39 matches found
minicps
MiniCPS MiniCPS es un framework para la simulación en tiempo real de sistemas ciberfísicos. Incluye soporte para la simulación de procesos físicos y dispositivos de control, así como emulación de red. Está construido sobre mininet. MiniCPS es desarrollado por el grupo SCy-Phy de SUTD Universidad ...
amlsec
使用基于AutomationML的工程数据自动识别信息物理生产系统中的安全风险 该原型实现了以下两篇论文中提出的方法： 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. 使用基于AutomationML的工程数据自动识别安全风险. IEEE Transactions on Dependable and Secure Computing. 2. Eckhart, M., Ekelhart, A., Biffl S., Lüder A., & Weippl, E. R. 2022...
The vulnerability of the backup server of the Veeam Backup & Replication software allows a perpetrator to execute arbitrary code. This vulnerability targets systems for cloud, virtual, and physical environments.
The vulnerability of the backup server of the Veeam Backup & Replication software for cloud, virtual, and physical systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...
Backdoor Attacks on Fault Detection and Localization in Cyber-Physical Systems
Cyber-Physical Systems CPS integrate sensing, communication, computation, and control to support critical infrastructure, including smart grids, industrial automation, and control systems. In the electrical utility domain, various controllers are used in CPS to ensure the system detects and...
SMSI: System Model Security Inference: Automated Threat Modeling for Cyber-Physical Systems
Threat modeling for cyber-physical systems CPS remains a largely manual exercise. This project presents SMSI System Model Security Inference, a hybrid neuro-symbolic pipeline that starts from a SysML architecture model and produces a prioritized list of NIST 800-53 security controls. The prototyp...
The vulnerability of the backup server of the Veeam Backup & Replication software allows a perpetrator to execute arbitrary code. This vulnerability targets systems for cloud, virtual, and physical environments.
The vulnerability of the backup server of the Veeam Backup & Replication solution for cloud, virtual, and physical systems is related to access control errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems, related to access control errors, allows attackers to execute arbitrary code.
The vulnerability of Veeam Backup & Replication’s protection mechanisms for cloud, virtual, and physical systems stems from access control errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...
From Incomplete Architecture to Quantified Risk: Multimodal LLM-Driven Security Assessment for Cyber-Physical Systems
Cyber-physical systems often contend with incomplete architectural documentation or outdated information resulting from legacy technologies, knowledge management gaps, and the complexity of integrating diverse subsystems over extended operational lifecycles. This architectural incompleteness...
Secure Reinforcement Learning: On Model-Free Detection of Man in the Middle Attacks
We consider the problem of learning-based man-in-the-middle MITM attacks in cyber-physical systems CPS, and extend our previously proposed Bellman Deviation Detection BDD framework for model-free reinforcement learning RL. We refine the standard MDP attack model by allowing the reward function to...
The vulnerability of the backup server of the Veeam Backup & Replication software allows a perpetrator to execute arbitrary code. This vulnerability targets systems for cloud, virtual, and physical environments.
The vulnerability of the backup server of the Veeam Backup & Replication solution for cloud, virtual, and physical systems is related to access control errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Supporting Artifact Evaluation with LLMs: A Study with Published Security Research Papers
Artifact Evaluation AE is essential for ensuring the transparency and reliability of research, closing the gap between exploratory work and real-world deployment is particularly important in cybersecurity, particularly in IoT and CPSs, where large-scale, heterogeneous, and privacy-sensitive data...
Secure Group Key Agreement on Cyber-Physical System Buses
Cyber-Physical Systems CPSs rely on distributed embedded devices that often must communicate securely over buses. Ensuring message integrity and authenticity on these buses typically requires group-shared keys for Message Authentication Codes MACs. To avoid insecure fixed pre-shared keys and...
Agentic AI for Cyber Resilience: A New Security Paradigm and Its System-Theoretic Foundations
Cybersecurity is being fundamentally reshaped by foundation-model-based artificial intelligence. Large language models now enable autonomous planning, tool orchestration, and strategic adaptation at scale, challenging security architectures built on static rules, perimeter defenses, and...
RampoNN: A Reachability-Guided System Falsification for Efficient Cyber-Kinetic Vulnerability Detection
Detecting kinetic vulnerabilities in Cyber-Physical Systems CPS, vulnerabilities in control code that can precipitate hazardous physical consequences, is a critical challenge. This task is complicated by the need to analyze the intricate coupling between complex software behavior and the system's...
The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems stems from deficiencies in access control. This allows attackers to execute arbitrary code.
The vulnerability of Veeam Backup & Replication’s protection tools for cloud, virtual, and physical systems stems from deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
Moderate: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...
SAFER-D: a Self-Adaptive Security Framework for Distributed Computing Architectures
The rise of the Internet of Things and Cyber-Physical Systems has introduced new challenges on ensuring secure and robust communication. The growing number of connected devices increases network complexity, leading to higher latency and traffic. Distributed computing architectures DCAs have gaine...
The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems stems from deficiencies in the input data validation mechanism. This allows attackers to execute arbitrary code on the backup server.
The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems stems from deficiencies in the input data validation mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code on the backup server...