buttonTrust
 

Key Resources:

Overview Orgchart Partners Recent Pubs Annual Report
News Seminar Research Education FAQ
TRUST News

Internet is still vulnerable to cyber-criminals

A January 21, 2012 San Francisco Chronicle article "Internet is still vulnerable to cyber-criminals" by James Temple discusses Mark Bowden's book "Worm: The First Digital World War," which describes the October 21, 2002 attack on the Internet Domain Name Servers.

The SF Chronicle article states:

Internet Protocol version 6, will create more root name servers and add other security protections.

"But the general consensus today is that it's still pretty fragile," said Doug Tygar, professor of computer science at UC Berkeley.




See also the October 3, 2011 review of 'Worm'.

Android apps and advertising: A bit too cozy

A Tech Republic blog entry "Android apps and advertising: A bit too cozy" features the research of TRUST Ph.D. student Adrienne Porter Felt.

Adrienne asked non-computer scientists: ?Do you think the advertiser can use the app?s permissions?? Twelve people answered with:

Yes: 5
No: 2
I don?t know: 5

It turns out that the answer is not that simple.

Adrienne's blog entry "Advertising and Android Permissions" states:


"Can an advertiser use an app?s permissions?"

"When you see an advertisement in an application, there are three parties. First, there?s the application itself, which asks the user for permissions. Second, there?s the advertising library, which is shoved into the application and therefore gains access to all of the app?s permissions. Third, the advertising library displays the advertisement itself. The advertisement can?t directly use any of the permissions, but the advertising library might share information with the company that is running the ad. So if you see an REI ad while playing a game, you should know that the invisible ad library gets all of the game?s permissions, and it might share information like your location with REI."


Adrienne is a student of Berkeley Professor David Wagner.

Carrier IQ cell phone monitor software is a nightmare

TRUST Professor Stephen Wicker was quoted in a NetworkWorld article, "Cornell Prof: Carrier IQ affair 'my worst nightmare'". Carrier IQ is software present on various cell phones that provides call quality and other feedback to cell phone companies.

The article quotes Professor Wicker:


"This is my worst nightmare," says Stephen Wicker, a professor of electrical and computer engineering at Cornell. "As a professor who studies electronic security, this is everything that I have been working against for the last 10 years. It is an utterly appalling invasion of privacy with immense potential for manipulation and privacy theft that requires immediate federal intervention.

"Carrier IQ claims that the collected data is 'anonymized.' Let's give this a moment's thought -- about all that it deserves. How hard would it be to 'de-anonymize' a pile of text messages between me and my wife? My mother? My children? Banking IDs with passwords?"



The article was also picked picked in a Slashdot article.

White House Honors Cornell's Salman Avestimehr with PECASE

TRUST investigator and Cornell Professor Salman Avestimehr was named a recipient of the Presidential Early Career Award for Scientists and Engineers, the highest honor bestowed by the United States government on science and engineering professionals in the early stages of their research careers.

Nominated by the National Science Foundation, Prof. Avestimehr was recognized as one of the Nation's "most meritorious scientists and engineers whose early accomplishments show the greatest promise for assuring America's preeminence in science and engineering and contributing to the awarding agencies' missions." The award includes a multi-year research grant.

The press release from the White House, which includes the full list of recipients, is available here. A press release from the Cornell University School of Electrical and Computer Engineering is available here.

"The Science of Cyber Security"

US News and World Report's article, "The Science of Cyber Security" by Marlene Cimons gives an overview of the Team for Research in Ubiquitous Secure Technology (TRUST). Dean Shankar Sastry is quoted:

"?We no longer can afford to be reactive in our attitudes about cyber security,? ...

?Our current approach is bolt-on, rather than built-in patches, bolted on, like an afterthought. We need to be proactive.?

