Below are some examples of projects currently running at the CTI. For a full list please feel free to contact us via may.docherty@dmu.ac.uk or contact the relevant academic directly.
Protecting Medical Data: A Novel AI-Driven E-Healthcare Solution using Post-Quantum Lightweight Cryptography
Mujeeb Rehman, Muhammad Kazim, Richard Smith
The TeleHealth-CyberShield aims to address the escalating issue of cybercrime in the healthcare industry. With the increasing reliance on the internet, the UK experienced a substantial escalation in cybercrime activities during the past few years. A significant portion of the estimated cost of cybercrimes has been attributed to the National Health Service (NHS) and healthcare services attacks. TeleHealth-CyberShield leverages cutting-edge technologies to protect medical data from a large number of cyberattacks. Our product will be cost-effective and efficient in terms of data security and will be easily integrated with existing e-healthcare systems, providing enhanced cyber resilience through a post-quantum solution.
PhillitedPhish
Trevor Wood, Iryna Yevseyeva, Eerke Boiten, Vitor Bastor-Fernandes
It is estimated that cyber-attacks cost UK businesses £37bn per year, most of whichends up in the hands of organised crime. It is also estimated that around 90% ofthese attacks start with a phishing email.Many phishing emails have been relatively easy to spot in the past as they containpoor spelling, grammar, and sentence structure. However, with generative AI nowbeing more accessible, it is easier to make phishing emails more realistic andremove these obvious markers. Moreover, these phishing emails are designed tobypass spam filters without being detected.Philleted Phish will detect phishing emails, whether they attempt to trick victims intovisiting a phishing website or perform some other action, such as transferring moneyto the attacker's bank account or providing information useful to a larger socialengineering attack. Unlike current phishing email detection software, it can be usedby domestic users, micro-businesses, and SMEs without requiring expensive andspecialised hardware.
Towards Security Assurance For Cyber Physical Systems - RITICS Fellowship
Ashraf Tantavy
Existing cyber physical systems are rarely tested during runtime due to potential testing impact on system operation. Short periods of planned system shutdowns, taking place over extended periods of time (typically 2-3 years in the process control industry), cannot be used for security testing because either the control system would be powered off, or there would be planned upgrade activities that could conflict with testing. The end result is that security mechanisms are deployed without an accurate assessment of their effectiveness. The fellowship scope is to Develop a roadmap for technologies, solutions, and processes to enable runtime security assurance for cyber physical systems
Example Projects
ACROSSING: Advanced Technologies and Platform for Smarter Assisted Living
Liming Chen, Feng Chen
EU Horizon2020, 10 beneficiaries, €3.88M (DMU share €980K). 01/2016-12/2019
ACROSSING is an EU Horizon2020 Marie Skłodowska-Curie European Training Network, led by the CIIR research group at DMU, in which 15 research projects will address the drastic demographic change and its impact on our society and economy. It will carry out inter/multi-disciplinary, cross-sector research to develop flexible, interoperable underlying technologies which are then applied to and evaluated in multiple real application scenarios, leading to specialized technology infrastructures and best-practice application demonstrators. In addition, the project will train young researchers to become future research leaders with strong academic-related competences, forward-thinking visions, wider perspectives, innovation mind set and extensive research networks.
Eerke Boiten, Edward Cartwright, Lee Hadlington, Fenia Ferra
EPSRC, £900K across 6 sites: DMU (lead), Leeds, Kent, Newcastle, Coventry, City; 2017-2019
Ransomware is a significant cybercrime threat that is showing the potential to be exploited at scale and at high profit by organised crime. The EMPHASIS project is funded by EPSRC under the Human Dimensions of Cyber Security call, and part of the RISCS research institute. It studies the problem of ransomware from the perspectives of many disciplines: computer science, psychology, economics, law, and criminology. It aims to achieve an understanding of the crime in a technological and business sense, the victims, the perpetrators, and consequently ways to mitigate it through technical, policy, public information, and law enforcement methods.
