Communications of the ACM Security

There seems to be a gap in how cryptographic and non-cryptographic hash functions are designed.

It simply is not appropriate to write code that will be connected to the Internet in an unsafe language such as C.

Bad coding and bad testing characterize the software that led to wrongful convictions, financial ruin, and four suicides.

Automation, audits, and access control are some of the ways to enhance security in ML systems.

The zero-trust security model is a proactive approach to overcoming potential threats and enhancing application security.

Using the same password for business and personal accounts is a common but risky practice that creates vulnerabilities.

Aides or staffers registered official email addresses and passwords on vulnerable third-party sites, putting those credentials at risk.

The EU AI Act serves as a reminder for developers to always prioritize the well being of individuals and society as a whole. 

Demonstrating the practicallity of μWMs by creating a microarchitecture-sensitive logic bomb.

The term “weird machines” reflects the shift in the understanding of exploitability’s root cause.