AI-enabled Rapid Intelligent Systems Engineering

Submitted by Amy Karns on

We report on an exploratory project that leverages Artificial Intelligence (AI), specifically Foundation Models and Generative AI, to enhance the quality and speed of Systems Engineering (SE) practice. This project addresses the significant issue of cost overruns and delays, as evidenced by multiple Programs of Record in the DoD. Our aim is to demonstrate the feasibility of AI augmentation in achieving revolutionary efficiency gains (i.e., speed, cost) in the design, development, assurance, and certification of mission-critical systems, compared to state-of-the-art approaches.

IEEE Secure Development Conference (SecDev)

"SecDev​ ​is​ ​a​ ​venue​ ​for​ ​presenting​ ​ideas,​ ​research,​ ​and​ ​experience​ ​about​ ​how​ ​to​ ​develop​ ​secure systems. It focuses on theory,​ ​techniques,​ ​and​ ​tools​ ​to ​'build​ ​security​ ​in' to​ ​existing​ ​and​ ​new​ ​computing​ ​systems, and does not focus on simply discovering​ ​the​ ​absence​ ​of​ ​security.​

 

6th IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA)

"IEEE TPS-ISA is an international multidisciplinary forum for presentation of state-of-the art innovations, and discussion among academic, industrial researchers, and practitioners on issues related to trust, privacy and security in emerging smart and intelligent systems and applications."

11th International Conference on Internet of Things: Systems, Management and Security (IOTSMS 2024)

"The international conference on Internet of Things: Systems, Management, and Security (IoTSMS) aims at soliciting original ideas on the broad area of IoT, including challenges and opportunities, concepts and applications, and future trends. The IoTSMS aims to facilitate discussions among academics and IoT practitioners and make positive contributions to the field."

24th International Conference on Software Quality, Reliability and Security (QRS)

"This conference gives engineers and scientists from both industry and academia a platform to present their ongoing work, relate their research outcomes and experiences, and discuss the best and most efficient techniques for the development of reliable, secure, and trustworthy systems."

 

9th IEEE European Symposium on Security and Privacy

"Euro S&P has traditionally focused on technical aspects of computer security and privacy research. We consider the scope of the symposium to include economic, ethical, legal, and social aspects and interdependencies of computer security and privacy. We especially encourage submissions that address global aspects of computer security and privacy, including issues particular to parts of the world and communities that are often neglected."

 

CHERI: Architectural Support for Memory Protection and Software Compartmentalization

Submitted by Amy Karns on

CHERI is a processor architecture protection model enabling fine-grained C/C++ memory protection and scalable software compartmentalization. CHEIR hybridizes conventional processor, instruction-set, and software designs with an architectural capability model. Originating in DARPA’s CRASH research program in 2010, the work has progressed from FPGA prototypes to the recently released Arm Morello prototype processor and SoC implementing CHERI principles, and Microsoft’s CHERIoT microcontroller.

"Why Banks Should be Taking Quantum Security Very Seriously"

"Why Banks Should be Taking Quantum Security Very Seriously"

According to Elshan Kashefi, UK's National Quantum Computing Centre Chief Scientist, banks should be concerned about quantum security. Kashefi warned of the immense threat quantum computers pose before they are even fully functional. Today, cybercriminals are stealing encrypted data in bulk to decrypt it with a quantum device in the future. These Harvest Now, Decrypt Later (HNDL) attacks put today's sensitive information at risk of theft. Due to their large and varied data, financial institutions are prime targets for these attacks.

Submitted by Gregory Rigby on

"Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries"

"Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries"

Over 1,000 "Godfather" mobile banking Trojan samples are circulating in dozens of countries, targeting hundreds of banking apps. Godfather, which can record screens and keystrokes, intercept Two-Factor Authentication (2FA) calls and texts, initiate bank transfers, and more, was discovered in 2022. It has become one of the most popular Malware-as-a-Service (MaaS) offerings in cybercrime. According to Zimperium's 2023 "Mobile Banking Heists Report," Godfather targeted 237 banking apps in 57 countries as of late 2023.

Submitted by Gregory Rigby on

"LA County Health Services: Patients' Data Exposed in Phishing Attack"

"LA County Health Services: Patients' Data Exposed in Phishing Attack"

​The Los Angeles County Department of Health Services recently disclosed a data breach after thousands of patients' personal and health information was exposed in a data breach resulting from a recent phishing attack impacting over two dozen employees. This integrated health system operates the public hospitals and clinics in L.A. County (the most populous county in the United States) and is the second largest public health care system in the country after NYC Health + Hospitals.

Submitted by Adam Ekwall on
Subscribe to