Erika Chin: "Seven ways to hang yourself with Google Android"

The research work of Erika Chin, an EECS graduate student studying smartphone security was featured in a Consumer Reports online magazine article titled "Def Con 19: Android apps ask for too much power". Erika and principal researcher Yekaterina Tsipenyuk O?Neil reported that after studying dozens of Android apps, 30 percent of them were over privileged and creates a larger security risk to your personal information and phone.
(Based on text by Miyoko Tsubamoto)

Stanford's Dan Boneh Receives Dean's Award for Industry Education Innovation

TRUST researcher and Stanford University Professor Dan Boneh was awarded the School of Engineering Dean's Award for Industry Education Innovation. The award is given for "outstanding teaching and exemplary leadership in industry education" and Dan was recognized for his leadership of the Stanford Advanced Computer Security Certificate program as well as teaching courses on computer systems security and cryptography. These courses are offered by the Stanford Center for Professional Development which focuses on connecting working professionals worldwide to the research and teaching of Stanford University faculty in the School of Engineering and related academic departments.

TRUST Researchers to Lead Intel Security Center

Intel Labs announced the creation of the Intel Science and Technology Center for Secure Computing (ISTCSC) to be led by UC Berkeley with partner institutions Carnegie Mellon, Drexel, Duke, and Illinois.


The center's work will focus on making personal computers safer from malware, securing mobile devices, and protecting personal data when it is distributed across the Internet by giving people more control over it. The center is the second announced by Intel as part of their 5-year, $100 million ISTC program that will increase university research, accelerate innovation, and encourage tighter collaboration between university thought leaders and Intel. The ISTCSC will be funded at a level of $2.5 million per year for five years.

The center will be co-led by TRUST investigator and UC Berkeley Professor David Wagner and Intel Senior Principal Engineer John Manferdelli. Among the faculty researchers participating in the center are TRUST investigators Anthony Joseph, Vern Paxson, Dawn Song, and Doug Tygar from UC Berkeley and Adrian Perrig from Carnegie Mellon.

Intel released a press statement announcing the creation of the center and the center?s website contains a white paper describing the center?s research agenda.

Audio Captchas defeated

Stanford Professor John Mitchell, postdoctoral research Elie Bursztein and their colleagues have developed a way to defeat the audio version of Captchas. See The Register and the Stanford News coverage.

Stephen Wicker on iOS user privacy

Professor Stephen Wicker was quoted in Network World's article "Cornell prof warns iPhone, iPad users: "We're selling our privacy" about the recently reported location logging by the iPhone and iPad. The Network World article quotes Professor Wicker:

"It is vitally important to recognize that cellular telephony is a surveillance technology, and that unless we openly discuss this surveillance capability and craft appropriate legal and technological limits to that capability, we may lose some or all of the social benefits of this technology, as well as a significant piece of ourselves," says Stephen Wicker, Cornell professor of electrical and computer engineering. "Most people don't understand that we're selling our privacy to have these devices."

Doug Tygar on the LinkedIn outage in China

Bloomberg's February 25, 2011 article
"LinkedIn Service Is Restored in Beijing After `Jasmine' 24-Hour Disruption" discusses how LinkedIn was blocked in China after a user posted comments about how "Tunisia?s Jasmine Revolution should spread to the Asian nation that?s been ruled by the Communist Party since 1949." The article quotes TRUST's Doug Tygar:

?Often, this is done as a sort of a warning signal -- sort of a shot across the bow,? said Doug Tygar, professor of computer science at the University of California at Berkeley. ?A portion of that is symbolic.?

The quote was also printed on page D-1 of the San Francisco Chronicle, "Business Report - The Chronicle with Bloomberg."

Cornell's Hakim Weatherspoon Awarded Sloan Fellowship

TRUST investigator and Cornell University Prof. Hakim Weatherspoon was named a recipient of the 2011 Sloan Research Fellowship of the Alfred P. Sloan Foundation.

Sloan Research Fellowships seek to stimulate fundamental research by early-career scientists and scholars of outstanding promise and are awarded yearly to researchers in recognition of distinguished performance and a unique potential to make substantial contributions to their field.

A press release of the 2011 fellowship awards is available here.

Car Theft by Antenna

According to new research to be presented at the Network and Distributed System Security Symposium next month in San Diego, California, car thieves of the future might be able to get into a car and drive away without forced entry and without needing a physical key.

