Firewall research

[Rennie deGraaf <degraaf@cpsc.ucalgary.ca>]

[-- Attachment #1: Type: text/plain, Size: 1052 bytes --]

I am a graduate student at the University of Calgary in Calgary, Canada,
working on a Masters' degree in computer science.  I've done some
research on port knocking (see
http://pages.cpsc.ucalgary.ca/~degraaf/papers/), and am currently
looking for a thesis project relating to firewalls and security.  If any
of you has any ideas that you don't have time to play with yourself and
that I might be able to turn into a thesis, I'd appreciate hearing them.

In particular, I'm currently looking into how to build a gateway-based
firewall that calls back to host operating systems to get process and
user names (similar to what the "owner" module does for
locally-generated traffic), and that can (to some extent) track what
processes might be making connections on behalf of other processes (by
tracking process trees and RPC).  I'm having difficulty finding
literature on how and to what extent this problem has been approached in
the past - if any of you know of any resources that I should check out,
I'd appreciate your input.

Thanks,
Rennie deGraaf

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]