Skip to main content

Security

Latest Innovations
Safe, Secure, Robust UAS Platform Dr. Bo Liu from the University of IL has developed a software platform for Unmanned Aircraft Systems (UAS- aka drones) that facilitates safe and efficient recovery from... Read More Dr. Bo Liu from the University of IL has developed a software platform for Unmanned Aircraft Systems (UAS- aka drones) that facilitates safe and efficient recovery from both physical and software attacks. This software uses multi-core processing power to ensure that the drone can respond to any threat in real-time while remaining stable. This platform is among the first to address both issues of cyber-security and environmental threats to drones, combining previously established technologies into one consistent system. Publications: X. Wang, N. Hovakimyan, and L. Sha, L1Simplex: Fault-Tolerant Control of Cyber-Physical Systems, in Proceedings of the International Conference on Cyber-Physical Systems (ICCPS13),Cyber-Physical Systems Week, Philadelphia, Pennsylvania, 2013. Man-Ki Yoon, Sibin Mohan, Jaesik Choi, Jung-Eun Kim, Lui Sha, "SecureCore: A Multicore-based Intrusion Detection Architecture for Real-Time Embedded Systems," in Proceedings of the 19th IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS 2013), pp. 21-31, Apr. 2013.
Live Computer Capture and Triage Tool (CCTT) A system for executing a cyber investigation by a non-expert user, including a computer having a processor, a memory, and a display; a computer-readable... Read More A system for executing a cyber investigation by a non-expert user, including a computer having a processor, a memory, and a display; a computer-readable medium having stored thereon instructions for execution of a wizard application, the processor adapted to execute the instructions when the computer-readable medium is inserted into the computer, the processor programmed to: receive case information; receive a type of activity being investigated in response to user inputs to select the activity type from a list of possible activity types; guide the user through capturing data related to the selected activity type through steps presented to the user through one or more screens shown in the display, the steps presented such that a non-expert user can follow them; receive user inputs through a screens to obtain information needed to continue capturing the data related to the selected activity; and store the captured data in a removable data storage device or medium for analysis and use in the cyber investigation.
A Symmetric Digital Chaotic Cryptosystem: The Alpcan Chaotic Cipher (ACC) A symmetric cryptosystem uses cascaded chaotic maps to encrypt plaintext and decrypt ciphertext. Received plaintext is encrypted using the cascaded chaotic... Read More A symmetric cryptosystem uses cascaded chaotic maps to encrypt plaintext and decrypt ciphertext. Received plaintext is encrypted using the cascaded chaotic maps to generate a ciphertext. The ciphertext can then be decrypted using the same cascaded chaotic maps in order to retrieve the plaintext.
Sherlock: A digital forensic analysis toolkit Professor Campbell and graduate student Imani Palmer have developed a forensic analysis toolkit that takes an intelligent analytical approach to investigate hacking... Read More Professor Campbell and graduate student Imani Palmer have developed a forensic analysis toolkit that takes an intelligent analytical approach to investigate hacking incidents and malicious activities. The software will enable huge human time savings in the times where there is a shortage of skilled workforce in the forensics industry.
Attack Tagger Inventors from University of Illinois at Urbana-Champaign and National Center for Supercomputing Applications have developed an end-to-... Read More Inventors from University of Illinois at Urbana-Champaign and National Center for Supercomputing Applications have developed an end-to-end security testbed and security analysis framework which aims to understand real world exploitation of know security vulnerabilities and preemptively detect multistage attacks i.e. before the system misuse.
QuickStop –The Quickest Misinformation Detection Algorithm Dr. Xiaohan Kang from the University of IL, in collaboration with inventors from Arizona State University and Carnege Mellon University, has developed QuickStop, an... Read More Dr. Xiaohan Kang from the University of IL, in collaboration with inventors from Arizona State University and Carnege Mellon University, has developed QuickStop, an algorithm capable of quick misinformation detection. Application This technology has applications in stopping the spread of misinformation,or “fake news”, on social platforms or news media before it can cause harm to the public. Benefits As the name would suggest, QuickStop is quicker than other misinformation technologies while maintaining higher accuracy than its competitors. QuickStop can detect fake news after 15 observations while other technologies need up to 500 observations. It is capable of faster speed and greater accuracy because of its dynamic nature. QuickStop calculates the minimum number of observations to determine whether information is real news or fake news.
