Uptane, a project of the Secure Systems Laboratory at NYU Tandon, invites everyone to “A Conversation on End-to-End Secure Automotive Software Updates.” This free online Zoom conference will run from 9 to 11 a.m. EDT on March 31. Specific topics addressed at the conference will include an overview of software supply chain security issues, particularly...
Author: Lois Anne DeLong (Lois Anne DeLong)
Ransomware hack at the Met confirms “nobody is safe.”
When contemplating where hackers will strike, perhaps the last target to come to mind would be the box office of an established cultural institution like New York City’s Metropolitan Opera. Yet, on December 7, attackers did just that. The hack prevented ticket sales, forcing its staff to revert to hand-printed tickets that sold for a...
NSF-Funded Study Examines How Companies Target Online Advertising
In an effort to better understand how advertisers access and use consumers’ personal information to generate online targeted ads, the National Science Foundation is funding a multi-institutional team that includes NYU Tandon’s Dr. Damon McCoy as co-principal investigator. Under the $1.2 million grant, McCoy and his colleagues are charged with developing strategies to make targeted...
CfD/Global Witness Study Finds Facebook Accepted Threatening Ads
In a test of how well social media outlets enforce their policies about harmful content in advertising, Facebook clearly fell short during the US midterm elections. A study conducted by Global Witness and NYU’s Cybersecurity for Democracy (C4D) found that Facebook either failed to detect, or just ignored, death threats against election workers contained in a...
FauxPilot: AI-assisted code generation with no strings attached
Want the benefit of an AI-assisted code generation program like GitHub Copilot, but don’t want to be tethered to the Microsoft universe? Dr. Brendan Dolan-Gavitt has developed an alternative. In the summer of 2022, the assistant professor of computer science and engineering at NYU’s Tandon School of Engineering introduced the cheekily-named FauxPilot. The primary goal...
Cappos: Major security problems can start with minor bits of code
Software programs can often be brought down by “some seemingly insignificant component, without which it fails.” Thus writes David Geer in a commissioned article in Communications of the ACM that looks at “how software stays so fragile despite industry efforts to stabilize it.” The article, published in October, examines “tendencies and trends” that “inflate coding errors”...
Cappos: DDos attacks on U.S. airports are a reminder of hacktivist “capabilities”
On October 10, 2022, websites at a number of airports around the U.S. simultaneously suffered denial-of-service attacks at the hands of the Russian “hacktivist” group Killnet. Major airports, such as LaGuardia, Orlando International, LAX, O’Hare and Midway, and Atlanta’s Hartsfield-Jackson, saw their websites go down, though operations were not directly impacted. In an interview broadcast...
Using AI-assisted code may not be risky business
Maybe AI is A-OK after all? A year after his initial study raised serious concerns about potentially buggy code being written by AI-assisted programs, Dr. Brendan Dolan-Gavitt now reports the risk differential between source code written by human programmers and code written with the help of large language models (LLMs) may not be “statistically significant.” Dolan-Gavitt,...
Tandon Professor Gupta Named ASC Fellow
For the second time this year Professor Nikhil Gupta of the NYU Tandon Department of Mechanical and Aerospace Engineering has been named a Fellow of a distinguished organization in materials science. The American Society for Composites honored Gupta on September 20 at its Annual Meeting in Tucson, Arizona. Earlier in the year he was honored as a Fellow of ASM International. In...
CCS to Benefit from New NYU Tandon/DTTC Partnership
On September 7, the NYU Tandon School of Engineering and The Depository Trust & Clearing Corporation (DTCC) announced a new five-year partnership to advance the work of the NYU Center for Cybersecurity. A primary goal of the partnership is to expand the concept of resiliency in CCS research and educational offerings. According to an announcement published...