 |
 |
Dr. Chandrakant Patel |
Dr. Ashish Kundu |
|---|---|
Prof. Ling Liu |
Dr. Thomas Hardjono |
Prof. N. Asokan |
Prof. Sajal Das |
Mr. Himanshu Dubey |
|---|
Speaker Profile:
Chandrakant is HP’s Chief Engineer and Senior Fellow. He has led HP in delivering innovations in chips,
systems, data centers, storage, networking, print engines and software platforms. Chandrakant is a pioneer in thermal and energy management in data centers, and in application of the information technology to drive available energy management at city scales. His current technical interests are focused on 21st century cyber physical systems such as HP’s 3D Additive Printing Systems.
Chandrakant is a Fellow of the American Society of Mechanical Engineers (ASME) and a Fellow of Institute of Electrical and Electronics Engineers (IEEE). He holds 157 patents and has published more than 150 technical papers. An advocate of the return to fundamentals, he has served as an adjunct faculty in engineering at Chabot College, U.C. Berkeley Extension, San Jose State University and Santa Clara University.
In 2014, Chandrakant was inducted into the Silicon Valley Engineering Hall of Fame. In 2018, he was inducted into the National Academy of Engineering.
The Rise of Cyber Physical Security - In light of Cyber Physical Systems
Abstract:
Engineering in the 19th and early 20th century was about the industrialization of physical and electro-mechanical systems like the steam engine and the utility grid. The latter half of the 20 th century was about information management, cyber systems and the Internet. The 21 st century is about the integration of the two and the proliferation of cyber-physical systems (CPS) that matter to society. The rise of these cyber physical systems stems from social, economic and ecological trends such as resource constraints, needs of the aging demography, human capital constraints, externalities such as pandemics and environmental pollution. The lack of domain specialized human capital on the supply side - from sub-specialized surgeons to personnel with deep understanding of city scale infrastructures such as power plants – has underscored the need for cyber-physical-human systems such as robotic surgery systems and virtual reality based training systems. Securing these mission critical cyber-physical systems elevates cyber security to cyber physical security.
Cyber-physical security requires a deep understanding of the principles of operation of the entire system. Attacks on cyber physical systems that alter the physical functional performance cannot be prevented without a deep understanding of the intricacies of the physical system such as a power plant or a digital factory. A contributor in cyber physical security needs to be T-shaped with depth in information sciences and breadth in several subjects in physical sciences.
Consider a 3D additive manufacturing factory. It is a systemic instantiation of operational technologies (OT) and information technologies (IT). The OT are physical fabrication systems that
are integrated with communications, data management and analysis systems. The oft held belief that data and AI (artificial intelligence) alone will result in a “smart” digital factory belittles domain fundamentals in physical sciences. A 3D printer in a digital factory cannot be treated as a black box with the assumption that large amounts of data and AI alone will create the “digital twin”. Deep domain understanding of mechanical engineering, material science, chemical engineering, chemistry and electrical engineering is fundamental to a successful model.
The 21 st century cyber physical contributors must have depth in engineering fundamentals of the machine age and breadth in information sciences of the cyber age. Legions of these T-shaped
contributors must be developed through multi-disciplinary curriculum, learning paths such as dual degrees, continuing education and “learn by doing” projects focused on building cyber physical OT-IT integrated systems.
Indeed, given the socio-economic and ecological challenges, the world cannot wait.
Speaker Profile: Dr. Ashish Kundu is currently at Cisco Research as its Head of Cybersecurity Research. He is a distinguished scientist, a leader in the area of Security, Privacy, Compliance. He worked at Nuro as its Head of Cybersecurity, and as Research Staff Member at IBM T J Watson Research Center. He has led security, privacy and compliance of self-driving cars, tele-operated driving, cloud-based healthcare, and cloud-based AI-driven education platforms. His research has led to more than 160 patents filed with more than 150 patents granted, and more than 50 research papers. He is an ACM Distinguished Member, and has also been an ACM Distinguished Speaker. He has been honored with the prestigious Master Inventor recognition multiple times by IBM Research. Dr. Kundu received his Ph.D. in Cybersecurity from Purdue University in 2010 and his doctoral research at Purdue University received the prestigious CERIAS Diamond Award for outstanding contributions to cybersecurity.
Research and Engineering Challenges of Blockchain and Web3
Abstract: The concept of blockchain and cryptocurrency emerged from the Bitcoin paper. They have transformed modern distributed computing to a new paradigm of decentralized computing. Several years later, trillions of dollars in vritual economy and thousands of papers, have we truly achieved decentralized computing, or we are yet to solve some of the foundational problems of distributed computing that are key to achieving true and fair decentralized computing. We go over the research and engineering problems that have been solved, yet to be solved. We will also go over what is it necessary to make Web3 a framework for enterprises to rely upon.