Air4ICS: Agile Incident Response For Industrial Control Systems
Helge Janicke, Richard Smith, Ying He
NCSC/RITICS, £250K plus £160K in-kind from industrial partners, 2019-2020
The aim of this research is to establish and evaluate how agile methods and techniques will be integrated into traditionally incident response processes to yield a value-focused and dynamic approach that embeds incident response in the overall business. The research will take into account changing risks and impacts during the course of an attack and maximise business utility by deriving value directly from the business processes the ICS is supporting. The main objective is to deliver an Agile Incident Response framework (AIR4ICS) that is tailored to the particular challenges of ICS to address the cyber physical nature and impacts of Incident Response.
ACTIVE: Adaptive Cyber Threat Intelligence for Security Investment Optimisation
Ying He, Iryna Yevseyeva, Helge Janicke, Eerke Boiten
InnovateUK, ~£100K, 2018-2019
Due to GDPR, all organisations have to invest into security. There are lots of security defence solutions available in the market, but how much to invest and how to distribute investment and into which resources? This InnovateUK project leading to the establishment of a product and company, ACTIVE, provides an adaptive cyber threat intelligence solution to help decision makers/CISOs to optimise security investment and resource utilisation. The product offers as its unique feature the visualization of security investment in real time and a reporting dashboard, allowing CISOs to produce reports to justify security cost. By making the security investment transparent, this product will benefit both security critical businesses, especially those dealing with critical national infrastructure (CNI), and cyber liability insurance companies.
PryMe, a Universal Framework to Measure the Strength of Privacy-enhancing Technologies
Isabel Wagner and Yuchen Zhao
EPSRC, £90K, 2017-2018
Privacy metrics are used to show how effective new privacy-enhancing technologies are, i.e. to what extent they are able to protect privacy, by measuring the amount of privacy the technologies provide. Even though many privacy metrics have been proposed, there are many studies showing their shortcomings in terms of consistency, reproducibility, and applicability in different application domains. This is an important issue because use of a weak privacy metric can lead to real-world privacy violations if the privacy metric overestimates the amount of privacy provided by a technology.
This project investigates privacy metrics for several application domains, including genomics, vehicular networks, smart metering, social network, and data publishing.
Investigative interviewing of cybercrime victims to gain best evidence
Eerke Boiten, Fenia Ferra, Dave Walsh
Home Office/RISCS, £70K, 2019
The project sets out to study and improve techniques for interviewing of cybercrime victims, by answering the following questions:
-
How can police interactions with cybercrime victims improve and encourage their reporting of crimes?
-
How do law enforcement undertake investigative interviews with cybercrime victims? How can such interviews be improved? What training is required?
-
What are the characteristics of cybercrime victims that might positively or negatively affect their recall? How does this differ across a range of cybercrime offences?
FLOURISH: Empowerment through Trusted Secure Mobility
Francisco Aparicio Navarro, Leandros Maglaras, Helge Janicke, Eerke Boiten, Dimitris Kosmanos
InnovateUK/Airbus, 2018-2019
FLOURISH is a multi-sector collaboration, helping to advance the successful implementation of Connected and Autonomous Vehicles (CAVs) in the UK, by developing services and capabilities that link user needs and system requirements. This project seeks to develop products and services that maximise the benefits of CAVs for users and transport authorities. FLOURISH will address vulnerabilities in the technology powering CAVs, with a focus on the critical areas of cyber security and wireless communications. The Cyber Technology Institute is involved in Work Package (WP) 5.6: Anomaly detection. The purpose of this WP is to design and develop an operational AI based anomaly detection system.
Privacy Protection Research for IoT enabled Smart Healthcare Systems
Liming Chen, Raouf Hamzaoui
China NSF and UK Newton Fund, Royal Society International exchange programme, £24K, 04/2018 – 03/2020
This project investigates the nature, characteristics, computational models and algorithms for representing, measuring and assessing privacy, and how privacy-aware / privacy-friendly healthcare systems can be supported so people need not to worry about their personal or behavioural or medical information being leaked or stolen. The outcomes is expected to significantly improve the maturity and acceptability of smart healthcare technologies and systems, thus leading to improved quality of life for the ageing population. The project is undertaken jointly by combining relevant research expertise and results generated from a funded China NSFC project and the funded EU Horizon 2020 MSCA ACROSSING project.