Current CyLab Chronicles

paper CyLab Chronicles is a series of articles that provide insight into the research conducted in CyLab at Carnegie Mellon University. From smartphones to network configuration protocols, face-recognition applications to privacy policy, the details come to light in the Chronicles. The series is written by Richard Power, an internationally-recognized cybersecurity expert and CyLab Distinguished Fellow. Power is the author of numerous books and conceived and designed the "CSI/FBI Computer Crime and Security Survey" (1995-2002), an annual study, conducted in conjunction with the FBI Computer Crime Squad.

RSS Feed Available

2013

CyLab Researchers Featured on CBS Sixty Minutes
After years of NCIS and other popular law enforcement TV dramas, there is an expectation that facial recognition technology could have led to a speedier conclusion to the Boston Marathon bombing suspect manhunt, or perhaps even have prevented the savage attack.

CyLab Seminars Series Offers Vital Perspectives on Critical Issues in Cyber Security and Privacy
On Mondays at noon, during the school year, CyLab presents its Seminar Series. These talks highlight the research of CyLab faculty, as well as, visiting scholars. In addition, through the CyLab Business Risks Forum, experts in security and privacy from business and government share vital operational perspectives.

2012

A Glimpse Into the 9th Annual CyLab Partners Conference
Annual Partners Conference content is archived on the CyLab Partners Portal (another exclusive benefit of membership), including videos of the research presentations, along with .pdfs of the slides for each presentation, as well as the student posters, documenting current projects. To entice you to consider taking advantage of the benefits of CyLab partnership, and to contribute to the general dialogue on the vital issues of cyber security an privacy, we have posted a CyLab Partners Conference sampler and some other content to both the CyLab YouTube Channel and the CyLab iTunesU Store.

CyLab's Strong Presence at IEEE Security and Privacy 2012 Packs A Wallop
Seven papers authored or co-authored by CyLab researchers were presented in the course of the three-day program. In addition to the papers presented, CyLab faculty also chaired three sessions. Here is the CyLab 2012 IEEE Security and Privacy roster of papers and presenters, with brief excerpts from each paper ...

Lightning in a Bottle? A Brief Tour of CyLab Online
Indeed, CyLab is an audacious undertaking; and doing justice to such audacity has been quite a challenge. How do you sustain a narrative that is so complex? How do you communicate the prevailing spirit of the overall program, while at the same time documenting the painstaking progress of individual researchers? Since its launch in 2008, CyLab Online has pursued these daunting goals. And as of this writing, we have over two thousand pages of content, stretching across two central hubs, as well as several other outposts throughout the World Wide Web. Let us take you on a brief tour of some of what is available via CyLab Online.

Mike Farb Offers Insights Into SafeSlinger, CyLab's Powerful New Smartphone App
We want to provide secure operations even with careless users and powerful local adversaries who can monitor our messages and potentially alter our messages. We want to be able to detect group members attempting to impersonate other groups members. We want to eliminate the need to count in large groups. We want to enable remote operation, so that we can also do this over the phone. (We can assure each other of our presences, because we can recognize our voices in real time.) We want no information leaked to outsiders, even if the protocol fails.



[see archived articles]

Upcoming events

May 20, 2013: CERT Training
Applied Cybersecurity, Incident Response and Forensics
This five-day hands-on course is designed to increase the knowledge and skills of technical staff charged with administering and securing information systems and networks. Security topics such as vulnerability assessment, systems administration, network monitoring, incident response, and digital forensics will offer a comprehensive defense-in-depth experience

June 11, 2013: CERT Training
Managing Enterprise Information Security: A Practical Approach for Achieving Defense-in-Depth
This three-day course begins with a brief review of the conceptual foundations of information security. Next, students will be introduced to the CERT Defense-in-Depth Framework: eight operationally focused and interdependent management components which will be synergistically applied to a fictitious organization's Information Technology (IT) enterprise.

July 8, 2013: CERT Training
Information Security for Technical Staff
This five-day course is designed to provide participants with practical techniques for protecting the security of an organization's information assets and resources, beginning with concepts and proceeding on to technical implementations.

[see all events]