Fingerprinting cyber physical systems: A physics-based approach

Industrial Control System (ICS) networks used in critical infrastructure networks like the power grid represent a different set of security challenges when compared to traditional IT networks. The electric power grid comprises several components most of which are critical physical devices and have to be safeguarded to ensure reliable operation. The devices in the field are remotely controlled via the control network of the plant from the control center. The distributed nature of these networks makes it almost impossible to perform the same common security practices as done in traditional IT networks (e.g., regular security upgrades). It is partially due to the fact that these legacy devices are incapable of supporting future upgrades and because of the remote location of these devices. Cyber attacks on an electric grid can originate from an external intruder who has gained access to the control network or from a disgruntled employee who already has access to the network. Among several possible attacks on an electric grid, this work specifically proposes to tackle the false data injection issue during control command requests to the field devices in the substation. The thesis work proposes to help to ensure the authenticity of the responses by analyzing the observed response against the fingerprints developed by operation times associated with each device in the plant. Also, in this work, the accuracy of the proposed fingerprinting technique is evaluated from a dataset generated from controlled lab experiments.M.S

Improving Diversity of Demographic Representation in Large Language Models via Collective-Critiques and Self-Voting

A crucial challenge for generative large language models (LLMs) is diversity: when a user's prompt is under-specified, models may follow implicit assumptions while generating a response, which may result in homogenization of the responses, as well as certain demographic groups being under-represented or even erased from the generated responses. In this paper, we formalize diversity of representation in generative LLMs. We present evaluation datasets and propose metrics to measure diversity in generated responses along people and culture axes. We find that LLMs understand the notion of diversity, and that they can reason and critique their own responses for that goal. This finding motivated a new prompting technique called collective-critique and self-voting (CCSV) to self-improve people diversity of LLMs by tapping into its diversity reasoning capabilities, without relying on handcrafted examples or prompt tuning. Extensive empirical experiments with both human and automated evaluations show that our proposed approach is effective at improving people and culture diversity, and outperforms all baseline methods by a large margin.Comment: To appear at EMNLP 2023 main conferenc

TgPRELID, a Mitochondrial Protein Linked to Multidrug Resistance in the Parasite Toxoplasma gondii

New drugs to control infection with the protozoan parasite Toxoplasma gondii are needed as current treatments exert toxic side effects on patients. Approaches to develop novel compounds for drug development include screening of compound libraries and targeted inhibition of essential cellular pathways. We identified two distinct compounds that display inhibitory activity against the parasite's replicative stage: F3215-0002, which we previously identified during a compound library screen, and I-BET151, an inhibitor of bromodomains, the "reader" module of acetylated lysines. In independent studies, we sought to determine the targets of these two compounds using forward genetics, generating resistant mutants and identifying the determinants of resistance with comparative genome sequencing. Despite the dissimilarity of the two compounds, we recovered resistant mutants with nonsynonymous mutations in the same domain of the same gene, TGGT1_254250, which we found encodes a protein that localizes to the parasite mitochondrion (designated TgPRELID after the name of said domain). We found that mutants selected with one compound were cross resistant to the other compound, suggesting a common mechanism of resistance. To further support our hypothesis that TgPRELID mutations facilitate resistance to both I-BET151 and F3215-0002, CRISPR (clustered regularly interspaced short palindromic repeat)/CAS9-mediated mutation of TgPRELID directly led to increased F3215-0002 resistance. Finally, all resistance mutations clustered in the same subdomain of TgPRELID. These findings suggest that TgPRELID may encode a multidrug resistance factor or that I-BET151 and F3215-0002 have the same target(s) despite their distinct chemical structures. IMPORTANCE We report the discovery of TgPRELID, a previously uncharacterized mitochondrial protein linked to multidrug resistance in the parasite Toxoplasma gondii. Drug resistance remains a major problem in the battle against parasitic infection, and understanding how TgPRELID mutations augment resistance to multiple, distinct compounds will reveal needed insights into the development of new therapies for toxoplasmosis and other related parasitic diseases

Reachability analysis for AWS-based networks

Cloud services provide the ability to provision virtual networked infrastructure on demand over the Internet. The rapid growth of these virtually provisioned cloud networks has increased the demand for automated reasoning tools capable of identifying misconfigurations or security vulnerabilities. This type of automation gives customers the assurance they need to deploy sensitive workloads. It can also reduce the cost and time-to-market for regulated customers looking to establish compliance certification for cloud-based applications. In this industrial case-study, we describe a new network reachability reasoning tool, called Tiros, that uses off-the-shelf automated theorem proving tools to fill this need. Tiros is the foundation of a recently introduced network security analysis feature in the Amazon Inspector service now available to millions of customers building applications in the cloud. Tiros is also used within Amazon Web Services (AWS) to automate the checking of compliance certification and adherence to security invariants for many AWS services that build on existing AWS networking features

Information Security and Privacy in the Digital World: Some Selected Topics

In the era of generative artificial intelligence and the Internet of Things, while there is explosive growth in the volume of data and the associated need for processing, analysis, and storage, several new challenges are faced in identifying spurious and fake information and protecting the privacy of sensitive data. This has led to an increasing demand for more robust and resilient schemes for authentication, integrity protection, encryption, non-repudiation, and privacy-preservation of data. The chapters in this book present some of the state-of-the-art research works in the field of cryptography and security in computing and communications.Comment: Published by IntechOpen, London Uk in Nov 2023, the book contains 8 chapters spanning over 131 pages. arXiv admin note: text overlap with arXiv:2307.02055, arXiv:2304.0025

Protein-altering germline mutations implicate novel genes related to lung cancer development

Few germline mutations are known to affect lung cancer risk. We performed analyses of rare variants from 39,146 individuals of European ancestry and investigated gene expression levels in 7,773 samples. We find a large-effect association with an ATM L2307F (rs56009889) mutation in adenocarcinoma for discovery (adjusted Odds Ratio = 8.82, P = 1.18 × 10−15) and replication (adjusted OR = 2.93, P = 2.22 × 10−3) that is more pronounced in females (adjusted OR = 6.81 and 3.19 and for discovery and replication). We observe an excess loss of heterozygosity in lung tumors among ATM L2307F allele carriers. L2307F is more frequent (4%) among Ashkenazi Jewish populations. We also observe an association in discovery (adjusted OR = 2.61, P = 7.98 × 10−22) and replication datasets (adjusted OR = 1.55, P = 0.06) with a loss-of-function mutation, Q4X (rs150665432) of an uncharacterized gene, KIAA0930. Our findings implicate germline genetic variants in ATM with lung cancer susceptibility and suggest KIAA0930 as a novel candidate gene for lung cancer risk