• Syracuse University team wins 2018 National Cyber Analyst Challenge

    A team of Syracuse University students was awarded first place and $20,000 in the National Cyber Analyst Challenge (NCAC) at Temple University in Philadelphia in April. At NCAC, students are given six hours and a large set of network traffic data to identify the origins of a cyberattack and its potential damage, and then make a seven-minute presentation of their findings and recommendations to a panel of C-suite-level judges from industry.

  • Protecting sensitive data in the Cloud by disguising access patterns

    Computer scientists is working to defend against the next potential cyber risk – cloud storage. The scientists say cloud users can encrypt sensitive data and information, but how they access the data may make it vulnerable.

  • Tool measures individuals’ likelihood to fall for internet scams

    Researchers have developed an online questionnaire which measures a range of personality traits to identify individuals who are more likely to fall victim to internet scams and other forms of cybercrime. The psychometric tool asks participants to answer a range of questions in order to measure how likely they are to respond to persuasive techniques.

  • World’s biggest DDoS-for-hire service taken down

    The administrators of the DDoS marketplace webstresser.org were arrested on 24 April 2018 as a result of Operation Power Off, a complex investigation led by the Dutch Police and the UK’s National Crime Agency with the support of Europol and a dozen law enforcement agencies from around the world. The webstresser.org was considered the world’s biggest marketplace to hire Distributed Denial of Service (DDoS) services, with over 136 000 registered users and 4 million attacks measured by April 2018.

  • Deterring foreign interference in U.S. elections

    A new study analyzes five million political ads on hot-button issues which ran on Facebook in the run-up to the 2016 election. Voters in swing states like Wisconsin and Pennsylvania were disproportionately targeted with ads featuring divisive issues like guns, immigration, and race relations. The divisive ads were purchased by 228 groups – 121 of these groups had no publicly trackable information.

  • Bitcoin more vulnerable to attack than expected

    Calculations by researchers show that Bitcoin is more vulnerable to attack than people had always assumed. If some Bitcoin users were to form a group that controls 20 percent of the currency’s computing power, they could launch an attack and, within a few days, force all other users to accept a new standard for Bitcoin.

  • Ten legislative proposals to defend America against foreign influence operations

    More than a year after Russia’s broad hacking and disinformation campaign of interference in the 2016 presidential election, and with midterm elections looming on the horizon, Congress and the Trump administration have not taken any clear action to increase U.S. defenses against the foreign interference threat. There are important steps we can, and must, take to defend our institutions against adversaries who seek to undermine them. Many of Russia’s tactics have exploited vulnerabilities in our societies and technologies, and loopholes in our laws. Some of the steps necessary to defend ourselves will involve long-term work, others will require clear action by the Executive Branch to ensure Americans are united against the threat we face, and steps to both deter and raise the costs on such actions.

  • Accelerating detection of zero-day vulnerabilities

    Today, commercial off-the-shelf (COTS), government off-the-shelf (GOTS), and free and open-source (FOSS) software support nearly all aspects of DoD, military, and commercial operations. Securing this diverse technology base requires highly skilled hackers who reason about the functionality of software and identify novel vulnerabilities. To address the challenges facing our abilities to scale and accelerate vulnerability detection, DARPA last week announced the Computers and Humans Exploring Software Security (CHESS) program.

  • New strategies for countering Russian social media influence in Eastern Europe

    Russia is waging a social media campaign in the Baltics, Ukraine, and nearby states to sow dissent against neighboring governments, as well as NATO and the European Union. “Nowhere is this threat more tangible than in Ukraine, which has been an active propaganda battleground since the 2014 Ukrainian revolution,” said the lead author of a new RAND report. “Other countries in the region look at Russia’s actions and annexation of Crimea and recognize the need to pay careful attention to Russia’s propaganda campaign.”

  • It’s not just Facebook: Countering Russia’s social media offensive

    Russian influence operations exploit the vulnerabilities of social media platforms to disseminate false narratives and amplify divisive content in order to undermine democracies, divide societies, and weaken Western alliances. In conducting these operations, the Kremlin employs a variety of tools across the social media space, including fake accounts/personas, political advertisements, bot networks, and traditional propaganda outlets. Additionally, Russian influence operations utilize a range of social media platforms, each with a different role, to distract public discussion, foment social unrest, and muddle the truth.

  • Hackers can steal data via power lines

    Researchers have shown once again that air-gapped PCs are not safe from a determined and patient attacker. The researchers have already devised several techniques to extract data from isolated or air-gapped computers that store highly sensitive data.

  • Broad action required to combat disinformation on social media: Experts

    The business model of American social media allows foreign adversaries to exploit our open society by spreading disinformation and amplifying disagreements, turning citizens against one another, speakers said at a Princeton University forum. Gen. Michael V. Hayden, former director of the Central Intelligence Agency and National Security Agency, said that taken as a whole, the cyberattacks during the 2016 presidential election have a lot in common with 9/11 — an attack from an unexpected direction, exploiting a previously unknown weakness. The nation rallied in response to the 2001 attacks in large part because President George W. Bush set the tone, he said. “We gotta go extraordinary,” Hayden said about the cyberattacks. “We as a nation don’t go extraordinary unless the president says ‘do it’,” and so far, that hasn’t happened, Hayden said.

  • Developing secure mobile apps

    Mobile devices such as smartphones and tablets and the applications (apps) we load onto them have become indispensable to our daily lives—both personal and professional. However, mobile apps are susceptible to malware, ransomware, spyware, coding flaws and other attacks that could compromise personal data stored on the device. Apps also can be used to gain access to sensitive enterprise resources.

     

  • Women in cybersecurity are making a difference

    Women in the cybersecurity industry may not make an impact in terms of numbers, but their work speaks for itself. Shimrit Tzur-David, Ph.D., is the co-founder and chief technology officer of Secret Double Octopus, a cybersecurity company which uses secret sharing, which is used to protect nuclear codes, to enable companies to do away with passwords all together. She was recently interviewed by Information Age.

  • Now that Russia has apparently hacked America’s grid, shoring up security is more important than ever

    Hackers taking down the U.S. electricity grid may sound like a plot ripped from a Bruce Willis action movie, but the Department of Homeland Security and the FBI recently disclosed that Russia has infiltrated “critical infrastructure” like American power plants, water facilities and gas pipelines. There is no time to waste in shoring up the grid’s security. Yet getting that done is not easy, as I’ve learned through my research regarding efforts in to stave off outages in hurricane-prone Florida.