From 385cc92bc91e1a6c3724085c060e76bf40c13ed3 Mon Sep 17 00:00:00 2001 From: Rasmus Dahlberg Date: Tue, 15 Oct 2024 16:08:16 +0200 Subject: Import PhD thesis --- slides/img/contribs/ctga-gossip.pdf | Bin 0 -> 73557 bytes slides/img/contribs/ctga-gossip.svg | 6526 ++++++++++++++ slides/img/contribs/ctga-intuition.pdf | Bin 0 -> 40474 bytes slides/img/contribs/ctga-intuition.svg | 11409 ++++++++++++++++++++++++ slides/img/contribs/ctga-setting.pdf | Bin 0 -> 39398 bytes slides/img/contribs/ctga-setting.svg | 5986 +++++++++++++ slides/img/contribs/ctor-full.pdf | Bin 0 -> 59016 bytes slides/img/contribs/ctor-full.svg | 2381 +++++ slides/img/contribs/ctor-gossip.pdf | Bin 0 -> 72073 bytes slides/img/contribs/ctor-gossip.svg | 2602 ++++++ slides/img/contribs/ctor-setting.pdf | Bin 0 -> 30952 bytes slides/img/contribs/ctor-setting.svg | 1234 +++ slides/img/contribs/dns-timing.pdf | Bin 0 -> 14494 bytes slides/img/contribs/dns-timing.svg | 510 ++ slides/img/contribs/lwm-problem.pdf | Bin 0 -> 37200 bytes slides/img/contribs/lwm-problem.svg | 1851 ++++ slides/img/contribs/lwm-solution.pdf | Bin 0 -> 40033 bytes slides/img/contribs/lwm-solution.svg | 1788 ++++ slides/img/contribs/sauteed-cert.pdf | Bin 0 -> 16766 bytes slides/img/contribs/sauteed-cert.svg | 988 ++ slides/img/contribs/split-view.pdf | Bin 0 -> 53458 bytes slides/img/contribs/split-view.svg | 1877 ++++ slides/img/contribs/tlwo-heatmap-web.pdf | Bin 0 -> 35606 bytes slides/img/contribs/tlwo-preload.pdf | Bin 0 -> 109924 bytes slides/img/contribs/tlwo-preload.svg | 2280 +++++ slides/img/contribs/tlwo-uncached.pdf | Bin 0 -> 15059 bytes slides/img/contribs/tlwo-uncached.svg | 562 ++ slides/img/contribs/wfwo-setting.pdf | Bin 0 -> 1316415 bytes slides/img/introduction/chromium.png | Bin 0 -> 264135 bytes slides/img/introduction/ct-issuance.pdf | Bin 0 -> 38553 bytes slides/img/introduction/ct-issuance.svg | 1133 +++ slides/img/introduction/ct-policy.pdf | Bin 0 -> 14099 bytes slides/img/introduction/ct-policy.svg | 953 ++ slides/img/introduction/outline.pdf | Bin 0 -> 117881 bytes slides/img/introduction/outline.svg | 3405 +++++++ slides/img/introduction/tb.png | Bin 0 -> 190394 bytes slides/img/kau.png | Bin 0 -> 66309 bytes slides/img/overview/thesis.pdf | Bin 0 -> 97468 bytes slides/img/overview/thesis.svg | 3362 +++++++ slides/img/overview/wf.pdf | Bin 0 -> 1021741 bytes slides/img/take-away/README | 3 + slides/img/take-away/methods-measurements.png | Bin 0 -> 1498217 bytes slides/img/take-away/methods-proofs.png | Bin 0 -> 1447416 bytes slides/img/take-away/methods-prototyping.png | Bin 0 -> 1538023 bytes slides/img/take-away/methods-simulation.png | Bin 0 -> 1696940 bytes slides/img/take-away/take-away.png | Bin 0 -> 1769226 bytes slides/img/thanks.pdf | Bin 0 -> 679021 bytes slides/img/thanks.svg | 173 + 48 files changed, 49023 insertions(+) create mode 100644 slides/img/contribs/ctga-gossip.pdf create mode 100644 slides/img/contribs/ctga-gossip.svg create mode 100644 slides/img/contribs/ctga-intuition.pdf create mode 100644 slides/img/contribs/ctga-intuition.svg create mode 100644 slides/img/contribs/ctga-setting.pdf create mode 100644 slides/img/contribs/ctga-setting.svg