The machine learning renaissance is significantly improving the performance of sensor signal processing and control algorithms, but there is no way to train these systems under all adversarial inputs in order to build provably secure systems. Thus the grand challenge for the future of IoT/CPS security becomes securing these complex autonomous systems in an era of black-box deep learning AI.

– I have an NSF grant on “using process tracing to improve household IoT users’ privacy decisions”.

– Our work on the data-driven development of IoT privacy-setting interfaces recently won the best paper award at the Intelligent User Interfaces conference.

I am an assistant professor with a primary research focus on network and application security. measuring and improving the security and privacy of computer systems, with a particular emphasis on telephone networks and software for mobile platforms. My research integrates knowledge from fields as diverse as signal processing and digital communications; data science, machine learning, and statistics; cryptography; program analysis; reverse engineering; and Internet and telephone networks.

One key theme of my research is providing security in legacy systems that do not provide confidentiality or integrity guarantees.

My position paper highlights the role of voice and multimedia in modern embedded systems and highlights key open research questions about providing confidentiality, privacy, integrity, and authentication for voice and multimedia security.

A decade ago (in the Usenix Security 2008 workshop HotSec) I presented my second paper on how control theory and cyber-security needed to work hand in hand to address the new emerging risks of cyber-physical systems. This paper has become one of my most cited papers, and in the decade following this publication, we have seen a large and active academic community using concepts in control theory to improve the security of cyber-physical systems. I would like to use this opportunity to return a decade later to another workshop associated with Usenix Security and discuss my perspective on the developments in this field in the last decade, which have been summarized in a recently accepted article at the ACM Computing Surveys journal.

My background is in embedded systems analysis and design. I have experience with security and privacy challenges in wireless, infrastructureless, defect-tolerant networks and with MMU-directed techniques for processor-memory bus encryption. I also co-founded and served as CEO of a wearable electronics company. Although my work on embedded systems has been broad, I have led two projects on the topic of security and intend to work heavily on security in large-scale IoT systems in the future.

I think my background in integrated circuits, optimization, VLSI, algorithms, operating systems, and technology commercialization may add something of value to the conversation and hope it is possible to attend.

The position paper is co-authored by Mingyan Liu and Armin Sarabi who would also like to attend. I have asked them to submit their own biographies.

My perspective and expertise is on cyber security in manufacturing and cyber security with university research from the perspective of a CIO.

I was lead technical author of the MForesight 2017 Report, “Cybersecurity for Manufacturers: Securing the Digitized and Connected Factory” https://cra.org/ccc/wp-content/uploads/sites/2/2017/10/MForesight-Cybersecurity-Report.pdf.

As Principal CIO Advisor for the Clean Energy Smart Manufacturing Innovation Institute (CESMII).

I was CIO at UCLA from 2000 – 2015 and am not Academic CTO focused on IT in research education and public private partnership programs

Jean-Baptiste Jeannin brings a unique perspective on security for aircraft, from small drones to airliners. His background is in formal verification applied to aircraft safety and security.
Baris Kasikci’s research is centered around developing techniques, tools, and environments that help developers build more reliable, secure, and efficient software. He is particularly interested in developing techniques and building systems that allow programmers to better reason about their code.

MIT Lincoln Laboratory serves to bridge the gap between academic research and fielded systems in support of US national security. Messrs. Bush and Ingols, and their colleagues, though members of the Cyber Security and Information Sciences division, are frequently called upon to collaborate with Lincoln’s other mission areas on a wide variety of hard problems in security, running the gamut from satellites to undersea systems, from large RADARs to microelectronic fabrication, from standalone devices to large networks and systems-of-systems. In addition to our interest in the low-level work in the field, we hope our work and their colleagues’ work with critical infrastructure and other Government systems can help to inform the discussion.

My research work has spanned several aspects of embedded security including algorithmic optimizations for efficient implementations of cryptographic primitives on constrained processors, side-channel attack countermeasures, secure storage technologies and hardware security and finally protocols. I am very interested in novel solutions to real world security problems which are practical.

I am Director of the NIMSAT Institute at University of Louisiana, and serve collaterally as Director of the Louisiana Business Emergency Operations Center, and as Chair of the Private Sector/Economic Development Committee of the Governor’s Cybersecurity Commission. I also Chair the Public Safety SuperCluster of the NIST Global City Teams Challenge. These positions are directed toward developing and implementing technologies to enhance public safety and disaster resilience, that depend fundamentally on secure and reliable connectivity between embedded systems, IoT sensors, critical infrastructures, and that interface with human operators and organizations. My contribution to the CCC workshop on Embedded Security would be based on ongoing research at UL in data analytics, SCADA sensors in critical infrastructures, and operational coordination for pre- and post-disaster scenarios, as well as on my involvement in national Smart and Connected Communities programs, specifically focused on Public Safety systems and technologies.

Arun Lakhotia’s bio (colleague of Michael who he would like to bring with him if possible)

Yuval’s bio