Cybersecurity

Cyber-Insurance as a Signaling Game: Self-Reporting and External Security Audits

An insurer has to know the risks faced by a potential client to accurately determine an insurance premium offer. However, while the potential client might have a good understanding …

avatar
Aron Laszka
•

SolidWorx: A Resilient and Trustworthy Transactive Platform for Smart and Connected Communities

Internet of Things and data sciences are fueling the development of innovative solutions for various applications in Smart and Connected Communities (SCC). These applications …

Scott Eisele
•

Economic Analyses of Security Investments on Cryptocurrency Exchanges

Cryptocurrency exchanges are frequently targeted and compromised by cyber-attacks, which may lead to significant losses for the depositors and closure of the affected exchanges. …

Benjamin Johnson
•

Application-Aware Anomaly Detection of Sensor Measurements in Cyber-Physical Systems

Detection errors such as false alarms and undetected faults are inevitable in any practical anomaly detection system. These errors can create potentially significant problems in …

Amin Ghafouri
•

Tool Demonstration: FSolidM for Designing Secure Ethereum Smart Contracts

Blockchain-based distributed computing platforms enable the trusted execution of computation—defined in the form of smart contracts—without trusted agents. Smart contracts are …

Anastasia Mavridou
•

Get Your Workload in Order: Game Theoretic Prioritization of Database Auditing

A wide variety of mechanisms, such as alert triggers and auditing routines, have been developed to notify administrators about types of suspicious activities in the daily use of …

Chao Yan
•

A Game-Theoretic Approach for Integrity Assurance in Resource-Bounded Systems

Assuring communication integrity is a central problem in security. However, overhead costs associated with cryptographic primitives used towards this end introduce significant …

avatar
Aron Laszka
•

The Rules of Engagement for Bug Bounty Programs

White hat hackers, also called ethical hackers, who find and report vulnerabilities to bug bounty programs have become a significant part of today’s security ecosystem. While the …

avatar
Aron Laszka
•

Designing Secure Ethereum Smart Contracts: A Finite State Machine Based Approach

The adoption of blockchain-based distributed computation platforms is growing fast. Some of these platforms, such as Ethereum, provide support for implementing smart contracts, …

Anastasia Mavridou
•

An Economic Study of the Effect of Android Platform Fragmentation on Security Updates

Vendors in the Android ecosystem typically customize their devices by modifying Android Open Source Project (AOSP) code, adding in-house developed proprietary software, and …

Sadegh Farhang
•