create mode 100644 slides/img/contribs/ctor-full.pdf create mode 100644 slides/img/contribs/ctor-full.svg create mode 100644 slides/img/contribs/ctor-gossip.pdf create mode 100644 slides/img/contribs/ctor-gossip.svg create mode 100644 slides/img/contribs/ctor-setting.pdf create mode 100644 slides/img/contribs/ctor-setting.svg create mode 100644 slides/img/contribs/dns-timing.pdf create mode 100644 slides/img/contribs/dns-timing.svg create mode 100644 slides/img/contribs/lwm-problem.pdf create mode 100644 slides/img/contribs/lwm-problem.svg create mode 100644 slides/img/contribs/lwm-solution.pdf create mode 100644 slides/img/contribs/lwm-solution.svg create mode 100644 slides/img/contribs/sauteed-cert.pdf create mode 100644 slides/img/contribs/sauteed-cert.svg create mode 100644 slides/img/contribs/split-view.pdf create mode 100644 slides/img/contribs/split-view.svg create mode 100644 slides/img/contribs/tlwo-heatmap-web.pdf create mode 100644 slides/img/contribs/tlwo-preload.pdf create mode 100644 slides/img/contribs/tlwo-preload.svg create mode 100644 slides/img/contribs/tlwo-uncached.pdf create mode 100644 slides/img/contribs/tlwo-uncached.svg create mode 100644 slides/img/contribs/wfwo-setting.pdf create mode 100644 slides/img/introduction/chromium.png create mode 100644 slides/img/introduction/ct-issuance.pdf create mode 100644 slides/img/introduction/ct-issuance.svg create mode 100644 slides/img/introduction/ct-policy.pdf create mode 100644 slides/img/introduction/ct-policy.svg create mode 100644 slides/img/introduction/outline.pdf create mode 100644 slides/img/introduction/outline.svg create mode 100644 slides/img/introduction/tb.png create mode 100755 slides/img/kau.png create mode 100644 slides/img/overview/thesis.pdf create mode 100644 slides/img/overview/thesis.svg create mode 100644 slides/img/overview/wf.pdf create mode 100644 slides/img/take-away/README create mode 100644 slides/img/take-away/methods-measurements.png create mode 100644 slides/img/take-away/methods-proofs.png create mode 100644 slides/img/take-away/methods-prototyping.png create mode 100644 slides/img/take-away/methods-simulation.png create mode 100644 slides/img/take-away/take-away.png create mode 100644 slides/img/thanks.pdf create mode 100644 slides/img/thanks.svg (limited to 'slides/img') diff --git a/slides/img/contribs/ctga-gossip.pdf b/slides/img/contribs/ctga-gossip.pdf new file mode 100644 index 0000000..f09ae27 Binary files /dev/null and b/slides/img/contribs/ctga-gossip.pdf differ diff --git a/slides/img/contribs/ctga-gossip.svg b/slides/img/contribs/ctga-gossip.svg new file mode 100644 index 0000000..f192bfd --- /dev/null +++ b/slides/img/contribs/ctga-gossip.svg @@ -0,0 +1,6526 @@ + + + +KeyingOperation using a key-driven device, e.g. typing. (IBM)Auxiliary OperationOffline operation.KeyingOperation using a key-driven device, e.g. typing. (IBM)Auxiliary OperationOffline operation.Logsaggregateoff-path verifyCT overDNS diff --git a/slides/img/contribs/ctga-intuition.pdf b/slides/img/contribs/ctga-intuition.pdf new file mode 100644 index 0000000..f2bb537 Binary files /dev/null and b/slides/img/contribs/ctga-intuition.pdf differ diff --git