Publications

Showing 28 results for Author: Stacy J. Prowell

View All publications

  • Nov, 2023

    Conference Paper

    Shifting Left for Machine Learning: An Empirical Study of Security Weaknesses in Supervised Learning-based Projects

    Context: Supervised learning-based projects (SLPs), i.e., software projects that use supervised learning algorithms, such as decision trees are useful for performing classification-related tasks. Yet, security weaknesses, such as the use of hard-coded passwords in SLPs, can make SLPs susceptible to security attacks. A characterization of security weaknesses in SLPs can hel…

  • Nov, 2023

    Journal

    A Taxonomy and Review of Remote Attestation Schemes in Embedded Systems

    Embedded systems that make up the Internet of Things (IoT), Supervisory Control and Data Acquisition (SCADA) networks, and Smart Grid applications are coming under increasing scrutiny in the security field. Remote Attestation (RA) is a security mechanism that allows a trusted device, the verifier, to determine the trustworthiness of an untrusted device, the prover. RA has…

  • Nov, 2023

    Conference Paper

    Companion Assisted Software Based Remote Attestation in SCADA Networks

    Critical infrastructure such as power generation and water distribution systems have become a priority target in cyber warfare because of their recent computerization and introduction to the internet. As a result, Supervisory Control and Data Acquisition (SCADA) system security has become a hot topic in academic and industrial research. Among these topics, Remote Attestati…

  • Nov, 2023

    Conference Paper

    Towards Malware Detection via CPU Power Consumption: Data Collection Design and Analytics

    This paper presents an experimental design and data analytics approach aimed at power-based malware detection on general-purpose computers. Leveraging the fact that malware executions must consume power, we explore the postulate that malware can be accurately detected via power data analytics. Our experimental design and implementation allow for programmatic collection of…

  • Apr, 2017

    Conference Paper

    Modeling inter-signal arrival times for accurate detection of CAN bus signal injection attacks

    Modern vehicles rely on hundreds of on-board electronic control units (ECUs) communicating over in-vehicle networks. As external interfaces to the car control networks (such as the on-board diagnostic (OBD) port, auxiliary media ports, etc.) become common, and vehicle-to-vehicle / vehicle-to-infrastructure technology is in the near future, the attack surface for vehicles g…

  • Nov, 2016

    Conference Paper

    Behavior Computation for Smart Grid Software Analysis

    Smart grid embedded software is subject to intrusion and compromise with potentially serious consequences. Current methods of cybersecurity analysis are increasingly challenged by the scope the problem. Oak Ridge National Laboratory (ORNL) is pioneering the new technology of software behavior computation to help address these risks. Software behavior computation and its in…

  • Sep, 2015

    Conference Paper

    Phase-Space Detection of Cyber Events

    Energy Delivery Systems (EDS) are a network of processes that produce, transfer and distribute energy. EDS are increasingly dependent on networked computing assets, as are many Industrial Control Systems. Consequently, cyber-attacks pose a real and pertinent threat, as evidenced by Stuxnet, Shamoon and Dragonfly. Hence, there is a critical need for novel methods to detect,…

  • Jan, 2013

    Conference Paper

    Computing Legacy Software Behavior to Understand Functionality and Security Properties: An IBM/370 Demonstration

    Organizations maintaining mainframe legacy software can benefit from code modernization and incorporation of security capabilities to address the current threat environment. Oak Ridge National Laboratory is developing the Hyperion system to compute the behavior of software as a means to gain understanding of software functionality and security properties. Computation of fu…

  • Nov, 2012

    Book

    Proceedings of the 6th Annual Workshop on Cyber Security and Information Intelligence Research: Cyber security and information intelligence challenges and strategies

    As our dependence on the cyber infrastructure grows more complex and more distributed, the systems that compose it become more prone to failures and exploitation. Intelligence refers to discrete or private information, which possess currency and relevance. The ability to abstract, evaluate, and understand such information underlies its accuracy and true value. The collecti…

  • Aug, 2012

    Conference Paper

    Automated Vulnerability Detection for Compiled Smart Grid Software

    While testing performed with proper experimental controls can provide scientifically quantifiable evidence that software does not contain unintentional vulnerabilities (bugs), it is insufficient to show that intentional vulnerabilities exist, and impractical to certify devices for the expected long lifetimes of use. For both of these needs, rigorous analysis of the softwar…

  • Dec, 2011

    Journal

    Forewarning of Failure in Complex Systems

    As the critical infrastructures of the United States have become more and more dependent on public and private networks, the potential for widespread national impact resulting from disruption or failure of these networks has also increased. Securing the nation’s critical infrastructures requires protecting not only their physical systems but, just as important, the cyber p…

1
2
3