The Secure Systems Research Center (SSRC) has partnered with the University of New South Wales (UNSW Sydney) to research enhancements and scaling of the seL4 microkernel on edge devices. The collaboration aims to extend the seL4 microkernel to support dynamic virtualization, combining minimal trusted computing base with strong isolation. This will address challenges related to heterogeneous hardware, software, and environmental factors in edge computing. Why it matters: This partnership aims to improve the security of edge devices in critical sectors, addressing vulnerabilities in cyber-physical and autonomous systems.
TII's Secure Systems Research Center (SSRC) in Abu Dhabi has appointed international experts to its Board of Advisors. The advisors have expertise in areas like autonomous computing, cyber-physical systems, and cryptology. The board includes experts from Khalifa University, NYU Abu Dhabi, Dubai Electronic Security Center, and Purdue University. Why it matters: The move strengthens the UAE's cybersecurity research capabilities and aligns with its focus on developing secure autonomous systems.
Technology Innovation Institute’s (TII) Secure Systems Research Center (SSRC) has joined the Confidential Computing Consortium (CCC). The CCC aims to accelerate the adoption of confidential computing through hardware-based Trusted Execution Environment (TEE) technologies. SSRC will contribute to standardizing hardware-level security capabilities, particularly for secure RISC-V solutions. Why it matters: This partnership strengthens the UAE's position in cyber-physical systems security by enhancing data protection during processing, an area often overlooked in conventional infrastructure.
TII's Secure Systems Research Center (SSRC) has partnered with Purdue University on a three-year cybersecurity project focused on ensuring the safe and efficient use of Unmanned Aerial Vehicles (UAVs) in urban environments. The collaboration will study security and resilience in cyber-physical and autonomous systems, addressing vulnerabilities in communication, navigation, and command and control. The project includes four phases: modeling and analysis of UAS security, developing algorithms for high-assurance autonomy, constructing an experimental environment, and testing mitigation strategies. Why it matters: The partnership enhances the UAE's capabilities in securing critical digital systems and fosters the growth of commercial autonomous drones and robots, opening new opportunities for enterprises.
The Secure Systems Research Center (SSRC) has obtained membership in the seL4 Foundation. This membership allows SSRC to participate in and contribute to the open-source development of seL4, a formally verified microkernel OS. SSRC aims to research, contribute to, and advance next-generation high-end edge device environments using seL4's capabilities. Why it matters: This move enhances the UAE's capabilities in developing secure and resilient edge computing solutions, fostering innovation in critical sectors like secure communications and drone technology.
TII's Secure Systems Research Center (SSRC) has become a strategic member of RISC-V International to advance the development of open-source Instruction Set Architecture (ISA) for computer chips. SSRC aims to contribute to the RISC-V community by developing security and resilience features in processors and platforms, fostering innovation in end-to-end security. SSRC will conduct open source research to secure communications between edge devices and cloud infrastructure, and harden device hardware and software to prevent malware. Why it matters: This move enables the UAE to have greater control and independence in computing platform design, reducing reliance on proprietary architectures and enhancing security and resilience in critical infrastructure.
TII's Secure Systems Research Center (SSRC) has joined Dronecode, a Linux Foundation non-profit, to enhance UAV security. SSRC will contribute to Dronecode's Security SIG, focusing on cryptography, memory protection, and code analysis for the Pixhawk autopilot hardware and PX4 software. SSRC aims to develop and share security and resilience capabilities for the open UAV platform. Why it matters: This partnership enhances the security of drone systems, addressing potential privacy, cybersecurity, and safety threats in line with the UAE's focus on secure autonomous systems.
Cristofaro Mune and Niek Timmers presented a seminar on bypassing unbreakable crypto using fault injection on Espressif ESP32 chips. The presentation detailed how the hardware-based Encrypted Secure Boot implementation of the ESP32 SoC was bypassed using a single EM glitch, without knowing the decryption key. This attack exploited multiple hardware vulnerabilities, enabling arbitrary code execution and extraction of plain-text data from external flash. Why it matters: The research highlights critical security vulnerabilities in embedded systems and the potential for fault injection attacks to bypass secure boot mechanisms, necessitating stronger hardware-level security measures.