Researchers successfully attacked eight car manufacturers' passive keyless entry and start systems?wireless key fobs that open a car's doors and start the engine by proximity alone. Because a car won't open or start if the signal from its key takes too long to arrive, the researchers devised a way to speed communication between their their antennas. They were able to keep the signals in analog format, which reduced their delay from microseconds to nanoseconds, making their attack more difficult to detect.

David Wagner,professor of computer science at the University of California at Berkeley who has studied the cryptographic systems used in keyless entry systems, says the research "should help car manufacturers improve auto security systems in the future." Wagner doesn't think the research ought to make car owners anxious. "There are probably easier ways to steal cars," he says. But, he adds, a "nasty aspect of high-tech car theft" is that "it doesn't leave any sign of forced entry," so if a thief did use this method to steal a car, he says, it might be hard for police and insurance companies to get sufficient evidence of what happened. Wagner believes that manufacturers, police, and insurance companies all need to prepare for this eventuality.

See full article in Technology Review, published by MIT.

Commerce announces new shop to oversee online security

NextGov.com's article "Commerce announces new shop to oversee online security" covers Commerce Secretary Gary Locke's announcement that

The Obama administration is creating an office that will coordinate with the private sector to establish a secure pathway for people, organizations and computer programs to execute online transactions...

Locke spoke at an industry forum sponsored by many groups, including TRUST.

White House Honors Vanderbilt's Bradley Malin

TRUST investigator and Vanderbilt University Professor Bradley Malin was named a recipient of the Presidential Early Career Award for Scientists and Engineers, the highest honor bestowed by the United States government on science and engineering professionals in the early stages of their research careers.

Nominated by the National Institutes of Health and Department of Health and Human Services, Prof. Malin was recognized as one of the Nation's "most meritorious scientists and engineers whose early accomplishments show the greatest promise for assuring America's preeminence in science and engineering and contributing to the awarding agencies' missions." The award includes a multi-year research grant.

The press release from the Office of Science and Technology Policy (OSTP), which includes the full list of recipients, is available here.

"Fabric" To Weave Security into Code

Cornell computer science faculty, Fred Schneider and Andrew Meyers are developing a new computer platform, dubbed Fabric, that offers a way to build security into computer systems from the start by incorporating security in the language used to write the programs.

Professor Schneider states that until now, computer security has been reactive; when hackers discover a way in, we patch it.
"Our defenses improve only after they have been successfully penetrated," he explained.
Fabric's programming language, an extension of the widely used Java language, builds in security as the program is written. Fabric is still a prototype, being tested on a database of Cornell computer science students.

Schneider and Myers plan to scale it up for very large distributed systems, provide for more complex security restrictions on objects and enable "mobile code" ? programs that can reside on one node of a network and be run on another with assurance that they are safe and do what they claim to do. And perhaps most important (and perhaps hardest), they hope to provide formal mathematical proof that a system is really secure.

See article in
Dr. Dobb's, The World of Software Development.

UC Berkeley's Dawn Song Awarded MacArthur Fellowship

TRUST researcher and UC Berkeley Professor Dawn Song was named a 2010 MacArthur Fellow by the John D. and Catherine T. MacArthur Foundation.

The so-called "genius award" is given to individuals "who have shown extraordinary originality and dedication in their creative pursuits and a marked capacity for self-direction" as well as "exceptional creativity, promise for important future advances based on a track record of significant accomplishment, and potential for the fellowship to facilitate subsequent creative work." Prof. Song, one of 23 recipients of this year's award, was cited for her work in applying "rigorous theoretical methods to understand the deep interactions of software, hardware, and networks that make computer systems vulnerable to attack or interference."

Details on Prof. Song's work and her award are available here.

TRUST Autumn 2010 Conference: Nov. 10-11, 2010

The next TRUST Conference will be held November 10-11, 2010 at the Jen-Hsun Huang Engineering Center on the campus of Stanford University. The conference will run from approximately 8:00 AM to 5:00 PM both November 10 and 11.

