A research team that includes UMBC CSEE faculty Naghmeh Karimi and Roberto Yus won the second place prize in the 2022 INCS-CoE Sandpit Challenge on Digital Trust. The International Cyber Security Center of Excellence (INCS-CoE) is an international collaboration of government, industry, and academic organizations that have partnered to explore pioneering efforts to address cybersecurity challenges created by a growing borderless digital society.  UMBC is a charter member of INCS-CoE.

The INCS-COE Sandpit Challenge invited self-assembled teams to compete for seed research funding prizes to pursue their work further. The UMBC faculty teamed up with researchers from Royal Holloway (UK) and Keio University (Japan). They were awarded second prize for their proposal to deal with challenges associated with developing an International Digital Trust Framework. In particular, their project proposal focused on designing an ontology-based interoperability solution amongst the US, UK, and Japan for mutual recognition of trust, capturing private and public sector use cases with different assurance levels.

The post UMBC faculty Karimi and Yus help team win 2nd place in Sandpit Challenge on Digital Trust appeared first on Department of Computer Science and Electrical Engineering.

A research team that includes UMBC CSEE faculty Naghmeh Karimi and Roberto Yus won the second place prize in the 2022 INCS-CoE Sandpit Challenge on Digital Trust. The International Cyber Security Center of Excellence (INCS-CoE) is an international collaboration of government, industry, and academic organizations that have partnered to explore pioneering efforts to address cybersecurity challenges created by a growing borderless digital society.  UMBC is a charter member of INCS-CoE.

The INCS-COE Sandpit Challenge invited self-assembled teams to compete for seed research funding prizes to pursue their work further. The UMBC faculty teamed up with researchers from Royal Holloway (UK) and Keio University (Japan). They were awarded second prize for their proposal to deal with challenges associated with developing an International Digital Trust Framework. In particular, their project proposal focused on designing an ontology-based interoperability solution amongst the US, UK, and Japan for mutual recognition of trust, capturing private and public sector use cases with different assurance levels.

The post UMBC faculty Karimi and Yus help team win 2nd place in Sandpit Challenge on Digital Trust appeared first on Department of Computer Science and Electrical Engineering.

Naghmeh Karimi receives NSF CAREER award to develop long-lasting security for cryptographic chips

Naghmeh Karimi is the most recent UMBC faculty member to receive a prestigious CAREER Award from the National Science Foundation (NSF). The grant, totaling approximately $500,000 over five years, will support her work to investigate how device-aging related risks compromise the security of cryptographic devices.

Karimi explains that cryptographic chips offer continued advances in authenticating messages and devices as well as preserving the integrity and confidentiality of sensitive information. They do so by implementing cryptographic algorithms in hardware. These chips combine the benefits of cryptographic applications with the speed and power advantage of hardware implementations. 

Despite their significant benefits, cryptographic chips can be compromised by adversaries who have gained physical access to the chips. Current protections against such attacks do not consider the aging of devices, which can shift device parameters over time.

Addressing security vulnerabilities 

Aging makes cryptographic chips operate slower and, ultimately, results in their malfunction, says Karimi. She explains that the typical lifetime of integrated circuits is 7 to 8 years. As the devices age, their performance decreases. Karimi is exploring the specific security vulnerabilities of aged devices and how they can be protected.

“We want to preserve the security of devices over their lifetime,” Karimi says.

Karimi and her research team will study whether the success of the side-channel analysis and fault-injection attacks increase in older devices. Karimi will create and test several countermeasures to protect devices against such attacks.

Connecting students with opportunities in tech security

The CAREER Award funding will support several UMBC undergraduate and graduate student researchers working with Karimi to develop long-lasting security solutions for hardware platforms. 

At the same time, Karimi will also develop and launch a new course in UMBC’s computer science and electrical engineering department on cryptography, hardware security, and testing. She will also work with the UMBC Cyber Scholars Program to connect students with internship opportunities focused on hardware security, to give them additional hands-on experience in the field. 

“The success of this project will enable us to develop long-lasting security for trusted hardware platforms,” Karimi says. “This will result in aging-resistant security solutions that benefit society through devices that remain secure over their lifetime.”

Adapted from a UMBC News article by Megan Hanks. Banner image: UMBC’s ITE building. Photo by Marlayna Demond ’11 for UMBC.

The post UMBC’s Naghmeh Karimi receives NSF CAREER Award to develop long-lasting security for cryptographic chips appeared first on Department of Computer Science and Electrical Engineering.

Investigating the Impact of Device Aging on the Security of Cryptographic Chips

Professor Naghmeh Karimi received a prestigious NSF CAREER award to support her research on Investigating the impact of device aging on the security of cryptographic chips.

CAREER awards are among NFS’s most prestigious awards and are intended to support early-career faculty who have the potential to serve as academic role models in research and education and to lead advances in the mission of their department or organization.

Cryptographic chips implement cryptographic functions in hardware for better performance. Despite the significant performance benefits, cryptographic chips can be compromised by the adversaries via monitoring their power-consumption, tampering their logic or placing the chips under stress to generate erroneous outputs to infer sensitive data. The current protections against such attacks do not consider the aging of the devices that can cause a parametric shift of device parameters over time which can compromise device security.

