The Key to Securing Legacy Computing Systems

For a cyber-attack to be successful, one must conduct a sequence of exploits to move from the initial system access, through privilege escalation and lateral motion steps, until reaching the ultimate target. DARPA is pursuing an approach to cyber resilience that would subdivide software systems into smaller, secure compartments that prevent an initial attempt at penetration from becoming a successful attack.

• Read more

Is Your Cybersecurity Strategy Undermined by These Six Common Pitfalls?

Many security specialists harbor misconceptions about lay users of information technology, and these misconceptions can increase an organization’s risk of cybersecurity breaches. These issues include ineffective communications to lay users and inadequately incorporating user feedback on security system usability.

• Read more

Security Vulnerabilities Detected in Drones Made by DJI

Researchers have detected security vulnerabilities, some of them serious, in several drones made by the manufacturer DJI. These enable users, for example, to change a drone’s serial number or override the mechanisms that allow security authorities to track the drones and their pilots. In special attack scenarios, the drones can even be brought down remotely in flight.

• Read more

Can a Cyber shuffle Stop Hackers from Taking Over a Military Aircraft?

A cybersecurity technique that shuffles network addresses like a blackjack dealer shuffles playing cards could effectively befuddle hackers to take control of a military jet, commercial airliner or spacecraft. Sandia, Purdue team up to test cyberdefense against an algorithm trained to break it.

• Read more

How Chinese Companies Are Challenging National Security Decisions That Could Delay 5G Network Rollout

By Ming Du

In many countries, governments have decided to block Chinese companies from participating in building communication infrastructure in their countries because of national security concerns.  Chinese companies and investors often refuse to take such national security changes lying down. With varying degrees of success, firms have mounted a range of formal and informal challenges in recent years.

• Read more

New Method Tracks Groups of Anomalous Users

Malicious or fictitious users on internet networks have become the bane of the internet’s existence. Many bemoan the increasing presence of such users, but few have developed methods to track and expose them. Until now.

• Read more

Protecting DoD Microelectronics from Adversary Influence

The NSA publicly released four Cybersecurity Technical Reports to help the Department of Defense protect field-programmable gate array (FPGA)-based systems from adversary influence.

• Read more