a/slides/img/contribs/ctga-intuition.svg b/slides/img/contribs/ctga-intuition.svg new file mode 100644 index 0000000..b6a51bc --- /dev/null +++ b/slides/img/contribs/ctga-intuition.svg @@ -0,0 +1,11409 @@ + + + +KeyingOperation using a key-driven device, e.g. typing. (IBM)Auxiliary OperationOffline operation.KeyingOperation using a key-driven device, e.g. typing. (IBM)Auxiliary OperationOffline operation.Auxiliary OperationOffline operation.ConnectorExit to or entry from another part of chart.KeyingOperation using a key-driven device, e.g. typing. (IBM)Auxiliary OperationOffline operation.KeyingOperation using a key-driven device, e.g. typing. (IBM)Auxiliary OperationOffline operation.LogsCT overDNS diff --git a/slides/img/contribs/ctga-setting.pdf b/slides/img/contribs/ctga-setting.pdf new file mode 100644 index 0000000..346d858 Binary files /dev/null and b/slides/img/contribs/ctga-setting.pdf differ diff --git a/slides/img/contribs/ctga-setting.svg b/slides/img/contribs/ctga-setting.svg new file mode 100644 index 0000000..28df007 --- /dev/null +++ b/slides/img/contribs/ctga-setting.svg @@ -0,0 +1,5986 @@ + + + +KeyingOperation using a key-driven device, e.g. typing. (IBM)Auxiliary OperationOffline operation.KeyingOperation using a key-driven device, e.g. typing. (IBM)Auxiliary OperationOffline operation.Auxiliary OperationOffline operation.ConnectorExit to or entry from another part of chart.LogsCT overDNS diff --git a/slides/img/contribs/ctor-full.pdf b/slides/img/contribs/ctor-full.pdf new file mode 100644 index 0000000..f833e2e Binary files /dev/null and b/slides/img/contribs/ctor-full.pdf differ diff --git a/slides/img/contribs/ctor-full.svg b/slides/img/contribs/ctor-full.svg new file mode 100644 index 0000000..dd17a09 --- /dev/null +++ b/slides/img/contribs/ctor-full.svg @@ -0,0 +1,2381 @@ + + + +image/svg+xmlCTor paramslatest STHsTorConsensusLogsAuditorTor BrowserCTRexample.comsubmitbufferreportaudit diff --git a/slides/img/contribs/ctor-gossip.pdf b/slides/img/contribs/ctor-gossip.pdf new file mode 100644 index 0000000..797612e Binary files /dev/null and b/slides/img/contribs/ctor-gossip.pdf differ diff --git a/slides/img/contribs/ctor-gossip.svg b/slides/img/contribs/ctor-gossip.svg new file mode 100644 index 0000000..9c3a6d5 --- /dev/null +++ b/slides/img/contribs/ctor-gossip.svg @@ -0,0 +1,2602 @@ + + + +TorConsensusLogs"certificates [...]"oneviewof thelogs diff --git a/slides/img/contribs/ctor-setting.pdf b/slides/img/contribs/ctor-setting.pdf new file mode 100644 index 0000000..537e4da Binary files /dev/null and b/slides/img/contribs/ctor-setting.pdf differ diff --git a/slides/img/contribs/ctor-setting.svg b/slides/img/contribs/ctor-setting.svg new file mode 100644 index 0000000..3f35eff --- /dev/null +++ b/slides/img/contribs/ctor-setting.svg @@ -0,0 +1,1234 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/slides/img/contribs/dns-timing.pdf b/slides/img/contribs/dns-timing.pdf new file mode 100644 index 0000000..561f0a3 Binary files /dev/null and b/slides/img/contribs/dns-timing.pdf differ diff --git a/slides/img/contribs/dns-timing.svg b/slides/img/contribs/dns-timing.svg new file mode 100644 index 0000000..cbb8c87 --- /dev/null +++ b/slides/img/contribs/dns-timing.svg @@ -0,0 +1,510 @@ + + + +ConnectorExit to or entry from another part of chart.Auxiliary OperationOffline operation.DecisionA decision or switching type operation.MergeCombine two or more sets of items into one set. (ISO)AttackerRelayDNS cacheRESOLVE evil.com66.96.146.12966.96.146.129AttackerRelayevil.comDNS cacheRESOLVE evil.com60ms40msUncachedCached diff --git a/slides/img/contribs/lwm-problem.pdf b/slides/img/contribs/lwm-problem.pdf new file mode 100644 index 0000000..3154727 Binary files /dev/null and b/slides/img/contribs/lwm-problem.pdf differ diff --git a/slides/img/contribs/lwm-problem.svg b/slides/img/contribs/lwm-problem.svg new file mode 100644 index 0000000..7e841ed --- /dev/null +++ b/slides/img/contribs/lwm-problem.svg @@ -0,0 +1,1851 @@ + + + +LogsSelfmonitor3rd-partymonitorall certificates~10 Mbpsall certificates~10 Mbpsfoo.orgbar.orgbaz.orgbar.org...found newcertificate diff --git a/slides/img/contribs/lwm-solution.pdf b/slides/img/contribs/lwm-solution.pdf new file mode 100644 index 0000000..bad5370 Binary files /dev/null and b/slides/img/contribs/lwm-solution.pdf differ diff --git a/slides/img/contribs/lwm-solution.svg b/slides/img/contribs/lwm-solution.svg new file mode 100644 index 0000000..5619c76 --- /dev/null +++ b/slides/img/contribs/lwm-solution.svg @@ -0,0 +1,1788 @@ + + + +LogsVerifiableAPIall certificates~10 Mbpsbar.orgbaz.orgbar.org...found newcertificatewildcardproofsextension diff --git a/slides/img/contribs/sauteed-cert.pdf b/slides/img/contribs/sauteed-cert.pdf new file mode 100644 index 0000000..ba74dfb Binary files /dev/null and b/slides/img/contribs/sauteed-cert.pdf differ diff --git a/slides/img/contribs/sauteed-cert.svg b/slides/img/contribs/sauteed-cert.svg new file mode 100644 index 0000000..4129b13 --- /dev/null +++ b/slides/img/contribs/sauteed-cert.svg @@ -0,0 +1,988 @@ + + + +SAN: api.example.orgSAN: www.example.orgcyi...rad.onionKey: <public key>... diff --git a/slides/img/contribs/split-view.pdf b/slides/img/contribs/split-view.pdf new file mode 100644 index 0000000..6ec81d4 Binary files /dev/null and b/slides/img/contribs/split-view.pdf differ diff --git a/slides/img/contribs/split-view.svg b/slides/img/contribs/split-view.svg new file mode 100644 index 0000000..2f4b142 --- /dev/null +++ b/slides/img/contribs/split-view.svg @@ -0,0 +1,1877 @@ + + + +UserLogs"certificate Bis included""certificates [A, C, D, ...]"no B diff --git a/slides/img/contribs/tlwo-heatmap-web.pdf b/slides/img/contribs/tlwo-heatmap-web.pdf new file mode 100644 index 0000000..a864f65 Binary files /dev/null and b/slides/img/contribs/tlwo-heatmap-web.pdf differ diff --git a/slides/img/contribs/tlwo-preload.pdf b/slides/img/contribs/tlwo-preload.pdf new file mode 100644 index 0000000..9f6d83c Binary files /dev/null and b/slides/img/contribs/tlwo-preload.pdf differ diff --git a/slides/img/contribs/tlwo-preload.svg b/slides/img/contribs/tlwo-preload.svg new file mode 100644 index 0000000..fbe95ab --- /dev/null +++ b/slides/img/contribs/tlwo-preload.svg @@ -0,0 +1,2280 @@ + + + +Auxiliary OperationOffline operation.ConnectorExit to or entry from another part of chart.Phase 