ωLog: Transparent Interpretation and Integration of Layered Software Architecture Event Streams Prof. Bates at the University of Illinois has developed ωLog, a software application which collects application context through analysis of event logs, and integrates that... Read More Prof. Bates at the University of Illinois has developed ωLog, a software application which collects application context through analysis of event logs, and integrates that information into whole-system provenance. Through binary analysis, ωLog determines application logging behavior, associates events at the application level with events at the system level, and based on user queries, generates a concise, semantically-rich, execution-partitioned provenance graph. ωLog addresses limitations in overhead costs, with an average of 12% runtime overhead, and does not require instrumentation. Additionally, ωLog provides forensically-relevant semantic information that other provenance systems cannot provide. ωLog provides system administrators an unprecedented wealth of information for tracing suspicious activity to the root cause, which is particularly useful in identifying and responding to Advanced Persistent Threats. Applications Security Information and Event Management (SIEM), cybersecurity
Improved Modeling for the Economic Impact of Shipping Port Operations and Disruptions Dr. Gabriel Weaver and collaborators have developed a cyber/physical disruption model for shipping port operations that allows port authorities to anticipate, prepare and... Read More Dr. Gabriel Weaver and collaborators have developed a cyber/physical disruption model for shipping port operations that allows port authorities to anticipate, prepare and avoid damages from various different disruptive events, both malicious and natural. This model has been improved with the integration of expansive data sets to ensure model reliability and accuracy. The invention is a software to measure economic impacts of cyber/physical disruptions to port operations. It can be used to bolster port security by identifying points of weakness as well as improve training on how to respond to crises that may occur. It includes cyber disruptions which are currently neglected in port security efforts as evidenced by recent malware attacks. It also estimates economic impact for the port and the end stakeholders. This will be of special interest to port insurers, commanders, the US Coast Guard and other security agencies as well as the shipping companies that depend on smooth port logistics to move their freight efficiently.
Improved Modeling for the Economic Impact of Shipping Port Operations and Disruptions Dr. Gabriel Weaver and Dr. Lavanya Marla have developed a cyber/physical disruption model for shipping port operations that allows port authorities to anticipate, prepare... Read More Dr. Gabriel Weaver and Dr. Lavanya Marla have developed a cyber/physical disruption model for shipping port operations that allows port authorities to anticipate, prepare and avoid damages from various different disruptive events, both malicious and natural. This model has been improved with fundamental changes to the optimization algorithm, which is an inherent part of the data processing pipeline, and to the cyber layer of the pipeline. These changes allow for a more diverse cyber layer by allowing an additional data source, which, in turn, affects the transportation layer of the pipeline. This extends the grid-based approach to integrate into a network-based approach to critical infrastructure risk assessment. These changes allow for a more complete analysis of possible economic disruptions based on the input data given. The invention is software to measure economic impacts of cyber/physical disruptions to port operations. It can be used to bolster port security by identifying points of weakness as well as improve training on how to respond to crises that may occur. It includes cyber disruptions which are currently neglected in port security efforts as evidenced by recent malware attacks. It also estimates economic impact for the port and the end stakeholders. This will be of special interest to port insurers, commanders, the US Coast Guard and other security agencies as well as the shipping companies that depend on smooth port logistics to move their freight efficiently.
Improved Ransomware Protection with the Ransomware-aware Solid-State Drive Dr. Huang has developed RSSD, a ransomware-aware solid-state drive. This solid-state drive has been meticulously designed and tested to withstand 3 new types of ransomware... Read More Dr. Huang has developed RSSD, a ransomware-aware solid-state drive. This solid-state drive has been meticulously designed and tested to withstand 3 new types of ransomware attacks by transferring data to a cloud server through NVMe over Ethernet. RSSD faces no performance impacts and even allows for post-attack analysis to carefully identify the cause and methodology of any ransomware attacks faced by the RSSD. RSSD enhances security support from typical ransomware attacks which assume conventional SSDs perform like HDDs by preemptively protecting against 3 novel types of ransomware attacks designed by Dr. Huang. Furthermore, RSSD ensures that stale data is not discarded after a limited amount of time as current SSDs behave, instead opting to allocate the stale data to the cloud storage in a time-dependent order. This cloud storage effectively removes the limitation of storage on SSDs by providing a space to store an infinite amount of data. The NVMe over Ethernet is the novel design that serves to protect from ransomware attacks the transfer of data from the local SSD to the cloud storage.