September 25

News

• Hacking to Shadow China Summit
• OPM Underestimated Number of Fingerprints Stolen in Hack by Millions
  • Hackers Took Fingerprints of 5.6 Million U.S. Workers, Government Says
• Apple Confirms Discovery of Malicious Code in Some App Store Products
  • Apple Lists 25 Apps Affected by XcodeGhost
• Obama Administration Explored Backdoors for Bypassing Smartphone Crypto
• Global Cybercrime Costs $315bn – Report
• New Malware Infects ATMs, Dispenses Cash on Command
• Uber Users are Paying for Fraudsters to Take Rides in China
• President Xi’s Double Talk on Doing Business in China
• HealthCare.gov Faulted for Weak Cybersecurity
• “Snowden Treaty” Calls for End to Mass Surveillance, Protections for Whistleblowers
• GCHQ Tried to Track Web Visits of “Every Visible User on Internet”
• Edward Snowden Unveils Global Privacy Treaty To Ban Surveillance
• Postal Service Failed to Protect Personal Data in Mail Surveillance, Report Says

Law/Policy

• Cyber Crime Laws Showing Their Age
• Transnational Cyber Age: Private Law Cyber Solutions for Individuals and Corporations
• The Greening of Canadian Cyber Laws: What Environmental Law Can Teach and Cyber Law Can Learn
• Cybersecurity: What About U.S. Policy?
• Cyberwarfare: Law & Policy Proposals for U.S. & Global Governance
• US Senator Blocks Proposed Surveillance Law Opposed by Facebook and Google
• Court: Authorities Can’t Force Suspects to Reveal Phone Passwords

Technical

• Efficient and Anonymous Two-Factor User Authentication in Wireless Sensor Networks: Achieving User Anonymity with Lightweight Sensor Computation
• A Forensically Sound Adversary Model for Mobile Devices
• Analysis of Short Blocklength Codes for Secrecy
• Option Contracts for a Privacy-Aware Market
• Efficient Controlled Quantum Secure Direct Communication Protocols

Reports / Blogs / Etc.

• Bidding for Breaches, Redefining Targeted Attacks
• SYNful Knock Attack Against Cisco Routers
• NSA Plans to Transition to Quantum Resistant Algorithms
• Microsoft Word Intruder Gets Down to Business: Operation Pony Express
• The Windows 10 Privacy Debacle: Five Big Issues to Consider
• 4 IoT Cybersecurity Issues You Never Thought About
• New Attacks Recall Old Problems with Browser Cookies
• No One Technology is a Silver Bullet
• How Hackers Can Access iPhone Contacts and Photos without a Password
• Opportunities Exist for DOD to Share Cybersecurity Resources with Small Businesses

September 18

News

• ProctorTrack Company Not Complying With Rutgers Contract
• An Identity Thief Explains the Art of Emptying Your Bank Account
• Google: Government Creating ‘Distractions’ in Email Privacy Debate
• Obama Cyber Sanctions Could Spur Chinese Backlash
• Intelligence Start-Up Goes Behind Enemy Lines to Get Ahead of Hackers
• Russian Hacker Admits Role in Massive Data Breach Scheme
• GOP Lawmakers Press Obama to Sanction China for Hacking
• Google Forges Ahead with Data Encryption Despite FBI Warnings
• $30 Million Settlement in Insider Trading Ring Linked to Hacking
• Active Malware Campaign Uses Thousands of WordPress Sites to Infect Visitors
• New Android Lockscreen Hack Gives Attackers Full Access to Locked Devices
• Why Windows 10 is the Most Secure Windows Ever
• Obama Advisers: Encryption Backdoors Would Hurt Cybersecurity, Net infrastructure Vendors
• Most 2016 Campaign Websites Receive Failing Privacy Grades

Law/Policy

• Homeland Security Chief Pushes Senate to Move Cyber Bill
• Jeb Bush Unveils Cybersecurity Policy
• Following TCPA Omnibus Order, Court Reaffirms Prior Ruling in Dismissing TCPA Text Message Lawsuit Against AOL
• Privacy-Privacy Tradeoffs
• Suing the Surveillance States: The (Cyber) Tort Exception to the Foreign Sovereign Immunities Act
• Information Privacy and Data Security
• Redefining Cybersecurity

Technical

• On Normalized Compression Distance and Large Malware
• Characterizing Phishing Threats with Natural Language Processing
• Deep Neural Network Based Malware Detection Using Two Dimensional Binary Program Features
• Towards a Systematic View on Cybersecurity Ecology
• Privacy for the Protected (Only)
• Fair Secret Reconstruction in (t, n) Secret Sharing

Reports / Blogs / Etc.

