Brendan Dolan-Gavitt, assistant professor of computer science and engineering at NYU Tandon was one of the researchers on this study. That’s the basis for a new approach developed by Zhenghao Hu and colleagues at New York University. Why not fill ordinary code with benign bugs as a way of fooling potential attackers? The idea is...
Category: CCS News
Could deliberately adding security bugs make software more secure?
The best way to defend against software flaws is to find them before the attackers do. This is the unshakeable security orthodoxy challenged by a radical new study from researchers at New York University. The study argues that a better approach might be to fill software with so many false flaws that black hats get bogged...
‘Chaff Bug’ Defense Rolls Out Shiny Objects for Attackers to Find
Camouflage and distraction have long been hallmarks of warfare, and it’s no different when it comes to the cyber-front. A group of researchers from New York University are taking the idea further than it’s gone before with the idea of introducing decoy bugs into code – ultimately non-exploitable vulnerabilities that can attract attacker interest and...
To make systems safer, put more bugs in them
Instead of routinely hunting and killing bugs, new research is proposing the addition of a “chaff bug” in programs to make them safer. By making software “buggier,” hackers could be baited and therefore overwhelmed by the number of bugs in a system and eventually give up their search, according to a study by researchers Zhenghao...
Protect your card details, identity from being doxxed
A recent study by New York University Tandon School of Engineering and the University of Illinois at Chicago (UIC) revealed the types of information that is typically exposed by doxxers: 90 percent of the time, the victim’s address is listed 61 percent included a phone number 53 percent included an email address 40 percent shared...
Now Transparent: Political Advertising on Facebook, Instagram
Conceived by Computer Science and Engineering Assistant Professor Damon McCoy, the Online Political Ads Transparency Project has built easy-to-use tools to collect, archive, and analyze political advertising data. The researchers, including NYU Tandon doctoral student Laura Edelson and Shikhar Sakhuja NYUSH ‘19, pledged to improve the transparency of Facebook’s archive by releasing weekly updates of...
Top tip? Sprinkle bugs into your code to throw off robo-vuln scanners
Miscreants and researchers are using automation to help them find exploitable flaws in your code. Some boffins at New York University in the US have a solution to this, and it’s a new take on “security through obscurity”.
Why confidence matters in facial recognition systems
Nasir Memon, a professor of computer science at the New York University Tandon School of Engineering, said it isn’t realistic to expect these systems to be completely accurate.
Cramming Software With Thousands of Fake Bugs Could Make It More Secure
Brendan Dolan-Gavitt, assistant professor at NYU Tandon and one of the researcher on this study, told me in an email that they’ve been working on techniques to automatically put bugs into programs for the past few years as a way to test and evaluate different bug-finding systems. Once they had a way to fill a...
Twenty-Two Organizations From AI, Automotive, Blockchain, Cloud and More Join The Linux Foundation and Invest in Open Source Technology
NYU Tandon School of Engineering empowers people to use science and technology as tools to build a better society. SDNLAB is a leading platform …