Characterizing Caldera’S Cyber Attack Emulation Capabilities,
2025
University of Colorado Colorado Springs
Characterizing Caldera’S Cyber Attack Emulation Capabilities, Caleb Chang, Matthew Cao, Kenyou Teoh, Ekzhin Ear, Shouhuai Xu
Military Cyber Affairs
Autonomous cyber attack emulation can aid cyber defenders to identify and remediate cyber risks. MITRE’s Caldera software is the state-of-the-practice for automated attack emulation. Yet, it has not been systematically analyzed, putting its performance and effectiveness into question. This paper systematically characterizes Caldera’s architecture, abilities and use cases, and assesses its strengths and weaknesses. It draws useful insights, such as: Caldera excels in stealthy access and execution tactics to pilfer data against Windows operating systems. It also discusses two directions for Caldera improvement: module-level automation and end-to-end attack emulation.
The Digital Battlefield: Safeguarding Military Drones Against Cyberattacks,
2025
HackIoT Lab University at Albany, State University of New York
The Digital Battlefield: Safeguarding Military Drones Against Cyberattacks, Jason Ashong, Arun Venkitanarayanan, Benjamin Yankson
Military Cyber Affairs
The Internet of Battlefield Things (IoBT) is an advanced network of interconnected devices that significantly enhance military operations through real-time data exchange and situational awareness. While IoBT offers tactical advantages like improved surveillance, reconnaissance, and operational effectiveness, it also introduces substantial cybersecurity risks. Adversaries can exploit vulnerabilities within these networks, potentially compromising mission integrity and national security. This research examines the cybersecurity measures of commercial drone controllers and their correlation with military devices. It aims to enhance future vulnerability assessments with advanced tools and approaches to better secure critical military operations. The study highlights the need for robust security architectures …
Using Blockchain Technology To Help Secure America's Defense Critical Infrastructure,
2025
Center for Design and Manufacturing Excellence, The Ohio State University
Using Blockchain Technology To Help Secure America's Defense Critical Infrastructure, Vimal Buck, Aerin Krebs, Brynn Hillard, Jakob Gerha, Joseph Lutma, Srikar Maduposu, Ted Allen
Military Cyber Affairs
Critical water infrastructure in the United States faces increasing cybersecurity threats from state-sponsored actors, with potentially devastating consequences for national security, economic stability, and public health. (Cybersecurity and Infrastructure Security Agency, 2025). This infrastructure supports defense critical assets and is actively being targeted by various state-sponsored hacking groups, which poses a major concern for civilians and military alike. K. Herath (personal communication, February 24, 2025) reported being aware of two attacks on Ohio water systems during his tenure as Cybersecurity Strategic Advisor to Ohio Governor Mike DeWine.
Water is essential to everyday life and defense and presents as a high-value …
Network And Multipath Traceroute Visualization,
2025
University of Colorado Denver
Network And Multipath Traceroute Visualization, Cameron Makowski
Military Cyber Affairs
TraceCam introduces a new paradigm in network path analysis, leveraging GPU-accelerated WebGL visualization, advanced traceroute integrations, and AI-driven insights to transform complex routing data into actionable intelligence. Early prototypes have demonstrated significant improvements in performance, clarity, and multi-path discovery, overcoming traditional limitations in traceroute analysis. By incorporating retrieval-augmented language models and enriched metadata sources like IPinfo.io, TraceCam enables automated anomaly detection, contextual explanations, and rapid root-cause analysis, enhancing operational efficiency. The platform’s architecture ensures scalability and adaptability, supporting deeper investigations and real-time situational awareness. Future development will focus on clustering-based anomaly detection, expanded geographic visualizations, and enhanced AI-generated analysis to …
Quantifying Adversary Military Forces’ Susceptibility To Cognitive Attacks,
2025
University of Colorado Colorado Springs (UCCS)
Quantifying Adversary Military Forces’ Susceptibility To Cognitive Attacks, Bonnie Rushing, Cole Nelson, Shouhuai Xu, Christofer “Raven” O’Keefe, Olga Karpoyan
