CrySyS Lab () is part of the Department of Telecommunications at the
Budapest University of Technology and Economics
The Budapest University of Technology and Economics ( hu, Budapesti Műszaki és Gazdaságtudományi Egyetem or in short ), official abbreviation BME, is the most significant university of technology in Hungary and is considered the world's oldes ...
. The name is derived from "Laboratory of Cryptography and System Security", the full
Hungarian name is .
History
CrySyS Lab. was founded in 2003 by a group of security researchers at the Budapest University of Technology and Economics. Currently, it is located in the Infopark Budapest. The heads of the lab were Dr. István Vajda (2003–2010) and Dr. Levente Buttyán (2010-now). Since its establishment, the lab participated in several research and industry projects, including successful EU FP6 and FP7 projects (SeVeCom, a UbiSecSens and WSAN4CIP).
Research results
CrySyS Lab is recognized in research for its contribution to the area of security in wireless embedded systems. In this area, the members of the lab produced
* 5 books
* 4 book chapters
* 21 journal papers
* 47 conference papers
* 3 patents
* 2 Internet Draft
The above publications had an impact factor of 30+ and obtained more than 7500 references. Several of these publications appeared in highly cited journals (e.g., IEEE Transactions on Dependable and Secure Systems, IEEE Transactions on Mobile Computing).
Forensics analysis of malware incidents
The laboratory was involved in the forensic analysis of several high-profile targeted attacks.
In October 2011, CrySyS Lab discovered the
Duqu
Duqu is a collection of computer malware discovered on 1 September 2011, thought by Kaspersky Labs to be related to the Stuxnet worm and to have been created by Unit 8200. Duqu has exploited Microsoft Windows's Zero day vulnerability, zero-day vu ...
malware; pursued the analysis of the Duqu malware and as a result of the investigation, identified a dropper file with an MS 0-day kernel exploit inside; and finally released a new open-source Duqu Detector Toolkit to detect Duqu traces and running Duqu instances.
In May 2012, the malware analysis team at CrySyS Lab participated in an international collaboration aiming at the analysis of an as yet unknown malware, which they call sKyWIper. At the same time Kaspersky Lab analyzed the malware
Flame
A flame (from Latin ''flamma'') is the visible, gaseous part of a fire. It is caused by a highly exothermic chemical reaction taking place in a thin zone. When flames are hot enough to have ionized gaseous components of sufficient density they ...
and Iran National CERT (MAHER) the malware Flamer. Later, they turned out to be the same.
Other analysis published by CrySyS Lab include the password analysis of the Hungarian ISP, Elender, and a thorough Hungarian security survey of servers after the publications of the Kaminsky DNS attack.
[http://www.crysys.hu/publications/files/BencsathB08DNS.pdf ]
References
{{reflist, colwidth=33em
Budapest University of Technology and Economics
Cryptography