Cybersecurity Risk Assessment Framework Using Complex Probabilities

Brief introduction to various aspects of the research process and the expectations for this program. Chose our projects and began discussing what the upcoming weeks will look like. (Note: Blog for week is a summary of the whole week)

Last week was mostly focused on reading some foundational research papers regarding CAV risk assessment. We read approximately 7 papers among the two of us, and they ranged from the background trends and policies surrounding automated driving (AD) to actual risk assessment frameworks developed for AD.

We read 6 more papers among the two of us, tackling both concrete attacks and threat models/frameworks for CAV security. We also further updated our attack repository, LaTeX bibliography, and began the development of a network scenario visualization. These will allow us to set up a strong foundation for future work on our project. Particularly, the network scenario allows us to set the scope for our framework, highlights different attack surfaces that we want to focus on, and will be used as a guide for our threat model that we will create later.

We did readings regarding traditional methods of risk assessment were completed. From these readings we implemented CVSS metrics in our attack repository. We also updated our network scenario.

More readings regarding traditional methods of risk assessment were completed. From these readings we implemented CVSS metrics in our attack repository. We also updated our network scenario.

We worked on our complex number assignments and began the development of our front-end web application to showcase our work. Also, we're working on standardizing the categorization of our preconditions and postconditions for our attacks.

We established the equations for the components of our complex numbers and decided on what we wanted each part of our complex numbers to represent. We also made some updates to our MongoDB attack repository and continued development of our attack graphs.

Weekly presentations weren't scheduled for the past two weeks. For this final week, we were primarily focused on finishing up our deliverables. This includes our poster, presentation, final writeup, and other miscellaneous documents for the REU program. We also have to prepare a pitch video for the Mid-SURE conference we present at next week.