3 Phase 2 foo.orgcdn.foo.orgads.foo.org...foo.org <IP>bar.org <IP>baz.org <IP>cdn.foo.org <IP>ads.foo.org <IP>... ...Sharedpreload cachePer-circuit cacheswithout any sharingCircuit ACircuit BCircuit CCircuit DDNShierarchy............Phase 1foo.orgcdn.foo.orgads.foo.org...foo.orgfoo.org... diff --git a/slides/img/contribs/tlwo-uncached.pdf b/slides/img/contribs/tlwo-uncached.pdf new file mode 100644 index 0000000..8d05f54 Binary files /dev/null and b/slides/img/contribs/tlwo-uncached.pdf differ diff --git a/slides/img/contribs/tlwo-uncached.svg b/slides/img/contribs/tlwo-uncached.svg new file mode 100644 index 0000000..d0727c7 --- /dev/null +++ b/slides/img/contribs/tlwo-uncached.svg @@ -0,0 +1,562 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Connector + Exit to or entry from another part of chart. + + + + Auxiliary Operation + Offline operation. + + + + Decision + A decision or switching type operation. + + + + Merge + Combine two or more sets of items into one set. (ISO) + + + + + + + image/svg+xml + + + + + + + + Attacker + + Relay + evil.com + DNS cache + cache evil.com + + + + + example.com + + evil.com + RESOLVE + RESOLVE + + + + + 93.184.216.34 + + 66.96.146.129 + + 2 + + + 3 + concurrentresolve + event + + 1 + + diff --git a/slides/img/contribs/wfwo-setting.pdf b/slides/img/contribs/wfwo-setting.pdf new file mode 100644 index 0000000..4620d67 Binary files /dev/null and b/slides/img/contribs/wfwo-setting.pdf differ diff --git a/slides/img/introduction/chromium.png b/slides/img/introduction/chromium.png new file mode 100644 index 0000000..a651cd5 Binary files /dev/null and b/slides/img/introduction/chromium.png differ diff --git a/slides/img/introduction/ct-issuance.pdf b/slides/img/introduction/ct-issuance.pdf new file mode 100644 index 0000000..6c38cb7 Binary files /dev/null and b/slides/img/introduction/ct-issuance.pdf differ diff --git a/slides/img/introduction/ct-issuance.svg b/slides/img/introduction/ct-issuance.svg new file mode 100644 index 0000000..6aa41b2 --- /dev/null +++ b/slides/img/introduction/ct-issuance.svg @@ -0,0 +1,1133 @@ + + + +image/svg+xmlLogsMonitorCertificateauthorityWebsitecertificate request log precertificatesigned promisefinal certificateinspect allcertificates diff --git a/slides/img/introduction/ct-policy.pdf b/slides/img/introduction/ct-policy.pdf new file mode 100644 index 0000000..8dc1aea Binary files /dev/null and b/slides/img/introduction/ct-policy.pdf differ diff --git a/slides/img/introduction/ct-policy.svg b/slides/img/introduction/ct-policy.svg new file mode 100644 index 0000000..d32a904 --- /dev/null +++ b/slides/img/introduction/ct-policy.svg @@ -0,0 +1,953 @@ + + + +image/svg+xmlWebsiteBrowserinitiate website visitcertificatepolicy,"two promises" diff --git a/slides/img/introduction/outline.pdf b/slides/img/introduction/outline.pdf new file mode 100644 index 0000000..80185d8 Binary files /dev/null and b/slides/img/introduction/outline.pdf differ diff --git a/slides/img/introduction/outline.svg b/slides/img/introduction/outline.svg new file mode 100644 index 0000000..fe6a1e3 --- /dev/null +++ b/slides/img/introduction/outline.svg @@ -0,0 +1,3405 @@ + + + +KeyingOperation using a key-driven device, e.g. typing. (IBM)Auxiliary OperationOffline operation. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/slides/img/introduction/tb.png b/slides/img/introduction/tb.png new file mode 100644 index 0000000..9b8413c Binary files /dev/null and b/slides/img/introduction/tb.png differ diff --git a/slides/img/kau.png b/slides/img/kau.png new file mode 100755 index 0000000..0c7c885 Binary files /dev/null and b/slides/img/kau.png differ diff --git a/slides/img/overview/thesis.pdf b/slides/img/overview/thesis.pdf new file mode 100644 index 0000000..6e63634 Binary files /dev/null and b/slides/img/overview/thesis.pdf differ diff --git a/slides/img/overview/thesis.svg b/slides/img/overview/thesis.svg new file mode 100644 index 0000000..2a73953 --- /dev/null +++ b/slides/img/overview/thesis.svg @@ -0,0 +1,3362 @@ + + + +KeyingOperation using a key-driven device, e.g. typing. (IBM)Auxiliary OperationOffline operation.KeyingOperation using a key-driven device, e.g. typing. (IBM)Auxiliary OperationOffline operation. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +Paper IPaper IIPaper IIIPaper IVPaper VPaper VIC1C2C3C4C5C6RQ1RQ2RQ3NordSecSECURWAREPETSWPESPETSUSENIXSecurity diff --git a/slides/img/overview/wf.pdf b/slides/img/overview/wf.pdf new file mode 100644 index 0000000..1004bf1 Binary files /dev/null and b/slides/img/overview/wf.pdf differ diff --git a/slides/img/take-away/README b/slides/img/take-away/README new file mode 100644 index 0000000..9758952 --- /dev/null +++ b/slides/img/take-away/README @@ -0,0 +1,3 @@ +README +====== +These figures were generated with DALL-E. diff --git a/slides/img/take-away/methods-measurements.png b/slides/img/take-away/methods-measurements.png new file mode 100644 index 0000000..22e16d5 Binary files /dev/null and b/slides/img/take-away/methods-measurements.png differ diff --git a/slides/img/take-away/methods-proofs.png b/slides/img/take-away/methods-proofs.png new file mode 100644 index 0000000..9b408d2 Binary files /dev/null and b/slides/img/take-away/methods-proofs.png differ diff --git a/slides/img/take-away/methods-prototyping.png b/slides/img/take-away/methods-prototyping.png new file mode 100644 index 0000000..2158ea0 Binary files /dev/null and b/slides/img/take-away/methods-prototyping.png differ diff --git a/slides/img/take-away/methods-simulation.png b/slides/img/take-away/methods-simulation.png new file mode 100644 index 0000000..b996a5a Binary files /dev/null and b/slides/img/take-away/methods-simulation.png differ diff --git a/slides/img/take-away/take-away.png b/slides/img/take-away/take-away.png new file mode 100644 index 0000000..7612b18 Binary files /dev/null and b/slides/img/take-away/take-away.png differ diff --git a/slides/img/thanks.pdf b/slides/img/thanks.pdf new file mode 100644 index 0000000..9530ccd Binary files /dev/null and b/slides/img/thanks.pdf differ diff --git a/slides/img/thanks.svg b/slides/img/thanks.svg new file mode 100644 index 0000000..c943050 --- /dev/null +++ b/slides/img/thanks.svg @@ -0,0 +1,173 @@ + + + +ThankyouMatthew FinkelTobias PullsAndreas KasslerLinus NordbergTom RitterJonathan VestinPaul Syverson Toke Høiland-Jørgensen -- cgit v1.2.3