Presentation

file

Visible to the public Work-in-Progress: Attack Scenarios (title not shown in full)

Submitted by akarns on Fri, 03/11/2022 - 3:44pm. Contributors:

This presentation is part of the Works-in-Progress session, which aims to provide authors with early feedback to adjust on-going research. Manuscript titles are redacted until the work has been published.

 

file

Visible to the public Work-in-Progress: Efficacy of Phishing (title not shown in full)

Submitted by Anonymous on Fri, 03/11/2022 - 3:44pm. Contributors:

This presentation is part of the Works-in-Progress session, which aims to provide authors with early feedback to adjust on-going research. Manuscript titles are redacted until the work has been published.

EFFICACY OF PHISHING (full title not shown)

file

Visible to the public Flexible Mechanisms for Remote Attestation

Submitted by Warren Alexander on Fri, 03/11/2022 - 3:44pm. Contributors:

Remote attestation consists of generating evidence of a system’s integrity via measurements and reporting the evidence to a remote party for appraisal in a form that can be trusted. The parties that exchange information must agree on formats and protocols. We assert there is a large variety of patterns of interactions among appraisers and attesters of interest. Therefore, it is important to standardize on flexible mechanisms for remote attestation.

file

Visible to the public Inconsistencies in Specification of Intel TDX Remote Attestation

Submitted by akarns on Fri, 03/11/2022 - 3:44pm. Contributors:

Intel Trust Domain Extensions (TDX) is the upcoming trusted execution environment offering of Intel. One of the most critical processes of Intel TDX is the remote attestation mechanism. In this talk, we expose some of the discrepancies in Intel’s specifications of remote attestation that may potentially lead to design and implementation flaws. We explain how formal specification and verification using ProVerif could help avoid these flaws.
 

file

Visible to the public Consent as a Foundation for Responsible Autonomy

Submitted by mpsingh on Fri, 03/11/2022 - 3:44pm. Contributor:

This paper focuses on a dynamic aspect of responsible autonomy, namely, to make intelligent agents be responsible at run time. That is, it considers settings where decision making by agents impinges upon the outcomes perceived by other agents. For an agent to act responsibly, it must accommodate the desires and other attitudes of its users and, through other agents, of their users. The contribution of this paper is twofold.

file

Visible to the public Verified Cryptographic Code for Everybody

Submitted by apetcher_amazon on Fri, 03/11/2022 - 3:44pm. Contributors:

Along with Amazon Web Services, Galois is publishing a new paper titled “Verified Cryptographic Code for Everybody,” and we really do mean everybody. One benefit of the way we’ve done this work is that everyone who was using the code already is now using verified code. The library we’ve verified parts of is called AWS-LibCrypto. Much of that library is code that originated from BoringSSL, and BoringSSL is composed of code originating from OpenSSL.

file

Visible to the public Work-in-Progress: Cyber Emulation Experiments (title not shown in full)

Submitted by akarns on Fri, 03/11/2022 - 3:44pm. Contributors:

This presentation is part of the Works-in-Progress session, which aims to provide authors with early feedback to adjust on-going research. Manuscript titles are redacted until the work has been published.

VERIFICATION OF CYBER EMULATION EXPERIMENTS (full title not shown)

file

Visible to the public Work-in-Progress: Cybersecurity Incident Response (title not shown in full)

Submitted by hnguye11 on Fri, 03/11/2022 - 3:44pm. Contributors:

This presentation is part of the Works-in-Progress session, which aims to provide authors with early feedback to adjust on-going research. Manuscript titles are redacted until the work has been published.

CYBERSECURITY INCIDENT RESPONSE (full title not shown)

file

Visible to the public Evaluating Mail-Based Security for Electoral Processes Using Attack Trees

Submitted by nscala on Fri, 03/11/2022 - 3:43pm. Contributors:

Evaluating Mail-Based Security for Electoral Processes Using Attack Trees