This event will provide attendees with an opportunity to hear firsthand about the work of TRUST faculty and students-specifically activities that:
  • Advance a leading-edge research agenda to improve the state-of-the art in cyber security and critical infrastructure protection;

  • Develop robust education and diversity plans to teach the next generation of computer scientists, engineers, and social scientists; and

  • Pursue knowledge transfer opportunities to transition TRUST results to end users within industry and the government.

For more information, see the TRUST Autumn 2010 Conference Page.

WSJ: "J.P. Morgan Wrestles Web Snarl

UC Berkeley Professor Doug Tygar was quoted in a September 15, 2010 Wall Street Journal website article, "J.P. Morgan Wrestles Web Snarl." The article discusses an outage at chase.com. Professor Tygar is quotes as stating, ""if they have so much trouble with a software failure, what happens with an actual attack?"

UC Berkeley's Pamela Samuelson wins IP3 Award

UC Berkeley Law Professor and renowned scholar Pamela Samuelson is one of four winners of this year's IP3 Award from the Washington-based public interest group Public Knowledge.

As a director of the Berkeley Center for Law & Technology, Samuelson is being acknowledged for her work in information policy, particularly in such areas as privacy, copyright, freedom of expression, intellectual property and consumer protection.
"Public Knowledge has been the most important voice for public-spirited intellectual property and Internet policy,? says Samuelson. ?I?m pleased that this organization believes I have made contributions to these same policies worthy of being named to this award."

See more in the Berkeley Law News Archive.

Web add-ons compromise 'private browsing'

A study by Dan Boneh of Stanford University claims that many browser add-ons or website security measures stop the 'private browsing' mode from working correctly.

Boneh and team examined the private browsing functions on Mozilla's Firefox, Microsoft Internet Explorer, Google Chrome and Apple's Safari and discovered all four were affected. Moreover, they discovered that all browsers retained the generated key pair even after private browsing ends which could leak the site's identity to an attacker.
"We found that private browsing was more popular at adult web sites than at gift shopping sites and news sites, which shared a roughly equal level of private browsing use," Boneh said in the report.

"This observation suggests that some browser vendors may be mischaracterising the primary use of the feature when they describe it as a tool for buying surprise gifts."

Boneh and his researchers say they believe they are the first to show that 'private browsing' can be compromised.

See full article at PC Advisor. Related articles appear at THIN!.co.uk and BBC NEWS.

Patents seen as low priority for software firms

Tom Abate's San Francisco Chronicle article, "Patents seen as low priority for software firms" discusses the paper written by Stuart J. H. Graham, Robert P. Merges, Pamela Samuelson and Ted M. Sichelman, "High Technology Entrepreneurs and the Patent System: Results of the 2008 Berkeley Patent Survey."

The article quotes Pamela Samuelson:
"More than 80 percent of the biotech, medical device and hardware firms we surveyed have or have applied for patents. . . About two-thirds of software firms have no patents and have not applied for any."

The study is also discussed by Phyorg, Broadbandbreakfast and Canadaviews.

Vanderbilt medical researchers, engineers play major role in new national center established to secure the privacy of electronic health information

The Vanderbilt University News Network released an article on Friday announcing the $15 million awarded to create a new center for health information and privacy. The center, headquartered at the University of Illinois, will include researchers from Vanderbilt University; University of California, Berkeley; Carnegie Mellon University; Dartmouth College; Harvard Medical School; Johns Hopkins University; Northwestern Memorial Hospital; Stanford University; University of Massachusetts, Amherst and the University of Washington.

It is one of four health care research centers established and funded for four years with American Recovery and Reinvestment Act of 2009 funds as part of the $60 million Strategic Healthcare Information Technology Advanced Research Projects on Security (SHARPS) program.
?Our participation in the new SHARPS center reflects the fact that Vanderbilt has become highly visible in the field of health care security and privacy,? said Janos Sztipanovits, director of the Institute for Software Integrated Systems (ISIS) at Vanderbilt?s School of Engineering.
Vanderbilt has gained experience in this area through its participation in the TRUST Science and Technology Center founded in 2006 by the National Science Foundation. The $40 million TRUST Center, whose core members are the University of California, Berkeley; Carnegie Mellon University; Cornell University; Stanford University; and Vanderbilt University, is one of the nation?s leading research consortiums focusing on the scientific foundations of system security and privacy. Vanderbilt has headed up TRUST?s health-care-related program.

