Aron Laszka

Aron Laszka

Associate Professor
Pennsylvania State University

Aron Laszka is an Associate Professor in the College of Information Sciences and Technology at the Pennsylvania State University. Previously, he was an Assistant Professor at the University of Houston, a Research Assistant Professor at Vanderbilt University, and a Postdoctoral Scholar at the University of California, Berkeley.

His research interests revolve around artificial intelligence and cyber-physical systems, focusing on machine learning for decision making and optimization, with applications in smart and connected communities, critical infrastructure, and cybersecurity.

His research is funded by the National Science Foundation, the Department of Energy, the Department of Transportation, and other agencies.

Integrating Redundancy, Diversity, and Hardening to Improve Security of Industrial Internet of Things

As the Industrial Internet of Things (IIoT) becomes more ubiquitous in critical application domains, such as smart water-distribution and transportation systems, providing security …

avatar
Aron Laszka
Cyber-Physical Systems, 2020

Post-Incident Audits on Cyber Insurance Discounts

We introduce a game-theoretic model to investigate the strategic interaction between a cyber insurance policyholder whose premium depends on her self-reported security level and an …

Sakshyam Panda
Computers & Security, 2019

Detection and Mitigation of Attacks on Transportation Networks as a Multi-Stage Security Game

In recent years, state-of-the-art traffic-control devices have evolved from standalone hardware to networked smart devices. Smart traffic control enables operators to decrease …

avatar
Aron Laszka
Computers & Security, 2019

Data-Driven Detection of Anomalies and Cascading Failures in Traffic Networks

Traffic networks are one of the most critical infrastructures for any community. The increasing integration of smart and connected sensors in traffic networks provides researchers …

Sanchita Basak
PHM 2019

Diversity and Trust to Increase Structural Robustness in Networks

In a networked system, any change in the underlying network structure, such as node and link removals due to an attack, could severely affect the overall system behavior. …

Waseem Abbas
ACC 2019

A Game-Theoretic Approach for Selecting Optimal Time-Dependent Thresholds for Anomaly Detection

Adversaries may cause significant damage to smart infrastructure using malicious attacks. To detect and mitigate these attacks before they can cause physical damage, operators can …

Amin Ghafouri
Autonomous Agents and Multi-Agent Systems, 2019

Database Audit Workload Prioritization via Game Theory

The quantity of personal data that is collected, stored, and subsequently processed continues to grow rapidly. Given its sensitivity, ensuring privacy protections has become a …

Chao Yan
ACM Transactions on Privacy and Security, 2019

Augmenting Learning Components for Safety in Resource Constrained Autonomous Robots

Learning enabled components (LECs) trained using data-driven algorithms are increasingly being used in autonomous robots commonly found in factories, hospitals, and educational …

Shreyas Ramakrishna
ISORC 2019

Cyber-Physical Simulation Platform for Security Assessment of the Transactive Energy Systems

Transactive energy systems (TES) are emerging as a transformative solution for the problems that distribution system operators face due to an increase in the use of distributed …

Yue Zhang
MSCPES 2019
Efficient and Scalable Bug-Bounty Programs featured image

Efficient and Scalable Bug-Bounty Programs

Many organizations and companies have recently chosen to use so-called bug-bounty programs (also known as vulnerability reward programs), which allow outside security experts to evaluate the security of an organization’s products and services and to report security vulnerabilities in exchange for rewards. Bug-bounty programs provide unique benefits by allowing organizations to publicly signal their commitment to security and to harness the diverse expertise of thousands of security experts in an affordable way. Despite their rapidly growing popularity, bug-bounty programs are not well understood and can be mismanaged. As a result, bug bounty programs can waste substantial resources and they rarely live up to their potential to improve cybersecurity. This project will significantly improve the efficiency of bug-bounty programs by collecting and publishing comprehensive datasets on the bug-bounty ecosystem, by establishing a sound theory of bug-bounty programs, and by providing practical recommendations for organizations and regulators.

2019 – 2022 Read more