Tom Chothia’s research while affiliated with University of Birmingham and other places

... Other methods try to separate the asset concept into several types, such as EBIOS [ANS16] into primary and supporting, or as ISSRM into intangible business and tangible information system. Moreover, [Tzi+16] has proposed an asset-driven, security-aware, service selection framework for selecting services that best satisfy the security and cost constraints of assets. However, none of the above methods, even if they deal with the security of the assets, identify types of assets from the attackers' point of view. ...

Reference:

Security by Design : An asset-based approach to bridge the gap between architects and security experts

... Timestamps, and the number of distinct functions called during each transition, are used to identify potential performance issues or functions requiring optimization. The lookup tables are used to identify which functions are called under which transitions, and how important each function is to the overall [27] Active Pulsar [13] Passive Prospex [31] Passive MACE [32] Active AFLNET [14] Active State Inspector [30] Active SLIME Active System [27] Model Extraction I/O Pulsar [13] Sate-aware fuzzing I/O Prospex [31] Protocol RE CF-I/O MACE [32] Input Discovery I/O AFLNET [14] State-aware fuzzing I/O State Inspector [30] Model Extraction Memory SLIME Model Extraction I/O behavior of the system. The lookup tables of function calls can be filtered to select a subset of function calls to be used for annotating the state machine. ...

Reference:

SLIMECRAFT: State Learning for Client-Server Regression Analysis and Fault Testing

... EMV contactless payment systems have been targeted by numerous attacks, including card cloning [36], [41], [70], passive attacks such as eavesdropping [19], [50] and transaction relaying [11], [12], [16], [39], [49], [56], [73], as well as active attacks including pre-play [36], [43], [74] and contactless limit bypass [8]- [10], [43]. Recent research has examined the security of contactless payment. ...

Reference:

SoK: Security of EMV Contactless Payment Systems

... However, while the goal of distance-bounding protocols is to ensure that the communication partners are close, protocols from the above mentioned class aim to ensure some classical security property, like secrecy or authentication, under the assumption of proximity of the communication partners. Such focus on distance bounding is reflected on the verification frameworks [8]- [13] developed for the verification of distance-bounding protocols using round-trip time, which ignore classical security properties. ...

Reference:

Is Eve nearby? Analysing protocols under the distant-attacker assumption

... Some of these include confining sources of vulnerable information to texts found within journal articles while ignoring those found in blogs, white papers, or advisories. However, more general information sources are given, such as references [1], [2], [3]. ...

Reference:

Dag: Dynamic Attack Graph Generation with Real-World Cyber Threat Intelligence in Iot

... Dealing with security problems in software development projects is, however, not a new research field. Specifically, the field of vulnerability management as part of risk management is well researched with proposed solutions ranging from enterprise-to project-level [20,34,40]. With concepts like unique vulnerability identifiers (CVE-IDs [3]) and vulnerability severity ratings (CVSS [10]) this domain contributed widely employed processes and technologies that are crucial for industrial practitioners. ...

Reference:

Automated Security Findings Management: A Case Study in Industrial DevOps

... It has been established that cache partitioning is an effective approach for shared last-level caches [56], [63]. At the same time, prior research demonstrated that L1-caches can be flushed on context switches to prevent leakage with minimal loss in performance [28]. In this paper, we also make a case that private L2 caches have to be partitioned, and present TEE-SHirT, a security framework for multi-level cache hierarchies that combines a shared partitioned LLC, private partitioned L2 caches, and private L1 caches that are flushed on context switches and system calls. ...

Reference:

TEE-SHirT: Scalable Leakage-Free Cache Hierarchies for TEEs

... In contrast, mechanisms discussed in [36][37][38] introduce cryptographic verification methods during the 4-way handshake exchanges to combat nonce reuse vulnerabilities targeted by KRACK. These approaches additionally tackle cipher downgrade attacks on APs. ...

Reference:

A distributed and cooperative signature-based intrusion detection system framework for multi-channel man-in-the-middle attacks against protected Wi-Fi networks

... They could use a distance fraud to pay for goods in a shop, while they are actually somewhere else committing a crime; the payment log from the shop's terminal would make them appear innocent. Distance-fraud counteraction in contactless payments is even more acutely called for by the fact that recent proposals [38] enforce proximity-checks be added to banks' payment-logs as well. ...

Reference:

Distance bounding under different assumptions: opinion

... Furthermore, in their research, Karagiannis and Magkos (2021) found that CTFs increased students' confidence, had positive outcomes in terms of technical skills and knowledge, and the learning process was considered engaging. In addition, Chothia et al. (2019) studied the narrative aspects of the CTF exercises and found that story engagement was associated with better course performance. Students appreciated the entertainment aspect of the narrative, which in turn improved their engagement. ...

Reference:

Lessons Learned from Using Cyber Range to Teach Cybersecurity at Different Levels of Education