More Like this

1. IoT System Vulnerability Analysis and Network Hardening with Shortest Attack Trace in a Weighted Attack Graph

   https://doi.org/10.1145/3576842.3582326  

   Wan, Yinxin ; Lin, Xuanli ; Sabur, Abdulhakim ; Chang, Alena ; Xu, Kuai ; Xue, Guoliang ( May 2023 , 8th ACM/IEEE Conference on Internet of Things Design and Implementation)

   In recent years, Internet of Things (IoT) devices have been extensively deployed in edge networks, including smart homes and offices. Despite the exciting opportunities afforded by the advancements in the IoT, it also introduces new attack vectors and vulnerabilities in the system. Existing studies have shown that the attack graph is an effective model for performing system-level analysis of IoT security. In this paper, we study IoT system vulnerability analysis and network hardening. We first extend the concept of attack graph to weighted attack graph and design a novel algorithm for computing a shortest attack trace in a weighted attack graph. We then formulate the network hardening problem. We prove that this problem is NP-hard, and then design an exact algorithm and a heuristic algorithm to solve it. Extensive experiments on 9 synthetic IoT systems and 2 real-world smart home IoT testbeds demonstrate that our shortest attack trace algorithm is robust and fast, and our heuristic network hardening algorithm is efficient in producing near optimal results compared to the exact algorithm. 

   more » « less
2. Attack of the Knights:Non Uniform Cache Side Channel Attack

   https://doi.org/10.1145/3627106.3627199  

   Mahmud, Farabi ; Kim, Sungkeun ; Chawla, Harpreet Singh ; Kim, Eun Jung ; Tsai, Chia-Che ; Muzahid, Abdullah ( December 2023 , ACM)
3. Are p -values under attack? Contribution to the discussion of ‘A critical evaluation of the current “ p -value controversy” ’: Are p -value under attack?

   https://doi.org/10.1002/bimj.201700031  

   Piegorsch, Walter W. ( September 2017 , Biometrical Journal)
4. Active Attack Detection and Control in Constrained Cyber-Physical Systems Under Prevented Actuation Attack

   https://doi.org/10.23919/ACC50511.2021.9483322  

   Hosseinzadeh, Mehdi ; Sinopoli, Bruno ( May 2021 , 2021 American Control Conference (ACC))
5. Network Attack Surface : Lifting the Concept of Attack Surface to the Network Level for Evaluating Networks’ Resilience Against Zero-Day Attacks

   https://doi.org/10.1109/TDSC.2018.2889086  

   Zhang, Mengyuan ; Wang, Lingyu ; Jajodia, Sushil ; Singhal, Anoop ( January 2021 , IEEE Transactions on Dependable and Secure Computing)

   null (Ed.)