Military Cyber Affairs
This paper introduces a method to quantify international populations’ susceptibility to cyber cognitive attacks using press freedom and media trust metrics. We present the Cognitive Influence Calculator, a tool that estimates susceptibility (𝑆) based on Press Freedom Scores (PFS) and media trust levels. Findings show that while authoritarian regimes are harder to reach, successful cognitive attacks have greater impacts due to higher trust in state-controlled narratives. Using U.S. wargaming data and international trust metrics, we compute susceptibility scores for the U.S., Russia, China, Iran, and North Korea. Results show an inverse relationship between PFS and media susceptibility, with local/allied …
Forward,
2025
Military Cyber Affairs Editors in Chief
Understanding Russia’S Cyber Policies, Strategies, And Doctrines,
2025
Laboratory for Cybersecurity Dynamics Department of Computer Science University of Colorado Colorado Springs
Understanding Russia’S Cyber Policies, Strategies, And Doctrines, Bryan Hancock, Hanh Nguyen, Olga Karpoyan, Ekzhin Ear, Shouhuai Xu
Military Cyber Affairs
This study analyzes the strengths and weaknesses of Russia’s cyber policies, strategies, and doctrines through a systematic set of attributes, leading to key insights: (i) Russia has proactively adapted its cyber policies, strategies, and doctrines to its evolving environment; (ii) Russia actively conducts cognitive warfare, but remains equally vulnerable to it; and (iii) Russia’s cyber posture faces significant challenges, including a limited technological base, shortage of skilled personnel, and restrictive approach to information control, all of which undermine the effectiveness of its strategies. These insights offer valuable implications for US Cyber Command and the Department of Defense.
Characterizing Cyberattacks Against Operational Technology Infrastructures Through The Lens Of Attack Flows,
2025
Laboratory for Cybersecurity Dynamics Department of Computer Science University of Colorado Colorado Springs
Characterizing Cyberattacks Against Operational Technology Infrastructures Through The Lens Of Attack Flows, Sherman Kettner, Caleb Chang, Ekzhin Ear, Shouhuai Xu
Military Cyber Affairs
Operational Technology (OT) infrastructures play a critical role in modern society and economy. However, their increasing connectivity with public networks such as the Internet has made them vulnerable to cyberattacks, much like traditional Information Technology (IT) systems. In particular, cyberattacks against OT infrastructures remain relatively underexplored and little understood. In this paper, we aim to deepen our understanding of cyberattacks against OT infrastructures. For this purpose, we propose a methodology, including novel cybersecurity metrics to analyze the attack flows of these attacks in an end-to-end fashion, which allows us to draw useful insights. We demonstrate the utility of the methodology …
The Starving Artist: What The Us Can Learn From Dutch Artist-Focused Legislation About Equitable Remuneration For Musical Creators,
2025
Brooklyn Law School
The Starving Artist: What The Us Can Learn From Dutch Artist-Focused Legislation About Equitable Remuneration For Musical Creators, Natalia Perez-Flores
Brooklyn Journal of International Law
The United States (US) is the “leader in [the] creation, distribution, and worldwide licensing of recorded music.” Despite this, the US fails to afford moral rights protections to musical creators. Unlike economic rights, moral rights are not primarily concerned with the economic exploitation of art and instead protect the personal and reputational value of a work. Legislative justifications for copyright protection in the US include providing adequate rewards and appropriate incentives for artistic creation. To accomplish this, copyright law must protect authors’ personal expression, or moral rights, as much as it protects authors’ financial compensation, or economic rights. By focusing …
Session 6: Ai Regulation: The Role Of Washington State Legal Organizations,
2025
Judge, Pierce County Superior Court, Co-Chair, Board for Judicial Administration
Session 6: Ai Regulation: The Role Of Washington State Legal Organizations, Alicia Burton, Michele Carney, Ryan Harkins, Craig Shank, Drew Simshaw, Christon Skinner, Leslie Veloz
SITIE Symposiums