See full article at VUCast.

Andrew Myers net radio interview: "Build security into applications"

Cornell Associate Professor Andrew Myers was interviewed on FederalNewsRadio about "Build security into applications":

"His theme: Software developers generally go about writing programs all wrong, when it comes to cyber security."

"He has come up with a concept called 'secure by design and construction' that designs out cybersecurity vulnerabilities."

"He recently presented his research to the House Subcommittee on Science and Technology."

Keeping Medical Data Private

Researchers at Vanderbilt University have developed an algorithm that simultaneously protects privacy of patients while allowing medical records to be used for research on the genetics of disease.

The new method, published online April 12 in the Proceedings of the National Academy of Sciences, simply disguises parts of the medical history data that are not relevant to a geneticist?s specific research question using an algorithm that looks through health records and makes some aspects of them more general.
?We?re hoping that it?s a game-changer,? says Bradley Malin, a biomedical informatics specialist from Vanderbilt University in Nashville who helped develop the method. The problem is, it's not all that difficult to follow a specific set of codes backward and identify a person, says Malin.

See articles in Science News and MIT's Technology Review.


For other items, see the TRUST News RSS Feed Icon blog.

Older News Items

These items are being moved to the Trust Website News Blog
* August 24, 2006: The Distinguished External Advisory Board met in Berkeley.
Presentations (Viewable only by deab workgroup members, see How do I request a workgroup account?)
Individuals with any Trust website account may view the presentations.
The Distinguished External Advisory Board membership includes:
Alfred Aho (Columbia)   Annie Anton (NCSU)
Matt Bishop (UC Davis)   Lee Burge (Tuskegee)
David Clark (MIT)   George Cybenko (Dartmouth)
James Johnson (Howard)   Jay Lala (Raytheon)
Carl Landwehr (UMD)   Dan Manson (Cal State Pomona)
Andrew Odlyzko UMN   William Sanders (UIUC)
Eugene H. Spafford (Purdue)    
* August 24, 2006: The TRUST Academy Online (TAO) is available (note that the url is https not http).
Yuan Xue has created the first course, Cryptography, which is an example of how to link to existing course material.
Larry Howard has written an overview and educator's guide about VaNTH, the system behind TAO.
* August 22, 2006: Stanford Professors Dan Boneh and John Mitchell won a Computerworld Horizon Award for Password Hash.
* August 1, 2006: TRUST has two important positions available:
Education Director for TRUST (#004902)
Executive Director for TRUST (#004791)
To find out more, go to http://jobs.berkeley.edu/ and search in the Senior Management/Executive Job Category for the keyword TRUST. If you have questions or concerns, contact Shankar Sastry (sastry at eecs) or Mary Margaret Sprinkle (mms at eecs).
* July 27, 2006 The Trust 2005-2006 Annual Report is available to the general public and 1st 5 year Strategic Plan is available to Trust website members.
* July 19, 2006 Professor David Wagner testified about electronic voting in front of a House Committee in Washington, D.C. (Forbes, Salon)
* July 5-28, 2006: CMU's 2006 Capacity Building Workshop occurred.
"The IACBP is an intensive in-residence summer program designed to help build Information Assurance education and research capacity at minority-serving universities. The program is organized into several sessions, offering both theoretical Information Assurance education and hands-on experiences through a boot camp on network security offered by CISCO. Specific sessions are also dedicated to curriculum development."
* June 11 - August 04, 2006: TRUST is proud to sponsor six undergraduate students from diverse backgrounds and cultures, to participate in the Summer Undergraduate Program in Engineering Research at Berkeley (SUPERB-IT). The students were:
  • Joceyln Adams
  • Tonmoy Bhattacharjee
  • Kaseima Frye
  • Sonny Hernandez
  • Jessica Jimenez Pellot
  • Jamie Lauren Webb

These students will work with graduate student mentors throughout the summer of 2006 performing research and supporting activities in the area of information technology for assisted living at home.
For details, see the SUPERB workgroup.

