Behnam Sattarzadeh
Computer Engineering Department
Sharif University of Technology
Tehran, Iran
Resume

 home
 projects
 publications
 thesis
 resume(pdf)
 links


Contact Info.

  • Address: No. 9, Sadeghi St., Azadi Ave., Tehran, Iran (Network Security Center).

  • Tel: +98 21 66164021 (Lab.) +98 21 84852628 (Office), Fax: +98 21 66054096.

  • Email: sattarzadeh [at] ce.sharif.edu, bs_sattarzadeh [at] yahoo.com, b.sattarzadeh [at] gmail.com

    Research Interests

  • Network Security, Wireless Security, E-Commerce Security

  • Cryptanalysis of Security Protocols, Formal Correctness of Security Protocols

  • Cryptography

    and also

  • Computer Networks, Wireless Networks (Cellular/Sensor Networks)

    Educational Background

  • Sharif University of Technology, Tehran, Iran, M.Sc. in Computer Engineering, major: Software Engineering, 2004 -- 2006, GPA: 16.45/20, some courses: Database II (16/20), Distributed Systems (17/20), Modeling and Analysis of Computer Networks (17.3/20), Decision Support Systems (15.5/20), M.S. Thesis (20/20).

  • Sharif University of Technology, Tehran, Iran, B.Sc. in Computer Engineering, major: Software Engineering, 2000 -- 2004, GPA: 16.35/20, some courses: Operating Systems (18/20), Computer Networks (17.6/20), System Analysis and Design (17.5/20), Compilers (17/20), Artificial Intelligence (19/20).

    Honors and Awards

  • 2004: Ranked 9th, in "National Entrance Exam for M.Sc. Studies" in Software Engineering major, among more than 8'000 B.Sc. students.

  • 2000: Ranked 124th, in "National Entrance Exam for B.Sc. Studies" among more than 300'000 high school students.

  • 1999: Silver Medal, 12th Iranian National Olympiad in Physics, Iran, Summer 1999.

    Publications

    Thesis:

  • "A Secure and Efficient Remote User Authentication Scheme," M.Sc. Thesis, Computer Engineering Department, Sharif University of Technology, 2007. [pdf, in persian]

  • "Implementation of a Secure Certificate-Based Election," B.Sc. Thesis, Computer Engineering Department, Sharif University of Technology, 2005. [pdf, in persian, source code + RUP documents]

    Journal Paper:

  • Mahdi Asadpour, Behnam Sattarzadeh, and Ali Movaghar, "Anonymous authentication protocol for GSM networks," International Journal of Security and Networks (IJSN), Vol. 3, No. 1, pp. 54--62, 2008.

    Conference Papers:

  • Behnam Sattarzadeh, Mahdi Asadpour and Rasool Jalili, "Improved user identity confidentiality for UMTS mobile networks," 4th European Conference on Universal Multiservice Networks (ECUMN 2007), IEEE Computer Society, pp. 401--409, Toulouse, France, Feb. 2007.

  • Behnam Sattarzadeh, Mahdi Asadpour and Rasool Jalili, "Security enhancement for a low computation cost user authentication scheme," Proceedings of the International Conference on Security and Cryptography (Secrypt 2006), pp. 5--8, Setubal, Portugal, Aug. 2006.

  • Mahdi Asadpour, Behnam Sattarzadeh, and Rasool Jalili, "Enhanced Smart-Card-Based Authentication Scheme Providing Forward-Secure Key Agreement," To appear in The International Conference on New Technologies, Mobility and Security (NTMS'2007), pp. 447-458, Springer, Paris-France, April 30 - May 3, 2007.

    Experiences

    Refereeing Experience:

  • Reviwer of the Wireless Communications and Mobile Computing Journal (WCMC).

  • Reviwer of 13th International CSI Computer Conference, (CSICC 2008).

    Teaching Experience:

  • Teacher assistant, Sharif University of Technology, Spring 2006, Course: Data and Network Security (course website), Responsibilities included: designing and grading problem sets and projects, attending problem-solving classes, and updating course’s web pages.

    Professional Experience:

  • Senior Consultant in Electronic Banking and Security for Board of Directors of Refah Bank, Tehran, Iran, May 2007 - present. Responsibilities included: security assessment of current core banking systems, improving the security of communication links through Virtual Private Networks (VPNs), proposing new electronic banking services.

  • Research developer, R&D unit of NamaadIran Company, Tehran, Iran, Jun. 2004 - Oct. 2005, Responsibilities included: investigating security facilities of .Net Framework, design and implementation of a Role-Based Access Control (RBAC) system.

  • Developer and Programmer, NamaadIran Company, Tehran, Iran, Jun. 2001 - Feb. 2003, Responsibilities included: design, implementation, documentation, and testing of several modules of the commercial systems (Sale, Account, Payroll).

    Research Experience:

  • Research assistant, Network Security Center, Sharif University of Technology, Sep. 2005 - present.

    Coursework

    Selected Research Papers:

  • Behnam Sattarzadeh, "Role Based Access Control (RBAC)," MS course: DataBase II, monthly report, Mar. 2005, instructor: Rohani Rankouhi. [pdf, in persian]

  • Behnam Sattarzadeh, "Security vulnerabilities of Windows operating system," MS course: Operating Systems II (course website), final report, Feb. 2005, instructor: Rasool Jalili. [pdf, in persian]

  • Mahdi Asadpour and Behnam Sattarzadeh, "A secure and efficient authentication protocol for GSM utilizing anonymous channel," MS course: Modeling and Analysis of Computer Networks (course website), final report, Feb. 2006, instructor: Ali Movaghar. [pdf, in persian]

  • Behnam Sattarzadeh, "Concurrency control in distributed database systems", MS course: DataBase II, final report, Apr. 2005, instructor: Rohani Rankouhi. [pdf, in persian]

    Selected Course Projects:

  • Distributed Systems: Simulation of a pervasive computing environment, using Microsoft C# .Net and XML input/output data. [download src + doc]

  • Real Time Systems: Simulation of a producer/consumer model, using multi-thread facilities of Microsoft Fundation Classes (MFC), Microsoft Visual C++ 6, and socket programming. The simulator supports TCP/IP communications over LAN networks. [download src + doc]

  • Computer Networks: A simple Packet Capture program in Linux, using C++, libpcap (teamwork). [download src]

  • Operating Systems: The first four phases of the Nachos project (teamwork). [download src]

  • Database Systems: Design and implementation of a simplified Internet Service Provider (ISP), using PostgreSQL and PHP (teamwork). [download src]

  • System Analysis and Design: Design and implementation of a Test Center (Konkoor! Institute) using Microsoft ASP.Net and Microsoft SQLServer (teamwork). [download src + doc]

  • Artificial Intelligence: Implementation of a tow-player game based on minimax algorithm and alpha-beta pruning (teamwork). [download src + doc]

    Technical skills

  • Programming Languages:
    Proficient in Pascal, C\C++, C\#, VB, Java.
    Familiar with 80x86 Assembly, Verilog HDL, Prolog, LISP.

  • Development Environments:
    Microsoft .Net, Rational Rose, JBuilder, MATLAB.

  • Web Development:
    HTML, XML, Java Script, ASP.Net, PHP.

  • DataBase Systems:
    Proficient in design and implementation of databases using Microsoft SQLServer.
    Familiar with PostgreSQL.

  • Operating Systems:
    Unix/Linux, Windows environment, DOS.

  • Miscellaneous:
    TeX\LaTeX, FarsiTeX, UML, Microsoft Office, Network Simulator (NS-2).


  • © 2006