In session six of the SITIE 2025 Symposium, the panelists discuss how legal institutions in the State of Washington are responding to the challenges surrounding artificial intelligence (AI). Being aware that AI is continuing to evolve and will inevitably be integrated more into the legal field, this session discusses the benefits and concerns of AI and what legal institutions like the Board of Judicial Administration, Washington State Bar Association (WSBA) Committee on Professional Ethics, and the Washington State Bar Association Legal Technology Task Force are doing to educate lawyers and what changes, if any, are being done to address AI …
Session 5: Ai Regulation From Domestic Sources: From Where And When?,
2025
Sheila Lubetsky Birnbaum Professor of Civil Litigation, New York University School of Law, and Reporter, Principles of the Law, Civil Liability for Artificial Intelligence, American Law Institute
Session 5: Ai Regulation From Domestic Sources: From Where And When?, Mark Geistfeld, Margaret Hu, Emile Loza De Siles
SITIE Symposiums
In the wake of high-profile calls for AI regulation from tech leaders like Sam Altman and Brad Smith, domestic efforts to shape AI governance in the U.S. are becoming more urgent. Moderated by Professor Steve Tapia, this panel of legal scholars examined the evolving field of AI regulation, here from domestic sources, focusing on gaps in legal literacy, the limits of tort law, and the promise of more transparent frameworks. Panelists explored the challenges posed by the “Black Box” nature of AI, including trade secret protections, opaque algorithms, and their impact on tort causation and discrimination. They highlighted tensions between …
Session 4: Analyzing The Benefits Of Artificial Intelligence To Racially Inclusive Democracy,
2025
Patricia Roberts Harris Research Professor of Law at the George Washington University
Session 4: Analyzing The Benefits Of Artificial Intelligence To Racially Inclusive Democracy, Spencer Overton, Jeffrey Omari
SITIE Symposiums
This keynote discussion explored the intersection of artificial intelligence (AI), race, and democratic governance, focusing on the challenges and opportunities AI presents for creating a racially inclusive democracy. Professor Overton argued that while AI has transformative potential, it is currently influenced by actors and systems that may unintentionally (or intentionally) weaken racial equity. The spread of AI technologies—without proper safeguards—has opened new pathways for reinforcing structural inequalities, especially in the democratic process.
Session 3: Conference Spotlight- Politics In A World Of Ai Misinformation: Regulatory Approaches,
2025
S. Walter Richey Professor of Corporate Law, University of Minnesota Law School (author of Deepfake 2024: Will Citizens United and Artificial Intelligence Together Destroy Representative Democracy?)
Session 3: Conference Spotlight- Politics In A World Of Ai Misinformation: Regulatory Approaches, Richard Painter, Mark Verstraete
SITIE Symposiums
Considering developments regarding AI-generated media, fake news, and impersonations, panelists discuss the challenges in regulating AI-generated media, particularly in the context of deepfakes and political misinformation. Panelists discuss the evolution of content from a text-based presentation to video-based manipulations, along with broader concerns, including the role of social media platforms, how platforms are becoming more focused, confirmation bias of individual voting publics, and the potential conflicts of interest in regulating AI-generated content. Panelists suggest solutions involving a proactive method to warn the public about AI-generated misinformation. Further, the panelists also call for greater inter-disciplinary collaboration to develop flexible and forward-thinking …
Session 1: Guidance From International Regulation Sources,
2025
Loyola University Chicago School of Law & The Beazley Institute of Health Law and Policy
Session 1: Guidance From International Regulation Sources, Charlotte Tschider, Marie-Charlotte Roques-Bonnet
SITIE Symposiums
In Session One of the SITIE 2025 Symposium titled “Regulating Artificial Intelligence: From Where and When?”, Professor Mark Chinen moderated a panel featuring Professor Charlotte Tschider and Dr. Marie-Charlotte Roques-Bonnet. The discussion focused on international AI regulation, privacy, data governance, and the EU’s regulatory approach to AI oversight.