* May 30 - August 4th, 2006: Vanderbilt's TRUST Summer Internship Program in Hybrid and Embedded Software Research (SIPHER) is underway.
"The objective of this program is that undergraduates from underrepresented groups (women of any race, and also Native-Americans, African-Americans, and Hispanics) participate in the research program: receive training in the science and technology developed by the researchers, and work on specific research problems."
* July 5 - 11, 2006: This year's Women's Institute in Summer Enrichment (WISE) program was attended by 19 individuals. WISE is a residential summer program on the University of California, Berkeley campus that brings together graduate students, post-doctoral fellows and professors from all disciplines that are interested in Ubiquitous Secure Technology and the social, political, and economical ramifications that are associated with this technology.
For details, please see The WISE workgroup.
* June 28, 2006: Slashdot mentions a Security Focus Interview with Rachna Dhamija about the paper "Why Phishing Works" she coauthored with Doug Tygar and Marti Hearst.
* June 21-23, 2006: Joint US-EU-Tekes workshop: "Long Term Challenges in High Confidence Composable Embedded Systems" (Helsinki, Finland)
* June 19, 2006: 2nd TIPPI Workshop Trustworthy Interfaces for Passwords and Personal Information (Stanford)
* June 12, 2006: TRUST/iCAST Agreement
Minister Lin, Beth Burnside, Mark Kamlet, DT Lee
Minister Lin, Beth Burnside, Mark Kamlet, D.T. Lee
TRUST and International Collaboration for Advancing Security Technology (iCAST) have signed a 3 year, $800 thousand/year collaborative research agreement where iCAST will attend TRUST meetings, have access to TRUST websites, TRUST students and faculty as well as other benefits.

iCAST is a team with members from Taiwan Information Security Center (TWISC) represented by Academia Sinica, the Institute for Information Industry (III) and the Industrial Technology Research Institute of Taiwan (ITRI) designed to collaborate with International Institutions in various fields related to Information Security.
TWISC Announcement

* June 5, 2006: AF-TRUST Kickoff
* May 10, 2006: Douglas Schmidt and Michael Reiter's work with the Air Force Global Information Grid is highlighted at ACM TechNews and at the Vanderbilt news service.
* May 8, 2006: The May 2006 IEEE Computer Magazine contains a cover feature by Edward A. Lee: "The Problem with Threads"
For concurrent programming to become mainstream, we must discard threads as a programming model. Nondeterminism should be judiciously and carefully introduced where needed, and it should be explicit in programs.
* May 8, 2006:
AF-TRUST Logo
The Air Force Office of Scientific Research recently committed to funding the AF-TRUST-GNC (Air Force Team for Research in Ubiquitous Secure Technology for GIG/NCES), an Air Force center for research on challenges associated with the Global Information Grid and Network Centric Enterprise System (GIG/NCES) trends that have become dominant themes within the USAF and the military family. Researchers at AF-TRUST-GNC will explore innovation in the following areas:
  1. Provide guaranteed Scalable, Real Time, Fault Tolerant Quality of Service for network centric enterprise systems
  2. Develop techniques for large scale information assurance and security policy management
  3. Develop new tools for secure scalable, information discovery, information architecture and mediation
This new center is funded through the Program Name AFOSR Opportunities in Information Science and Technology under the CFDA Title Air Force Defense Research Sciences Program.
* April 27th & April 28th, 2006: The Trust NSF Site Visit was held at UC Berkeley. (Presentations)
* April 28th, 2006: The Workshop on Electronic Patient Records was held at UC Berkeley.
David Brailer, the National Coordinator for Health Information Technology, was the keynote speaker for this event organized by TRUST, CITRIS, the UC Berkeley School of Public Health and the California Regional Health Information Organization.

