Skip to main content

Security

Latest Innovations
Safe, Secure, Robust UAS Platform Dr. Bo Liu from the University of IL has developed a software platform for Unmanned Aircraft Systems (UAS- aka drones) that facilitates safe and efficient recovery from... Read More Dr. Bo Liu from the University of IL has developed a software platform for Unmanned Aircraft Systems (UAS- aka drones) that facilitates safe and efficient recovery from both physical and software attacks. This software uses multi-core processing power to ensure that the drone can respond to any threat in real-time while remaining stable. This platform is among the first to address both issues of cyber-security and environmental threats to drones, combining previously established technologies into one consistent system. Publications: X. Wang, N. Hovakimyan, and L. Sha, L1Simplex: Fault-Tolerant Control of Cyber-Physical Systems, in Proceedings of the International Conference on Cyber-Physical Systems (ICCPS13),Cyber-Physical Systems Week, Philadelphia, Pennsylvania, 2013. Man-Ki Yoon, Sibin Mohan, Jaesik Choi, Jung-Eun Kim, Lui Sha, "SecureCore: A Multicore-based Intrusion Detection Architecture for Real-Time Embedded Systems," in Proceedings of the 19th IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS 2013), pp. 21-31, Apr. 2013.
Live Computer Capture and Triage Tool (CCTT) A system for executing a cyber investigation by a non-expert user, including a computer having a processor, a memory, and a display; a computer-readable... Read More A system for executing a cyber investigation by a non-expert user, including a computer having a processor, a memory, and a display; a computer-readable medium having stored thereon instructions for execution of a wizard application, the processor adapted to execute the instructions when the computer-readable medium is inserted into the computer, the processor programmed to: receive case information; receive a type of activity being investigated in response to user inputs to select the activity type from a list of possible activity types; guide the user through capturing data related to the selected activity type through steps presented to the user through one or more screens shown in the display, the steps presented such that a non-expert user can follow them; receive user inputs through a screens to obtain information needed to continue capturing the data related to the selected activity; and store the captured data in a removable data storage device or medium for analysis and use in the cyber investigation.
A Symmetric Digital Chaotic Cryptosystem: The Alpcan Chaotic Cipher (ACC) A symmetric cryptosystem uses cascaded chaotic maps to encrypt plaintext and decrypt ciphertext. Received plaintext is encrypted using the cascaded chaotic... Read More A symmetric cryptosystem uses cascaded chaotic maps to encrypt plaintext and decrypt ciphertext. Received plaintext is encrypted using the cascaded chaotic maps to generate a ciphertext. The ciphertext can then be decrypted using the same cascaded chaotic maps in order to retrieve the plaintext.
Sherlock: A digital forensic analysis toolkit Professor Campbell and graduate student Imani Palmer have developed a forensic analysis toolkit that takes an intelligent analytical approach to investigate hacking... Read More Professor Campbell and graduate student Imani Palmer have developed a forensic analysis toolkit that takes an intelligent analytical approach to investigate hacking incidents and malicious activities. The software will enable huge human time savings in the times where there is a shortage of skilled workforce in the forensics industry.
Attack Tagger Inventors from University of Illinois at Urbana-Champaign and National Center for Supercomputing Applications have developed an end-to-... Read More Inventors from University of Illinois at Urbana-Champaign and National Center for Supercomputing Applications have developed an end-to-end security testbed and security analysis framework which aims to understand real world exploitation of know security vulnerabilities and preemptively detect multistage attacks i.e. before the system misuse.
QuickStop –The Quickest Misinformation Detection Algorithm Dr. Xiaohan Kang from the University of IL, in collaboration with inventors from Arizona State University and Carnege Mellon University, has developed QuickStop, an... Read More Dr. Xiaohan Kang from the University of IL, in collaboration with inventors from Arizona State University and Carnege Mellon University, has developed QuickStop, an algorithm capable of quick misinformation detection. Application This technology has applications in stopping the spread of misinformation,or “fake news”, on social platforms or news media before it can cause harm to the public. Benefits As the name would suggest, QuickStop is quicker than other misinformation technologies while maintaining higher accuracy than its competitors. QuickStop can detect fake news after 15 observations while other technologies need up to 500 observations. It is capable of faster speed and greater accuracy because of its dynamic nature. QuickStop calculates the minimum number of observations to determine whether information is real news or fake news.
ωLog: Transparent Interpretation and Integration of Layered Software Architecture Event Streams Prof. Bates at the University of Illinois has developed ωLog, a software application which collects application context through analysis of event logs, and integrates that... Read More Prof. Bates at the University of Illinois has developed ωLog, a software application which collects application context through analysis of event logs, and integrates that information into whole-system provenance. Through binary analysis, ωLog determines application logging behavior, associates events at the application level with events at the system level, and based on user queries, generates a concise, semantically-rich, execution-partitioned provenance graph. ωLog addresses limitations in overhead costs, with an average of 12% runtime overhead, and does not require instrumentation. Additionally, ωLog provides forensically-relevant semantic information that other provenance systems cannot provide. ωLog provides system administrators an unprecedented wealth of information for tracing suspicious activity to the root cause, which is particularly useful in identifying and responding to Advanced Persistent Threats. Applications Security Information and Event Management (SIEM), cybersecurity
Improved Modeling for the Economic Impact of Shipping Port Operations and Disruptions Dr. Gabriel Weaver and collaborators have developed a cyber/physical disruption model for shipping port operations that allows port authorities to anticipate, prepare and... Read More Dr. Gabriel Weaver and collaborators have developed a cyber/physical disruption model for shipping port operations that allows port authorities to anticipate, prepare and avoid damages from various different disruptive events, both malicious and natural. This model has been improved with the integration of expansive data sets to ensure model reliability and accuracy. The invention is a software to measure economic impacts of cyber/physical disruptions to port operations. It can be used to bolster port security by identifying points of weakness as well as improve training on how to respond to crises that may occur. It includes cyber disruptions which are currently neglected in port security efforts as evidenced by recent malware attacks. It also estimates economic impact for the port and the end stakeholders. This will be of special interest to port insurers, commanders, the US Coast Guard and other security agencies as well as the shipping companies that depend on smooth port logistics to move their freight efficiently.