View Proposal

---

Proposer

Adam Sampson

Title

Linux kernel NFS over TLS or NoiseSocket

Goal

Make the NFS network filesystem work over secure transports

Description

NFS is the standard network filesystem on Unix-like systems. Traditionally it's unencrypted, relying on the security of the network; it can be run over Kerberos, but that's complex, difficult to set up in small networks, and does not support modern cryptography. The Linux kernel now has good built-in support for TLS and other modern cryptographic primitives; in particular, the Wireguard VPN system uses a protocol based on the Noise framework. In this project, you would add support to Linux for running NFS over a TLS or NoiseSocket transport, making it easy to set up secure network filesystems.

Resources

Background

Url

Difficulty Level

Challenging

Ethical Approval

None

Number Of Students

1

Supervisor

Adam Sampson

Keywords

nfs, filesystem, linux, kernel, security, cryptography, tls, noise

Degrees

Bachelor of Science in Computer Science
Bachelor of Science in Computer Systems
Master of Engineering in Software Engineering
Master of Science in Computer Science for Cyber Security
Master of Science in Computing (2 Years)
Master of Science in Information Technology (Software Systems)
Master of Science in Network Security
Master of Science in Software Engineering
Bachelor of Science in Computing Science
Bachelor of Engineering in Robotics
Bachelor of Science in Computer Science (Cyber Security)