The workshop covered the uses of new information and communication technologies for the better delivery of health care. Especially highlighted in this meeting was the use of new wireless devices, sensor webs and security/privacy considerations of dynamic electronic medical records. Security and privacy is an important pillar of the HSS Health Information Technology plan for the nation, and this workshop highlighted some of the NSF funded research in this area as well as health care providers and stakeholders' efforts in this area.

* April 26, 2006: The Executive Advisory Board met at UC Berkeley.
* April 12, 2006: Marci Meingast and Christopher Brooks are now running a TRUST Security and Privacy Blog. This blog is for news items related to Security and Privacy, but that don't specifically mention TRUST. TRUST specific items will appear below.
* March 28, 2006: The Sensor Networks and Privacy workshop was held at Cornell. Participants:
Cornell CS, Information Science, ECE, Civil Engineering
Berkeley Law School
* March 24-25, 2006: The Spring Planning Meeting of the I3P was held on the UC Berkeley campus.
The I3P functions as a virtual national lab with the ability to organize teams and workgroups to address research and policy-related aspects of the vulnerabilities inherent in the information infrastructure.
* March 20, 2006: The Stanford Security Forum Workshop was held.
* March 17, 2006:
Meeting with Congresswoman Shiela Jackson Lee Congresswoman Sheila Jackson Lee (D-TX), ranking Democrat on the House Committee on Homeland Security, was briefed on TRUST and the relevance of it work to Homeland Security by Vijay Raghavan.
* March 16-17, 2006: The EU-US Meeting, titled Large ICT-based Infrastructures and Interdependencies: Control, Safety, Security and Dependability was held in Washington, D.C. Goals for this meeting included fostering technical collaboration between the US and the EU on increasingly ICT-centric infrastructures. Also, strategic opportunities were identified for cooperation in preparation for new research programs, such as Framework Program 7 for the EC and program directions for FY 2007 and forward by the NSF and other US agencies. In particular, the workshop established concrete cooperation mechanisms that will pave the way for joint events and activities like overseas benchmarking opportunities and instruments for visionary shared research programs.
* March 14-15, 2006: The Beyond SCADA: Networked Embedded Control Systems Meeting was held in Washington, D.C. It was coordinated by the National Information Technology Research and Development group (NITRD)'s High Confidence Systems and Software (HCSS) subcommittee, the National Science Foundation, the National Institute of Standards and Technology, and the National Security Agency. This meeting will serve as a planning meeting for a longer meeting to be held at CMU in October 2006. This series of meetings will facilitate the roadmapping process for the research agenda in the area of Networked Embedded Control Systems.
* March 13, 2006: The Department of Homeland Security sponsored a meeting of the Identity Theft Technology Council, which was hosted by SRI. The meeting was attended by chief security officers from financial and IT companies. Vijay Raghavan presented an overview of TRUST. John Mitchell attended and discussed the possibility of incorporating industrial speakers in the educational outreach of TRUST.
* February 19, 2006: Fred Schneider's presentation at the annual meeting of the American Association for the Advancement of Science was covered in Linux Electrons: Computer Security Lacks Accountability Says Cornell Expert.
* February 7, 2006: The February 2006 IEEE Computer Magazine contains articles by a number of Trust Members including Kenneth Birman, Janos Sztipanovits, Gabor Karsai, and Douglas Schmidt.
* February 2, 2006: The Trust workgroups are starting up!
If you meet the membership criteria, please feel free to request an account.
Once you have an account, to join a workgroup, go to Options -> Memberships
Below are groups of interest:
* January 27, 2006: Deirdre Mulligan was interviewed on Democracy Now, a Radio and TV program about "The Great Firewall of China: Internet Companies Censor Material at Chinese Government"