Supported by this five-year award, Professor Karimi and her students will investigate the effects of device aging on the security of cryptographic devices, particularly those with protection against physical attacks, and develop solutions to ensure security when device aging comes into account. Her work will help enable the development of long-lasting security for trusted hardware platforms, and result in aging-resistant security solutions that benefit the society via devices that remain secure over their lifetime.

The post Prof. Naghmeh Karimi receives NSF CAREER award for research on the security of cryptographic chips appeared first on Department of Computer Science and Electrical Engineering.

Maryland Public Television’s Charles Robinson reports on how Baltimore continues to recover after city computers were infected with ransomware in the May 2019 Baltimore ransomware attack and interviews Dr. Rick Forno, associate director of the UMBC Center for Cybersecurity and graduate director of UMBC’s Cybersecurity MPS degree program.

From Wikipedia: On May 7th 2019, most of Baltimore’s government computer systems were infected with a new and aggressive ransomware variant named RobbinHood. All servers, with the exception of essential services, were taken offline. In a ransom note, hackers demanded 13 bitcoin (roughly $76,280) in exchange for keys to restore access. The note also stated that if the demands were not met within four days, the price would increase and within ten days the city would permanently lose all of the data.

As of May 13, 2019 all systems remained down for city employees. It is estimated that it will take weeks to recover. According to Mayor Jack Young, US Federal Law enforcement continue to investigate the attack. The attack had a negative impact on the real estate market as property transfers could not be completed until the system was restored on May 20th. However, the restoration of all systems was, as of May 20, 2019, estimated to take weeks more.

Baltimore was susceptible to such an attack due to its IT practices, which included decentralized control of its technology budget and a failure to allocate money its information security manager wanted to fund cyberattack insurance. The attack has been compared to a previous ransomware attack on Atlanta the previous year, and was the second major use of the RobbinHood ransomware on an American city in 2019, as Greenville, North Carolina was also impacted in April.

The post Dr. Forno discusses the Baltimore Ransomware attack on Maryland Public TV program appeared first on Department of Computer Science and Electrical Engineering.

Global Impact, Promise & Perils of Blockchain

UMBC Professors Haibin Zhang (Computer Science and Electrical Engineering) and Karuna Joshi (Information Systems) will be panelists for an event focused on the impact, promise and perils of blockchain technologies at the bwtech@UMBC Research & Technology Park. The event will take place from 8:15 to 11:15am on Tuesday, March 20 2018 at and will include breakfast and time for networking.  They will be joined on the panel by Marcus Edwards, from Northrop Grumman’s Cyber & Intelligence Mission Solutions, Steve Cook of Verizon Enterprise Solutions, Sean Manion of  Science Distributed and moderator Razvan Miutescu of Whiteford, Taylor & Preston, LLP.   For more information and tickets are available on eventbrite.

CyberInnovation Briefing: The Global Impact, Promise & Perils of Blockchain

8:15 – 11:15 Tuesday, March 20, 2018

bwtech@UMBC Research & Technology Park
5520 Research Park Drive, Baltimore, MD 21228

Cryptocurrency market capitalizations have soared over the past year and new innovative blockchain applications are continuing to emerge seemingly by the day. However, the average end-user is left to singularly make sense of a vast and global marketplace that is rapidly converging the core tenets of economics and technology development. The future prospects of traditional business and financial models is uncertain as blockchain technology leaves key decision makers in an untenable position to either adopt and adapt or simply be left behind. Industry and academic experts in the field will discuss the pros and cons and opportunities and challenges of this disruptive technology movement.

The post 🗣️ CyberInnovation Briefing: Global Impact, Promise & Perils of Blockchain appeared first on Department of Computer Science and Electrical Engineering.

UMBC’s Haibin Zhang shares tips to secure data in the cloud

As more consumers rely on cloud-based data storage for everything from family photos to financial information, both experts and general users have voiced concerns about cloud security. In a new Conversation article recently published by Scientific American, Haibin Zhang, assistant professor of computer science and electrical engineering, explains precautions consumers can take to protect their files in the cloud.

Zhang explains that data stored and secured using commercial cloud storage systems is encrypted, which means that without the key, the information looks like a series of meaningless characters. Encryption keys have the potential to be misused, if they end up in the wrong hands, which can compromise the security of files stored in a cloud.

“Just like regular keys, if someone else has them, they might be stolen or misused without the data owner knowing,” says Zhang. “And some services might have flaws in their security practices that leave users’ data vulnerable.”

Zhang notes that some cloud services allow customers to maintain their encryption key themselves, which give the consumer the control in ensuring that their data remains safe. Other services keep the encryption keys internally and manage the security for their customers. He says that while each option has benefits, it is important to recognize that “some services might have flaws in their security practices that leave users’ data vulnerable.”

To keep data secure in the cloud, Zhang suggests using enhanced security features offered by cloud storage companies and taking additional precautions that are available to individual customers. He recommends that people use a cloud storage service that allows customers to encrypt their data before uploading it for storage, and to rely on services that have been “validated by independent security researchers.”

Read “How secure is your data when it’s stored in the cloud?” in The Conversation for Zhang’s additional recommendations on securing data on the cloud. The piece also appeared in Scientific American, and has so far been read nearly 20,000 times.

Adapted from a UMBC News article by Megan Hanks. Photo by Yuri Samoilov, CC by 2.0.

The post UMBC’s Haibin Zhang shares tips to secure data in the cloud appeared first on Department of Computer Science and Electrical Engineering.