5 papers
RISK: Auditing Industrial Control Systems for Too-Late-to-Recover Vulnerabilities
Syed Ghazanfar Abbas, Gang Wang, Dongyan Xu
The security of industrial control systems (ICS) is important. Yet most ICS security efforts focus on the detection of ICS attacks, with much less attention to the recovery after d…
MARS: Detecting Unauthorized Variable Manipulations in Multi-Application PLC Runtimes
Syed Ghazanfar Abbas, Dongyan Xu
Programmable Logic Controllers (PLCs) increasingly run multiple applications alongside the main control program, with shared access to PLC variables. Yet, Industrial Control System…
Trust Me, I'm Your Developer: Self-Issued Authentication in Large Language Models
Syed Ghazanfar Abbas, Dongyan Xu
Large language model (LLM) security has largely focused on role-playing jailbreaks, with less attention to what happens when a user asks an LLM to verify an identity claim through…
A Self-Explainable Deep Architecture for Security Applications
Ananth Shreekumar, Jyun-Jhu Syu, Muslum Ozgur Ozmen +2
Deep learning models have become integral to security applications due to their ability to model complex relationships in data and detect sophisticated threats. However, their comp…
SoK: Kicking CAN Down the Road. Systematizing CAN Security Knowledge
Khaled Serag, Zhaozhou Tang, Sungwoo Kim +7
For decades, the Controller Area Network (CAN) has served as the primary in-vehicle bus (IVB), extending its use to many non-vehicular systems. In recent years, CAN security has be…