• Waging Cyber War the American Way
• Smart Watch that Monitors Typing
• Anonymous Browsing at the Library
• Tor Relay Turned Back on After Unanimous Library Vote
• Ahmed Mohamed’s Clock Was “Half a Bomb,” Says Anti-Muslim Group With Ties to Trump, Cruz
• Start With Security: Key Takeaways from the FTC’s Data Security Conference
• Google’s Own Researchers Challenge Key Android Security Talking Point
• A Close Look at PayPal Overpayment Scams That Target Craigslist Sellers
• Conversation With a Tech Support Scammer

September 11

News

• Spy Chief: Snowden Killed ‘Important’ Spy Program in Afghanistan
• Google Android Stagefright Flaw Exploit Code Released
• Mike Rogers: Cybersecurity Danger Is Growing
• Turla Cyberespionage Group Exploits Satellite Internet Links for Anonymity
• Credentials Stored in Ashley Madison’s Source Code Might Have Helped Attackers
• NIST Sets the Stage for Contactless Fingerprint Readers
• Apple and Other Tech Companies Tangle With U.S. Over Data Access
• Energy Dept. Hacked 150 Times in 4 Years
• Russian Cyber Spies Using Satellites to Hide Attacks
• Phishing Campaigns Target Critical Infrastructure
• NSA chief: Pentagon Hackers Used Tactics ‘I Had Not Seen Before’
• Apple iMessage’s End-to-End Encryption Stymies US Data Request

Law/Policy

• Bridging the Transatlantic Divide? The United States, the European Union, and the Protection of Privacy Across Borders
• Valuing Data Security and Privacy Using Cyber Insurance
• Internet Surveillance Law after the USA Patriot Act: The Big Brother that Isn’t
• Unpacking the International Law on Cybersecurity Due Diligence: Lessons from the Public and Private Sectors
• Trade Secret Hacking, Online Data Breaches, and China’s Cyberthreats

Technical

• Environment Based Secure Transfer of Data in Wireless Sensor Networks
• Cyber Attacks and Public Embarrassment: A Survey of Some Notable Hacks
• A Collaborative Intrusion Detection Mechanism Against False Data Injection Attack in Advanced Metering Infrastructure
• Worm Epidemics in Vehicular Networks
• Improving the Performance of Multi-Class Intrusion Detection Systems Using Feature Reduction

Reports / Blogs / Etc.

• Drone Self-Defense and the Law
• FBI and Apple’s Encryption
• FTC Experts Push Startups to Think About Security from the Beginning
• 5 Security Tips for Businesses (And Everyone Else!)
• Security Company Sues to Bar Disclosure Related to its Own Flaws
  
• Ashley Madison Password Crack Could Spell Trouble Across the Internet
  
• FBI Director Claims Tor and the “Dark Web” Won’t Let Criminals Hide From His Agents
• Cloud Encryption Options – Good for Compliance, Not Great for Security
• Russian Spy Gang Hijacks Satellite Links to Steal Data
• The Security Risks of Third-Party Data

September 4

News

• New Web Addresses a Cybercrime Playground
• Malware Attack Hits 225,000 iPhones
• Microsoft Accused of Adding Spy Features to Windows 7, 8
• What Ashley Madison Got Right
• Bought a Brand-New Phone? It Could Still Have Malware
• Court: We Can’t Rule on NSA Bulk Data Collection Because We Don’t Know Whose Data Was Collected
• Sneaky Adware Caught Accessing Users’ Mac Keychain Without Permission
• White House Eyes Sanctions for China Over Cyber-Theft of Trade Secrets
• Justice Department: Agencies Need Warrants to Use Cellphone Trackers

Journals / Preprints

Law/Policy

• Cybersecurity and Cybercrime: Intellectual Property and Innovation
• Congressional Cybersecurity Oversight: Who’s Who and How It Works
• Direct Participation in Hostilities from Cyberspace
• Cyber Espionage or Cyber War?: International Law, Domestic Law, and Self-Protective Measures
• USA Cyber Surveillance and EU Personal Data Reform: PRISM’s Silver Lining?
• Policy Implication of the Internet of Things
• Policy Issues Facing the Use of Social Networking Information During Times of Crisis
• Rethinking Privacy: Fourth Amendment “Papers” and the Third-Party Doctrine
• Justice Department Agencies Will Have to Obtain Warrant Before Using Cellphone Surveillance Technology
• DOJ to Require Warrants for Cell Spying Tech

Technical

• Enhanced Security for Cloud Storage using File Encryption
• The Development of the Architecture of Distributed Network Intrusion Detection System (D-NIDS)
• Risk Mitigation for Dynamic State Estimation Against Cyber Attacks and Unknown Inputs
• A Game Theoretic Model for Defending Against Stealthy Attacks with Limited Resources
• Information Monitoring in Routing Networks

Reports / Blogs / Etc.

• Two Observations About The New DOD Cyber Strategy
• What We Must Do About Cyber
• Many New Top-Level Domains Have Become Internet’s “Bad Neighborhoods”
• How Your Phone Tracks Your Every Move
• More ATM “Insert Skimmer” Innovations
• 26 Mobile Phone Models Contain Pre-Installed Spyware
• Department of Defense Issues New Cyber Incident Reporting and Cloud Computing Requirements for Contractors
• The Sharks of the Internet
• Is There a Future for Traditional Text Passwords?