootstrap the protection of the environments against the cyber-physical attacks.
	~~\| replicability =~~		\|impacts=* Provide a simple scheme where it is difficult to commit errors of implementation.
	~~The existing infrastructure, the standards, the protocols are largely retained with minor modification to ensure continued inter-operability~~.
	\| cybersecurity =
	Project GRACE contains a complete implementation of the security controls (authentication, authorization, audit - AAA) to achieve the security objectives (Confidentiality, Integrity and Availability - CIA). Privacy is closely related to confidentiality. Both the CIA and AAA triads are rooted in the secrecy of the private keys which bootstrap the protection of the environments against the cyber-physical attacks.
	\| impacts =
	* Provide a simple scheme where it is difficult to commit errors of implementation.
	* Provide a scalable scheme to address very large networks (centralized, distributed or mesh – billions of entities) at a great reduction in complexity - O(N) over PKI - complexity O(N2).		* Provide a scalable scheme to address very large networks (centralized, distributed or mesh – billions of entities) at a great reduction in complexity - O(N) over PKI - complexity O(N2).
	* Provide a secure scheme rooted in hardware with counter-measures against the crippling side-channel attacks.		* Provide a secure scheme rooted in hardware with counter-measures against the crippling side-channel attacks.
	\| demonstration = Project GRACE provides the end-to-end security architecture. It shall be deployed in a live environment with active user loads to the cloud and within the cloud.		\|demonstration=Project GRACE provides the end-to-end security architecture. It shall be deployed in a live environment with active user loads to the cloud and within the cloud.
	\| supercluster = Wireless		\|supercluster=Wireless
	\| year = 2018		\|year=2018
			\|title=Graceful Remediation with Authenticated Certificateless Encryption
			<!--
			\|email=kangwei.woo@quantumciel.com
			\|replicability=The existing infrastructure, the standards, the protocols are largely retained with minor modification to ensure continued inter-operability.
	}}		}}

Pinfold: 1 revision imported

2021-10-31T20:45:13Z

1 revision imported

← Older revision	Revision as of 20:45, October 31, 2021
(No difference)

en>Ocadmin at 05:41, March 23, 2020

2020-03-23T05:41:51Z

New page

{{ActionCluster
| title = Graceful Remediation with Authenticated Certificateless Encryption

| team = QuantumCIEL, Cyber Security Agency of Singapore, Government Technology Agency of Singapore, VIBE Cybersecurity, University of Glasgow, Ark Holding, Longway AI, TechNarwhals, Wisecure Technologies]
| leader = Dr KangWei Woo
| email = kangwei.woo@quantumciel.com
| image = gctc-proj-grace.jpg
| imagecaption = Project Grace – Towards a Secure Internet
| municipalities = Singapore

| status = Development
| website =
| download = [https://drive.google.com/open?id=1TFx7np8HeO2EPJgPMQQ3D4i5nZBOoDLt Tech Jam Presentation]
| description =
The present Public Key Infrastructure (PKI) is known to be inadequate for the current scale of the Internet and the situation is exacerbated with the advent of IoT. Project GRACE (Graceful Remediation with Authenticated Certificateless Encryption) implements a security architecture using an advanced form of pairing-based cryptography called Verifiable Identity-based Encryption (VIBE) to provide a simple, scalable and secure key management for the cloud services, the IoT and indeed the Critical Information Infrastructure (CII) which are otherwise vulnerable to the extant and new cyber-physical attacks.
| challenges =
* PKI is costly to operate. Client certificates are rarely used in the applications due to costs.
* PKI is difficult to operate. Many implementations are error-prone because of the certificates.
| solutions =
* VIBE as a core key management of the open Internet is nominally 70% less costly, relative to PKI.
* VIBE is certificate-less.
* Project GRACE integrates the VIBE capabilities directly into the protocol (i.e. TLS) and the systems for greater efficiency.
| requirements =
The Critical Information Infrastructure (CII) requires protection and resiliency against frequent and massive cyber-physical attacks. It is not coincidental that confidentiality, integrity, and availability (cyber space) are closely related to privacy, safety, and reliability (physical space) respectively.
* Data at rest. Each node in the network (IoT, VM, etc) is assigned an immutable digital identity in the private key stored in the secure hardware. As there is an efficient key management, all critical data (in the files, directories, databases, etc.) are transparently encrypted.
* Data in use. All crypto functions and the private keys are used only within the secure hardware. All main CPUs/memories are attested to be free of malicious processes to run other applications securely.
* Data in transit. TLS is GRACE-enabled to provide transport security among devices and virtual machines (VMs).
| kpi =
* Elimination of known vulnerabilities. Vulnerability assessment, penetration testing with cryptanalysis.
* Elimination of username/password (except authentication PIN or equivalent) in the secure transactions either in the P2P mode or with a cloud service.
* Real-time security audit is possible by system attestation.
* The architecture is application-agnostic since the security controls are implemented at the system level and they blend into the existing infrastructure and platforms. This design ensures easy and wide-spread adoption across any domain or industry.
| measurement = The GRACE system and its operation are certifiable to ISO 27001:2013.
| standards =
Project GRACE adopts the best practices which exceed those in ISO 27002:2013. It implements the platform interfaces (hardware, hypervisor, OS, cloud services, IoT, etc.) and the IETF standard for transport security, i.e. TLS.
| replicability =
The existing infrastructure, the standards, the protocols are largely retained with minor modification to ensure continued inter-operability.
| cybersecurity =
Project GRACE contains a complete implementation of the security controls (authentication, authorization, audit - AAA) to achieve the security objectives (Confidentiality, Integrity and Availability - CIA). Privacy is closely related to confidentiality. Both the CIA and AAA triads are rooted in the secrecy of the private keys which bootstrap the protection of the environments against the cyber-physical attacks.
| impacts =
* Provide a simple scheme where it is difficult to commit errors of implementation.
* Provide a scalable scheme to address very large networks (centralized, distributed or mesh – billions of entities) at a great reduction in complexity - O(N) over PKI - complexity O(N2).
* Provide a secure scheme rooted in hardware with counter-measures against the crippling side-channel attacks.
| demonstration = Project GRACE provides the end-to-end security architecture. It shall be deployed in a live environment with active user loads to the cloud and within the cloud.
| supercluster = Wireless
| year = 2018
}}