Inventions & Patents

Inventions: System Security

Pioneer: Protecting Legacy Systems
Verifies integrity and guarantees execution of code on legacy platforms; detects malicious software; operates from a secure environment outside legacy system

SWATT (Software-based Attestation of Embedded Devices): Secure Devices
Detects and analyzes software threats on PCs, PDAs, cell phones and sensor nodes; operates from a secure environment outside the device; easily perform quality assurance audits

Automatic Eye-Level System for Robust Face / Iris Recognition: Biometrics
Long-range and short range recognition systems for security and surveillance at critical locations

MiB (Message in a Bottle): Cryptography
Creates key setups for sensor networks; current security protocols assume that sensor network nodes share cryptographic keys with base stations; reduces burden of setting up initial cryptographic keys. (Patent pending)

SQUARE (System Quality Requirements Engineering Process): Design Phase Evaluation
Analyzes security requirements for software-intensive systems in design phase, allowing evaluation before implementations; validated in case studies with CyLab partners; industry recognized process included in DHS website, Build Security In.

reCAPTCHA: Optical Character Recognition (OPR)
CAPTCHA programs generate tests that humans pass and computers fail. The reCAPTCHA project is a free Internet-based service, available to any website that prevents automated abuse of online services while helping to digitize books. As of June 2008, over 45,000 web sites have signed up for this service, resulting in 1.1 billion words digitized from books by over 750 million (unique) people.

Inventions: Security and Surveillance

Grey Technology Smartphone-based Universal Access

Human Feature Hiding in 3D Surface Scan Data

Location Based Unattended Baggage Detection

Multiple Vehicle Multiple Access Point Mobile Video Handover

Real-Time WiFi User Location Mapping System

Seeing-Is-Believing: Using Camera Phones for Human-Verifiable Authentications

Inventions: Network and Software Security

BIND: A Time-Use Attestation Service for Secure Distributed Systems

Human-Verifiable Code Execution

MEAD: Real-time Fault Tolerant Middleware Infrastructure

Midas: Nondeterminism Compensation for Fault-Tolerant Distributed Applications

Minisec: A Secure Network Layer Protocol for Sensor Networks (currently used in Bosch Products)

Secure Sensor Network Routing: A Clean Slate Approach

TFLA (Transparent Failure Routing Algorithm

Vajira: Distributed Survivability Benchmarking

Inventions: Technology Improvements

Context-Based Multiple Resolution Video Compression

Eye Tracking-Based Network Data Flow Control

CyLab Patent Filings

Automatic Signature Generation Against Worm Attacks

Context-Aware Network Bandwidth Optimization

Multiple Vehicle Multiple Access Point Mobile Video Handover

Pioneer: Verifying Integrity and Guaranteeing Execution of Code on Legacy Platforms

SecVisor: a mechanism for OS code integrity protection

MiB (Message in a Bottle)

CyLab in the headlines

Limiting Risks Found in the Cloud - June 10, 2013
"We're hoping that the cloud service providers understand insider threat," Carnegie Mellon CyLab researcher Dawn Cappelli says. "We have recommendations that we provide for organizations for what they should do to protect themselves against rogue administrators and to protect themselves against theft of intellectual property. Our hope is that cloud service providers understand that as well."

Those meters that rate password strength work, until they don't - June 11, 2013
"Passwords are not going to disappear overnight, or in the next 10 years or 20 years," said Lujo Bauer, researcher at Carnegie Mellon CyLab. Bauer and colleagues at Carnegie Mellon conducted the study with 2,931 subjects who created passwords on sites using one of 14 types of meters with different displays and criteria for determining strength.

“Hallucinating” a face, new software could have ID’d Boston bomber - May 29, 2013
Dr. Marios Savvides, the director of the CyLab Biometrics Center, said that the new technology could generate results much more detailed than those made by traditional image enhancement approaches. "The traditional methods yield about a 2 times to 4 times improvement" in the resolution of a facial image, he said. "This method gets us 16 times the resolution."

[see all the headlines]