Tag Archive for: scientist

Computer scientist confronts worldwide challenge of online security and privacy – News Center



Thursday, Apr 06, 2023
• Herb Booth :
Contact

A University of Texas at Arlington computer security researcher has received a prestigious federal grant to determine what technologies and methods work best to attain and retain online security and privacy.

Shirin Nilizadeh
Shirin Nilizadeh

Shirin Nilizadeh, assistant professor in the Department of Computer Science and Engineering, received a $200,000 National Science Foundation grant to study social media discussions and better understand what concerns are about online security and privacy, what technologies and tools they suggest to each other to use and whether they are effective. Nilizadeh called this a “worldwide challenge.”

“People care about their online security and privacy everywhere,” she said. “And sometimes, due to societal and political movements, they become more cautious or aware of the problems, where they go online and on social media, and proactively discuss their concerns and ask for tools and methods that can help protect them.

“We can help as a research community to see what’s working and what isn’t. We can take these research findings to design and develop better online safeguards and to improve the existing security and privacy-preserving systems if they are not secure, effective and efficient.”

Hong Jiang, chair of the Department of Computer Science and Engineering, said Nilizadeh’s research could further the security of social network tools.

“Everyone is connected to social networks,” Jiang said. “Studying social networks’ discussions and understanding what security measures people are looking for and using allow researchers to develop and provide such measures to improve online security and privacy.”

Previous Nilizadeh work showed that social media users extensively discussed the security and privacy threats of video communication tools more people started working from home due to the COVID-19 pandemic. This work showed how misinformation about security and privacy spread on social media platforms.

Nilizadeh…

Source…

Billions of computers at hacking risk: Indian-origin scientist



An Indian-origin researcher has warned that billions of computers and other devices across the globe are vulnerable today owing to a vulnerability named ‘Spectre’ …

Source…

Indian-origin scientist, Telecom News, ET Telecom


Billions of computers at hacking risk: Indian-origin scientistNew Delhi: An Indian-origin researcher has warned that billions of computers and other devices across the globe are vulnerable today owing to a vulnerability named ‘Spectre’ that was first discovered in 2018 but is open to hackers again.

Since ‘Spectre’ was discovered, the world’s most talented computer scientists from industry and academia have worked on software patches and hardware defenses, confident they’ve been able to protect the most vulnerable points in the speculative execution process without slowing down computing speeds too much.

However, researchers, led by Ashish Venkat at the University of Virginia’s School of Engineering and Applied Science, UVA Engineering, discovered that computer processors are open to hackers again.

They found a whole new way for hackers to exploit something called a “micro-op cache,” which speeds up computing by storing simple commands and allowing the processor to fetch them quickly and early in the speculative execution process.

Micro-op caches have been built into Intel computers manufactured since 2011.

Venkat’s team discovered that hackers could steal data when a processor fetches commands from the micro-op cache.

“Think about a hypothetical airport security scenario where TSA lets you in without checking your boarding pass because (1) it is fast and efficient, and (2) you will be checked for your boarding pass at the gate anyway,” Venkat said.

A computer processor does something similar. It predicts that the check will pass and could let instructions into the pipeline.

“Ultimately, if the prediction is incorrect, it will throw those instructions out of the pipeline, but this might be too late because those instructions could leave side-effects while waiting in the pipeline that an attacker could later exploit to infer secrets such as a password,” he elaborated.

Because all current ‘Spectre’ defenses protect the processor in a later stage of speculative execution, they are useless in the face of Venkat’s team’s new attacks.

Two variants of the attacks the team discovered can steal speculatively accessed information from Intel and AMD processors.

“Intel’s suggested defense against Spectre, which is called LFENCE, places sensitive code in a waiting…

Source…

New Year honours data breach may lead to less government transparency – New Scientist News

  1. New Year honours data breach may lead to less government transparency  New Scientist News
  2. New Year Honours 2020: Women’s Aid worker calls data breach ‘worrying’  BBC News
  3. ‘Shambolic’ New Year’s Honours data breach sparks security concerns in Northern Ireland  Belfast Telegraph
  4. Government laughed at for Honours data breach  Morning Star Online
  5. Government face compensation claims following Honours List data breach blunder  Lexology
  6. View full coverage on read more

“data breach” – read more