Re: Associate Research Fellow in Cryptography - 3 years - UoW Australia

Simon Johnson wrote:
UOWs Centre for Information Security, which is a part of the Faculty of
Informatics, is seeking to appoint a suitably qualified individual to work on the ARC
Discovery project entitled: 'Credential Systems and Their Applications in Securing
Electronic Health Records'.

To be successful, you will possess a PhD in Cryptography / Mathematics
or equivalent area and demonstrate your
experience in Cryptography and its applications. Ideally, you will also have developed
credential based crypto-systems
and its applications to electronic health records.

You must address the Selection Criteria specified in the Position
Description, which is available from our website.

For further information about this role, please contact Assoc Prof Willy
Susilo on + 61 2 4221 5535.

Appointment is based on merit. As women are under-represented in
academic positions, suitably qualified women are encouraged to apply.


Forgive me, but it sounds that what you need is not a PhD per-se, but
someone to competently design such a system.

Actually, the very fact that you're focusing on the cryptography in
this application indicates you've already got it wrong. The
cryptography will almost certainly be good enough - regardless of its
academic merit, or lack thereof.

The cryptography is rarely the weak-point in such systems. My advice is
to focus on securing the people. The person you employ in your call
center for $5 an hour is your biggest potential threat. They could
potentially sell records to the highest bidder for considerably more
than the $5 an hour you pay them. These people are so dangerous
precisely because they have to have access to your records to do their
job. All the cryptography in the world won't save you against them -
they already have access.

A short story about my experiences with this: When the UK undertook its
last census many jobs were created in my home town to process the forms
that people sent in. A large number of friends of mine took positions
there on the night-shift and they frequently looked up the information
regarding former teachers, friends, family members and what not.

Underestimate this risk at your peril. Securing the people may not be
sexy but guess what, most security isn't like the movies. Most of it is
important but dull work.

At any rate, I wish you well on your project and hope you find someone
to fill your position.

Simon.

This project is different from census.
1. The hospitals and doctors are always trusted.
2. It is people' s rights to choose their doctors or lawyers.


Lao Tze:
Manage a great nation as you would cook a delicate fish.

.

Relevant Pages

  • Re: Associate Research Fellow in Cryptography - 3 years - UoW Australia
    ... 'Credential Systems and Their Applications in Securing ... Electronic Health Records'. ... you will possess a PhD in Cryptography / Mathematics ...
    (sci.crypt)
  • Re: [fw-wiz] Securing a Linux Firewall
    ... In short, if you're interested in securing the box, you're either already ... doing much of the work required to come up with a minimal install or you're ... individual applications you say you're adding, and how are you testing the ... Out of curiosity, what -would- be sufficient? ...
    (Firewall-Wizards)
  • Re: Monitoring and securing outbound connections
    ... I am mostly interested in protecting and securing my Linux computer ... from outbound malicious scripts and executables (applications). ... Firefox itself has a good reputation but that says nothing about the plugins of which most people have more than they need. ... Given how quickly I was found by two people and that I have been using linux full time for over nine years and never been hacked there are two possibilities. ...
    (comp.os.linux.setup)
  • Re: Monitoring and securing outbound connections
    ... I am mostly interested in protecting and securing my Linux computer ... from outbound malicious scripts and executables (applications). ... May I ask why securing your computer against the installation of malicious ...
    (comp.os.linux.setup)
  • Associate Research Fellow in Cryptography - 3 years - UoW Australia
    ... UOWs Centre for Information Security, which is a part of the Faculty of Informatics, is seeking to appoint a suitably qualified ... you will possess a PhD in Cryptography / Mathematics or equivalent area and demonstrate your ... experience in Cryptography and its applications. ...
    (sci.crypt)