* January 9-10, 2006: The Trust Winter Meeting was held in Washington, D.C. (presentations)
* December 16, 2005: The Trust Design Workshop for an Integrative Project related to Patient Portals was held at Vanderbilt.
* December 16, 2005: Design Workshop for an Integrative Project related to Patient Portals (Vanderbilt)
* December 15, 2005: Trust Membership page updated, including small or minority-owned business membership level.
Winter Conference Agenda updated.
* October 27, 2005: Trust Visitors might find Euguene Spafford's Testimony before the House Armed Services Committee Hearing on "Cyber Security, Information Assurance and Information Superiority" of interest.
* October 11, 2005: Sensor Networking Workshop (Cornell)
* September 20, 2005 The Trust publications website is up!
Trust Researchers, please add relevant papers and presentations.
* September 13 - 19, 2005 The Keyboard Sound Detection work of Professor Doug Tygar's group was covered in The San Francisco Chronicle, Scientific American, Slashdot and other media outlets. See Professor Tygar's publication page for a preprint.
* Autum, 2005: Homeland Security / Cyber Security course Joint class between University of Washington, CSE P 590TU, UC Berkeley PP 190/290-009 and UCSD CSE 291 (A00) consisted of lectures about policy, technology, psychological motivations of Terrorism
* September 1, 2005 The first Trust Seminar talk was be given by Shankar Sastry. The Trust Seminar is held on Thursdays 4-5pm in 540 Cory Hall, UC Berkeley.
See the Seminar page for details.
* August 25, 2005: The Trust server is on new hardware. If you manage a Trust workgroup using CVS, you will need to change CVS servers. See the FAQ for details.
* August 4, 2005: The Credence project of Professor Emin Gun Sirer's group was featured on Slashdot and in the New Scientist in March. Credence is a distributed object reputation management scheme that counteracts content pollution in peer-to-peer filesharing systems.
* 2 professors go fishing for phishers
San Francisco Chronicle, July 25, 2005.
* June 13, 2005: 1st TIPPI Workshop Trustworthy Interfaces for Passwords and Personal Information (Stanford)
* Stanford joins multi-institution center on research in cybersecurity and computer trustworthiness
Stanford Report, April 14, 2005.
* Campus to Direct New Research Center UC Berkeley to Lead Team in Pursuit of Internet Security
The Daily Californian, April 14, 2005.
* U.S. Grant Offered To Team Studying Computer Attacks
Wall Street Journal, April 12, 2005.
* U.C. Berkeley to head cybersecurity project
NY Times, April 12, 2005.
* Vanderbilt engineering part of national 'dream team', To design, develop new secure system design technologies
Vanderbilt News Service, April 12, 2005.
* Smith joins bid to thwart cyberattacks
Boston Globe (AP), April 12, 2005.
* NSF establishes cybersecurity center
ComputerWorld, April 12, 2005.
* Cal picked to lead coalition to fortify network security
Contra Costa Times, April 12, 2005.
* Cal will lead effort against cyberattacks Berkeley to lead U.S. effort to foil cyberattacks
Oakland Tribune, April 12, 2005.
* U.C. Berkeley to head cybersecurity project
ZDNet, April 12, 2005.
* Universities, industry to fight hacker threat 5-year, $19 million project intended to boost cybersecurity
San Francisco Chronicle (AP), April 12, 2005.
* UC-Berkeley Leads Cybersecurity Consortium
Washington Post (AP), April 12, 2005.
* NSF established two new technology centers
Washington Times (UPI) April 12, 2005.
* UC-Berkeley Leads Cybersecurity Consortium
Forbes, April 11, 2005.
* Grant to research computer security
San Jose Mercury News, April 11, 2005.
* NSF launches $19 million research program for computer security
Cornell University News Service, April 11, 2005.
* Researchers Are Part of New NSF Center Studying Cybersecurity and Trustworthy Computing
Carnegie Mellon Media Relations, April 11, 2005.
* UC Berkeley to lead $19 million NSF center on cybersecurity research
UC Berkeley Campus News, April 11, 2005.
* NSF Announces Intent to Establish Two New Science and Technology Centers
National Science Foundation, April 11, 2005.

How do I contact the Trust Center?
You are not logged in
Copyright © 2005-2012 TRUST