Speaker Profile:
Dr. Thomas Hardjono is currently the CTO of Connection Science and Technical Director of the MIT Trust-Data Consortium, located at MIT in Cambridge, MA. Previously he led the development of the MIT Kerberos Network Authentication open source project at MIT (part of the famed Project Athena), promoting Kerberos to be the most ubiquitously deployed symmetric-key authentication protocol in the world. Spending nearly two decades in the technology industry, he has held numerous leadership roles in a range of technology companies and industries, from IP routing, to tamper-resistant hardware, to digital identity management, confidential computing and crypto-assets.
Aside from various open source software projects, he has held leadership roles in various standards organizations (as specifications editor; working group chair; board member): Trusted Computing Group (cybersecurity of systems); Open Music Initiative (smart contracts for music licensing); Internet Engineering Task Force (public-key certificates, multicast authentication, Kerberos, DLT interop); Kantara Initiative (decentralized identity management); Open Interconnect Forum (IoT security); OASIS Security Services Task Force (Security Assertions Mark-Up Language); IEEE 802 TGi (for WiFi Security).
More details can be found at this web page.
Web3 and the Interoperability of Asset Networks
Abstract: There is today a growing number of digital asset networks that are based on emerging technologies such as blockchains and decentralized ledger technologies. One vision for the Web3 is that it should be an “Internet of value” that builds upon the TCP/IP Internet and extends some Web2 functions. The underlying desire is to permit the various digital representations of assets as value-bearing data-objects to be exchanged and traded seamlessly at a global scale. However, if this vision of Web3 as the Internet of value is to be achieved then one fundamental design goal for Web3 should be the interoperability of asset networks, which in turn permits the ease of the moveability of the digital assets from one user to another across these asset networks. In this presentation we discuss a number of design principles underlying the interoperability of digital asset networks.
Speaker Profile: N. Asokan is a professor of computer science and a David R. Cheriton Chair of Software Systems at the University of Waterloo, where he also serves as the Executive Director of Waterloo Cybersecurity and Privacy Institute. Asokan also holds an adjunct appointment at Aalto University Finland. His primary research interest is systems security and privacy. He began his career as an industry researcher at IBM and Nokia. Asokan is a Fellow of ACM and IEEE.
Technology Transfer from Security Research Projects: A Personal Perspective
Abstract: Taking research results from the lab to the real world is a challenge in any field. Security research is no exception. In this talk, I will describe several security research projects that my colleagues and I have participated in during my stint in industrial research laboratories. For each project, I will describe the motivations that led to the project, briefly outline the technical solutions we came up with and discuss our experience in trying, and sometimes succeeding, to transfer research results from these projects for productization and deployment. From these experiences, I will attempt to draw some lessons for technology transfer of security research results.
Speaker Profile: Ling Liu is a Professor in the School of Computer Science at Georgia Institute of Technology. She directs the research programs in the Distributed Data Intensive Systems Lab (DiSL), examining various aspects of large scale big data-powered artificial intelligence (AI) systems, and machine learning (ML) algorithms and analytics, including performance, availability, privacy, security and trust. Prof. Liu is an elected IEEE Fellow, a recipient of IEEE Computer Society Technical Achievement Award (2012), and a recipient of the best paper award from numerous top venues, including IEEE ICDCS, WWW, ACM/IEEE CCGrid, IEEE Cloud, IEEE ICWS. Prof. Liu served on editorial board of over a dozen international journals, including the editor in chief of IEEE Transactions on Service Computing (2013-2016), and the editor in chief of ACM Transactions on Internet Computing (since 2019). Prof. Liu is a frequent keynote speaker in top-tier venues in Big Data, AI and ML systems and applications, Cloud Computing, Services Computing, Privacy, Security and Trust. Her current research is primarily supported by USA National Science Foundation under CISE programs, IBM and CISCO.
Security and Privacy in Federated Learning
Abstract: Federated learning (FL) is an emerging distributed collaborative learning paradigm by decoupling the learning task from the centralized server to a decentralized population of edge clients. One of the attractive features of federated learning is its default client privacy, allowing clients to keep their sensitive training data locally and only share local model updates with the federated server. However, recent studies have revealed that such default client privacy is insufficient for protecting the privacy of client training data from both gradient leakage attacks and data poisoning attacks. This keynote will describe gradient leakage attacks and data poisoning attacks, and provide insights for designing effective privacy and security strategies for combating privacy leakage attacks and data poisoning attacks.