8th Annual Innovation And Technology Law Conference: Regulating Artificial Intelligence: From Where And When?,
2025
Seattle University School of Law
8th Annual Innovation And Technology Law Conference: Regulating Artificial Intelligence: From Where And When?, Steven Bender
SITIE Symposiums
Since 2018, the Seattle University School of Law has presented an annual late spring/summer conference on innovation and technology, shifting to a virtual conference in 2020. The virtual format fosters inclusion of national and even international speakers (as this year with Marie-Charlotte Roques-Bonnet, Data Protection/AI Consultant & Research Lead, ID side.eu, joining from France), and participation from a broad base audience, which this year included over 200 registrants who joined live or watched the recording.
Arts-Based Sustainability: From New York To Malawi,
2025
CUNY Lehman College
Arts-Based Sustainability: From New York To Malawi, Martha B. Lerski
Publications and Research
Recognizing that libraries serve multiple constituencies and subject areas, this chapter documents and advocates for development of transdisciplinary arts-based research (ABR) and culture-related projects linked to environmental challenges. Libraries contribute collections and spaces, as well as the research of library and information scientists. Libraries are currently among invisible contributors to sustainability planning and services. The chapter will link this invisibility to the value of what visual arts refer to as negative space elements in subjects ranging from traditional ecological knowledge to environmental science. Library collections, projects, and research contribute to education for sustainable development (ESD) as required to achieve the …
Unlocking Platform Data For Research,
2025
Tel-Aviv University
Unlocking Platform Data For Research, Niva Elkin-Koren, Maayan Perel, Ohad Somech
Indiana Law Journal
Digital platforms, which control unique access points to the rich data stored on their servers, have become a “living lab” of real-time information. Scientists and researchers increasingly use platform data for various purposes, such as training machine learning (ML) systems and Natural Language Processing (NLP) models, and for studying diverse fields such as medicine, humanities, and social sciences, including the influence of digital platforms on society. However, researchers increasingly encounter significant barriers when attempting to access platform data. Although platforms typically lack proprietary rights over the data itself, they exert strong control over its use by imposing digital locks and …
Design Patent Law's Three Little Words,
2025
Indiana University Maurer School of Law
Design Patent Law's Three Little Words, Mark D. Janis
Indiana Law Journal
U.S. design patent law protects the visual characteristics of articles of manufacture. For many years, major manufacturers of athletic footwear have protected their visually iconic designs with design patents, fueling a global market valued at nearly $100 billion. Today, however, shoe design has arrived in the digital universe. Digital sneakers such as Gucci’s Virtual 25 and Nike’s “Our Force Ones” can be “worn” only in virtual worlds but have substantial real world economic value. Yet U.S. design patent law makes it difficult—some would say impossible—to protect those designs, on the ground that they do not satisfy the statutory requirement for …
The Mirage Of Artificial Intelligence Terms Of Use Restrictions,
2025
Princeton University
The Mirage Of Artificial Intelligence Terms Of Use Restrictions, Peter Henderson, Mark A. Lemley
Indiana Law Journal
Artificial intelligence (AI) model creators commonly attach restrictive terms of use to both their models and their outputs. These terms typically prohibit activities ranging from creating competing AI models to spreading disinformation. Often taken at face value, these terms are positioned by companies as key enforceable tools for preventing misuse, particularly in policy dialogs. The California AI Transparency Act even codifies this approach, mandating certain responsible use terms to accompany models.
But are these terms truly meaningful, or merely a mirage? There are myriad examples where these broad terms are regularly and repeatedly violated. Yet except for some account suspensions …
Beautiful Means For Nefarious Ends,
2025
Notre Dame Law School
Beautiful Means For Nefarious Ends, Eric Wahoff
Notre Dame Journal of International & Comparative Law
This note will attempt to address the laws of art dealers and banks in a way that draws parallels with the past struggles of banks and today’s struggle in the art world to keep bad actors out. It will begin with surveying how art is currently used as a tool of criminals and the current regulatory regimes in the EU, New York, and California – the states with the most art brokers.Then the note will analyze relevant laws from the US banking industry. Finally, the note will discuss ways that banking laws that have been used to address money -laundering …
