Researchers Hacked Amazon’s Alexa to Spy On Users, Again

Name: BSidesRDU
Start: 2019-10-18T00:00:00-04:00
End: 2019-10-18T23:59:59-04:00
Location: Raleigh

Posted: 05/01/2018 | Leave a Comment

A malicious proof-of-concept Amazon Echo Skill shows how attackers can abuse the Alexa virtual assistant to eavesdrop on consumers with smart devices – and automatically transcribe every word said.

https://threatpost.com/researchers-hacked-amazons-alexa-to-spy-on-users-again/131401/

CSIAC Journal - Resilient Industrial Control Systems (ICS) & Cyber Physical Systems (CPS)

This edition of the CSIAC Journal focuses on the topic of cybersecurity of Cyber-Physical Systems (CPS), particularly those that make up Critical Infrastructure (CI).

Read the Journal

CSIAC Report - Evolving Developments in Cyberlaw:
June 2019

CSIAC SME and member of the American Bar Association’s Information Security Committee, Richard “Rick” Aldrich, gives an updated snapshot of evolving developments in cyberlaw, policy, standards, court cases and industry legal frameworks. These slides provide updates to an earlier report on cyberlaw from March of 2019.

View the Slides

CSIAC Journal - Artificial Intelligence

This edition of the CSIAC Journal highlights three very different views of complex situations where AI might, should, and does intersect with our ability to use AI effectively.

Read the Journal

The DoD Cybersecurity Policy Chart

This chart captures the tremendous breadth of applicable policies, some of which many cybersecurity professionals may not even be aware, in a helpful organizational scheme.

View the Policy Chart

CSIAC Report - JFAC/DAU/CSIAC Cyber Experiment (CYBEX)

This report details key concerns discussed during the JFAC/DAU/CSIAC Software Assurance (SwA) Cyber Experiment (CYBEX). In addition to evaluating newly developed SwA guides for program managers and developers, the exchange included addressing/bringing back foundational software/system engineering concepts to address root of fundamental SwA issues as well as adopting common language in the areas of functionality and risk in order to identify issues early.

Read the Report