The use of large language models for code generation is a rapidly growing trend in software development. However, without effective methods for ensuring the correctness of generated code, this trend could lead to any number of catastrophic outcomes.
A team of researchers from Florida International University's (FIU) Cyber-Physical Systems Security Lab, in collaboration with Google Senior Research Scientist Guliz Seray Tuncay, delved into how hackers can gain access to a user's computer files via the File System Access Application Programming Interface (API), which allows web applications in modern browsers to interact with users' local file systems. The threat affects Google Chrome and Microsoft Edge browsers, but not Apple Safari or Mozilla Firefox.
As reported by security researcher "3xp0rt," a hacker claiming to be the creator of "HelloKitty" ransomware has rebranded the gang as "HelloGookie." HelloKitty is known for hacking the game company CD Project Red in 2021 and stealing the source code for Cyberpunk 2077, Witcher 3, and Gwent. The threat actor debuted with a massive data dump on a new dark web website. HelloGookie uploaded a 750GB archive with Witcher 3 builds and Cyberpunk 2077 source code. This article continues to discuss the rebranding of the HelloKitty ransomware.
We report on an exploratory project that leverages Artificial Intelligence (AI), specifically Foundation Models and Generative AI, to enhance the quality and speed of Systems Engineering (SE) practice. This project addresses the significant issue of cost overruns and delays, as evidenced by multiple Programs of Record in the DoD. Our aim is to demonstrate the feasibility of AI augmentation in achieving revolutionary efficiency gains (i.e., speed, cost) in the design, development, assurance, and certification of mission-critical systems, compared to state-of-the-art approaches.
"SecDev is a venue for presenting ideas, research, and experience about how to develop secure systems. It focuses on theory, techniques, and tools to 'build security in' to existing and new computing systems, and does not focus on simply discovering the absence of security.
"IEEE TPS-ISA is an international multidisciplinary forum for presentation of state-of-the art innovations, and discussion among academic, industrial researchers, and practitioners on issues related to trust, privacy and security in emerging smart and intelligent systems and applications."
"The international conference on Internet of Things: Systems, Management, and Security (IoTSMS) aims at soliciting original ideas on the broad area of IoT, including challenges and opportunities, concepts and applications, and future trends. The IoTSMS aims to facilitate discussions among academics and IoT practitioners and make positive contributions to the field."
"This conference gives engineers and scientists from both industry and academia a platform to present their ongoing work, relate their research outcomes and experiences, and discuss the best and most efficient techniques for the development of reliable, secure, and trustworthy systems."
"Euro S&P has traditionally focused on technical aspects of computer security and privacy research. We consider the scope of the symposium to include economic, ethical, legal, and social aspects and interdependencies of computer security and privacy. We especially encourage submissions that address global aspects of computer security and privacy, including issues particular to parts of the world and communities that are often neglected."
CHERI is a processor architecture protection model enabling fine-grained C/C++ memory protection and scalable software compartmentalization. CHEIR hybridizes conventional processor, instruction-set, and software designs with an architectural capability model. Originating in DARPA’s CRASH research program in 2010, the work has progressed from FPGA prototypes to the recently released Arm Morello prototype processor and SoC implementing CHERI principles, and Microsoft’s CHERIoT microcontroller.