Dr. Bart Mennink
Associate professor
Radboud University, Nijmegen, the Netherlands

آقای دکتر جواد مهاجری
استادیار
دانشگاه صنعتی شریف/ پژوهشکده الکترونیک

Dr. Hadis Karimipour
Associate professor
University of Calgary, Canada

Title:
Cybersecurity in the Era of ChatGPT

Abstract:
As with any innovative technology, OpenAI's chatbot has numerous practical applications, but some individuals may seek to misuse it, causing complications. Consequently, the cybersecurity industry, which has traditionally harbored concerns about the consequences of advanced AI, is now becoming conscious of the potential for cybercriminals with minimal knowledge and resources to exploit ChatGPT.
The critical issue is whether ChatGPT represents a cybersecurity threat or if it can be a valuable tool for cybersecurity experts. Although it is undeniable that the chatbot could be a potent weapon in the hands of cybercriminals, it could also bolster cybersecurity defenses. Ultimately, the impact of the technology will be determined by how individuals and organizations utilize it.

Bio:
Dr. Hadis Karimipour is the Canada Research Chair (Tier II) in Secure and Resilient Cyber-Physical Systems, Director of the Smart Cyber-Physical (SCPS) Lab, and an Associate Professor in the Department of Electrical and Software Engineering at the University of Calgary. Dr. Karimipour is among the pioneers of using Artificial Intelligence (AI), Machine/Deep Learning for security analysis of critical infrastructure. She has published 2 books, 24 book chapters, and more than 80 journal and conference articles in top IEEE journals and conferences. Dr. Karimpour received many awards, including Canada's Top 20 Women in Cybersecurity by ITWorldCanada, APEGA Early Accomplishment Award,  and IEEE Communication Society Early Achievement Award, Most Inspiring Women in Cyber Award by IT Security Guru.
Dr. Karimipour is the Associate Editor of the IEEE Transaction on Industrial Informatics, International Journal of Electrical Power & Energy Systems,  and IET Smart Grid Journal.  Her research focuses on the application of AI in the cybersecurity of critical infrastructures.
 

Title: 
Fast, Furious and Insecure: Passive Keyless Entry and Start Systems in Modern Supercars

Click to download presentation file

Abstract:
In this talk we will summarize three real-world security analyses of PKES systems. We begin with the PKES system used in Tesla Model S (prior to our responsible disclosure). We reverse engineered the system and discovered several security weaknesses, which allow us to clone a key fob in a matter of seconds. Next we look at the same system after Tesla deployed a security fix in response to our findings. We discovered a vulnerability which allows to still clone a key fob with twice the effort compared to the initial attack. We close with the PKES system used in Tesla Model X. This system employs secure symmetric-key and public-key cryptographic primitives implemented by a Common Criteria certified Secure Element. We reverse engineered the system and discovered several issues which allow us to bypass all of the cryptographic security measures put in place. We developed an attack which enables us to gain access to the vehicle’s interior in a matter of minutes and pair a modified key fob, allowing to drive off. Besides the security analyses we will also briefly report on our responsible disclosure efforts. Finally, our work highlights how hard it is to deploy seemingly simple cryptographic solutions in increasingly complex and connected vehicular systems.

Bio:

Dr Benedikt Gierlichs is a research expert in the COSIC (Computer Security and Industrial Cryptography) research group at KU Leuven in Belgium. He works with the embedded security sub-group and leads the attacks and evaluations team. His research focuses on the (physical) security of embedded devices. He enjoys to apply cryptography to solve complex real-world challenges. He has co-authored more than 70 scientific publications in peer-reviewed, international conferences and journals. He has served on many program committees of international conferences and has co-chaired 4 of them. He is a member of the IACR, a Belgian delegate to the ISO/IEC SC27 standardization group and chairman of the CHES steering committee.
 

آقای مهندس کوروس حمزه
هیات علمی
گروه پژوهشی برق جهاد دانشگاهی صنعتی شریف

اما به لطف و رحمت الهی بلافاصله، بدون هیچ شناخت و برنام‌ه­ریزی قبلی و کاملاً اتفاقی متخصصین جوان ایرانی نقطه نفوذی را در این رمزکننده کشف کردند و با طرح‌های ناب مبتکرانه، سامانه‌­ای را ساختند که با نفوذ و اختلال در همان رمزکننده­‌های انگلیسی، پیام‌های سری رمز شده را در لحظه و برخط کشف کرده و در اختیار فرماندهان ایرانی قرار دهد.