Speaker Profile: Sajal K. Das is a Curators’ Distinguished Professor and Daniel St. Clair Endowed Chair in Computer Science at the Missouri University of Science and Technology, where he was the Chair of Computer Science Department during 2013-2017. Previously, he served the US National Science Foundation as a Program Director in the Computer and Network Systems Division. His interdisciplinary research interests include cyber-physical systems, IoT, cybersecurity, machine learning, data science, wireless sensor networks, mobile and pervasive computing, smart environments, HPC and cloud computing, applied graph theory and game theory.He has contributed significantly to these areas and published 350+ papers in high quality journals, 475+ papers in peer-reviewed conferences, and 55 book chapters. A holder of 5 US patents, Dr. Das has directed numerous funded projects over $22 million. He coauthored four books – Principles of Cyber-Physical Systems: An Interdisciplinary Approach (Cambridge University Press, 2020), Handbook on Securing Cyber-Physical Critical Infrastructure: Foundations and Challenges (Morgan Kaufman, 2012), Mobile Agents in Distributed Computing and Networking (Wiley, 2012), and Smart Environments: Technology, Protocols, and Applications (John Wiley, 2005). His h-index is 97 with more than 37,700 citations according to Google Scholar. Dr. Das is the founding Editor-in-Chief of Elsevier’s Pervasive and Mobile Computing journal and serves as Associate Editor of several journals including the IEEE Transactions on Dependable and Secure Computing, IEEE Transactions on Mobile Computing, ACM/IEEE Transactions on Networking, and ACM Transactions on Sensor Networks. A founder of IEEE PerCom, WoWMoM, SMARTCOMP and ACM ICDCN conferences, he served as the General and Technical Program Chair of numerous conferences. He is a recipient of 12 Best Paper Awards in conferences like ACM MobiCom and IEEE PerCom, and numerous awards for teaching, mentoring and research including IEEE Computer Society’s Technical Achievement award for pioneering contributions to sensor networks and mobile computing, and the University of Missouri System President’s Award for Sustained Career Excellence. He graduated 12 postdoctoral fellows, 50 PhD and 31 MS thesis students. Dr. Das is a Distinguished alumnus of the Indian Institute of Science, Bangalore and an IEEE Fellow. More details can be found at this web page.
Securing Cyber-Physical and IoT Systems in Smart Living Environments
Abstract: Our daily lives are becoming increasingly dependent on smart cyber-physical infrastructures (e.g., smart homes or cities, smart grid, smart transportation, smart healthcare, smart agriculture, etc.). The wide availability of sensor enabled IoT devices and smartphones are also empowering us with fine-grained information and opinion gathering via mobile crowdsensing about events of interest, resulting in actionable inferences and decisions. This synergy has led to cyber-physical-human (CPH) convergence in smart living environments, the goal of which is to improve the quality of life. However, CPH and IoT systems are extremely vulnerable to failures and security threats owing to their interdependence, scale, heterogeneity, human behavior, and trust issues. This talk will highlight unique research challenges in smart living environments, followed by novel anomaly detection frameworks and models for securing CPH and IoT systems. Our novel solutions are based on a rich set of theoretical and practical design principles including AI/ML, data analytics, uncertainty reasoning, information theory, prospect theory, reputation/ belief, and incentive models. Case studies with real-world datasets in smart grid, smart transportation and smart health applications will be presented. The talk will be concluded with directions of future research.
Speaker Profile:
Mr Himanshu Dubey leads Quick Heal Security Labs, the core security technology & threat research division of Quick Heal Technologies. He leads high-performing teams of security engineers and researchers tracking nation-state actors and cybercriminal groups across the globe. Additionally, he drives the vision & oversees development of security technologies that protect Seqrite and Quick Heal customers against latest cyber threats.
With more than 15 years of experience in the cyber security space, Himanshu has worked on the design and development of industry leading innovations resulting into patented technologies. A passionate cyber security professional, he regularly enlightens the crowd at various industry forums like ASSOCHAM, DSCI, BrightTALK among others.
Advanced Persistent Threats: A Study in Indian Context
Abstract: Cyber Threats have changed drastically over last three decades. From being a nuisance, they have evolved into
Attack groups behind APTs are highly sophisticated and well-funded. This enables them to invest heavily in reconnaissance & design attacks before launching them against intended target. Because of this elaborate planning & inherent complexity, such attacks are extremely hard to detect & protect against. As more & more critical infrastructure systems have started utilizing digital technologies, risk posed by APTs has gone up substantially.In this presentation the following points will be covered: