Measuring the Common Vulnerability Scoring System Base Score Equation
This work evaluates the validity of the Common Vulnerability Scoring System (CVSS) Version 3 ''base score'' equation in capturing the expert opinion of its maintainers. CVSS is a widely used industry standard for rating the severity of information
Advanced Persistent Threat Detection using Data Provenance and Metric Learning
Advanced persistent threats (APT) have increased in recent times as a result of the rise in interest by nation states and sophisticated corporations to obtain high-profile information. Typically, APT attacks are more challenging to detect since they
SPATIAL-TEMPORAL MODELING USING DEEP LEARNING FOR REAL-TIME MONITORING OF ADDITIVE MANUFACTURING
Real-time monitoring for Additive Manufacturing (AM) processes can greatly benefit from spatial-temporal modeling using deep learning. However, existing, deep-learning approaches in AM are case-dependent, and therefore not robust to changes of control
Intelligent-Fabric Computing: Challenges and Opportunities
With the advent of the Internet of Everything, people can easily interact with their environments immersively. The idea of pervasive computing is becoming a reality, but due to the inconvenience of carrying silicon-based entities and a lack of fine-grained
When Frodo Flips: End-to-End Key Recovery on FrodoKEM via Rowhammer
In this work, we recover the private key material of the FrodoKEM key exchange mechanism as submitted to the NIST PQC standardization process. The new mechanism that allows for this is a Rowhammer-assisted poisoning of the FrodoKEM KeyGen process. That is
Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN): Final Annotated Outline
The objective of this Cybersecurity Profile is to identify an approach to assess the cybersecurity posture of Hybrid Satellite Networks (HSN) that provide services such as satellite-based systems for communications, position, navigation, and timing (PNT)
Stabilograms: Testbed Stability in a Pilot Experiment for Cellular Communication Anomaly Detection
The National Institute of Standards and Technology's Communications Technology Laboratory conducted a cellular communication system pilot experiment in the summer of 2021. This pilot experiment was done to prepare for a broad-scope experiment to
Resistance of Ascon Family against Conditional Cube Attacks in Nonce-Misuse Setting
Ascon family is one of the finalists of the National Institute of Standards and Technology (NIST) lightweight cryptography standardization process. The family includes three Authenticated Encryption with Associated Data (AEAD) schemes: \ascon-128 (primary)
Poisoning Attacks against Machine Learning: Can Machine Learning be Trustworthy?
Many practical applications benefit from Machine Learning (ML) and Artificial Intelligence (AI) technologies, but their security needs to be studied in more depth before the methods and algorithms are actually deployed in critical settings. In this article
Parenting the "Always Connected" Generation - Research Findings from NIST Youth Security & Privacy Research
Kids are engaged in technology and online activities at younger ages than ever before. They are the "digital natives" – an always online and connected generation. Much cyber security research has focused on adults' perceptions and practices. But, what
Characterization of AI Model Configurations For Model Reuse
With the widespread creation of artificial intelligence (AI) models in biosciences, bio-medical researchers are reusing trained AI models from other applications. This work is motivated by the need to characterize trained AI models for reuse based on
5G New Radio Sidelink Link-Level Simulator and Performance Analysis
Since the Third Generation Partnership Project (3GPP) specified 5G New Radio (NR) sidelink in Release 16, researchers have been expressing increasing interest in sidelink in various research areas, such as Proximity Services (ProSe) and Vehicle-to
Privacy policies robustness to reverse engineering
Differential privacy policies allow one to preserve data privacy while sharing and analyzing data. However, these policies are susceptible to an array of attacks. In particular, often a portion of the data desired to be privacy protected is exposed online
This talk will cover findings from over 4 years of NIST phishing training data, highlighting user context as the key to phishing susceptibility. We will discuss the NIST Phish Scale, our research on why users click, and how it can help users spot a phish.
On-grid compressive sampling for spherical field measurements in acoustics
We derive a theoretically guaranteed compressive sensing method for acoustic field reconstructions using spherical field measurements on a predefined grid. This method can be used to reconstruct sparse band-limited spherical harmonic or Wigner $D$-function