A genius approach to web security

dawn_song.top.jpgSong in a study area in her Berkeley office By Michael V. Copeland, senior writer


FORTUNE -- The prototypical computer security expert is some ponytailed guy with a three-day beard and an uncomfortable habit of telling hacker war stories that make you scared to go online for weeks. Then there's Dawn Song, a 36-year-old associate professor at the University of California at Berkeley and a MacArthur Foundation fellow (also known as a MacArthur genius). With her broad smile and laugh, Song puts a visitor at ease, then begins mapping the Internet out on a whiteboard. The whole genius thing quickly becomes apparent.

Song and her research team aren't looking to simply patch holes in the Internet that online baddies are constantly trying to penetrate. She takes a more holistic approach, designing technology tools that can act as building blocks for an overall secure computing experience -- on any device. The proliferation of smartphones and tablets means more people are trying to share sensitive information via the public Internet instead of private networks, a practice that makes Song shudder. "If I have uploaded my data naively into the cloud, the best I can do now is cross my fingers and hope that whoever is storing my data is doing a good job with their security," she says.

By studying the underlying patterns of how software, hardware, and networks interact, Song has become expert at understanding the flow of both "good" data and ill-intentioned hacks. Song's groundbreaking research has become the basis for two important platforms: BitBlaze, which analyzes malicious software code, and WebBlaze, which focuses on defending web-based applications and services against it. (The WebBlaze approach has been used in the design of mainstream web browsers.) Song is also working on the privacy side of things, so that people can trace where their sensitive data have been and know that it is either secure or has been sold or breached.

Song's hope is that BitBlaze, WebBlaze, and her privacy initiatives become fundamental Internet tools that are deployed when any person or company builds a new cloud-based service or overhauls an existing one. Her team is working on commercial versions of the security platforms that would offer custom analysis to paying customers.

Song is no fear monger, but she stresses that the risks are mounting as everything -- phones, tablets, even wireless health-monitoring gadgets -- gets connected to the web. "We are always playing catch-up," she admits. But if Song and her team are successful, consumers and companies won't have to simply keep their fingers crossed -- and she may even put a few of those ponytailed security experts out of business.  To top of page

Just the hot list include
Frontline troops push for solar energy
The U.S. Marines are testing renewable energy technologies like solar to reduce costs and casualties associated with fossil fuels. Play
25 Best Places to find rich singles
Looking for Mr. or Ms. Moneybags? Hunt down the perfect mate in these wealthy cities, which are brimming with unattached professionals. More
Fun festivals: Twins to mustard to pirates!
You'll see double in Twinsburg, Ohio, and Ketchup lovers should beware in Middleton, WI. Here's some of the best and strangest town festivals. Play
Company Price Change % Change
Microsoft Corp 136.62 0.20 0.15%
Bank of America Corp... 29.40 -0.08 -0.27%
Advanced Micro Devic... 32.51 -0.49 -1.48%
Micron Technology In... 45.52 0.85 1.90%
Ford Motor Co 10.20 -0.06 -0.58%
Data as of Jul 19
Index Last Change % Change
Dow 27,154.20 -68.77 -0.25%
Nasdaq 8,146.49 -60.75 -0.74%
S&P 500 2,976.61 -18.50 -0.62%
Treasuries 2.05 0.01 0.49%
Data as of 3:47pm ET
Sponsors

Sections

Bankrupt toy retailer tells bankruptcy court it is looking at possibly reviving the Toys 'R' Us and Babies 'R' Us brands. More

Land O'Lakes CEO Beth Ford charts her career path, from her first job to becoming the first openly gay CEO at a Fortune 500 company in an interview with CNN's Boss Files. More

Most stock quote data provided by BATS. Market indices are shown in real time, except for the DJIA, which is delayed by two minutes. All times are ET. Disclaimer. Morningstar: © 2018 Morningstar, Inc. All Rights Reserved. Factset: FactSet Research Systems Inc. 2018. All rights reserved. Chicago Mercantile Association: Certain market data is the property of Chicago Mercantile Exchange Inc. and its licensors. All rights reserved. Dow Jones: The Dow Jones branded indices are proprietary to and are calculated, distributed and marketed by DJI Opco, a subsidiary of S&P Dow Jones Indices LLC and have been licensed for use to S&P Opco, LLC and CNN. Standard & Poor's and S&P are registered trademarks of Standard & Poor's Financial Services LLC and Dow Jones is a registered trademark of Dow Jones Trademark Holdings LLC. All content of the Dow Jones branded indices © S&P Dow Jones Indices LLC 2018 and/or its affiliates.