Learning Software Security Analysers with Imperfect Data. This project aims to systematically investigate next-generation learning-based software security analysis to detect vulnerabilities in real-world large-scale software. The expected learning-based foundation will support the handling of imperfect data in order to provide a precise, scalable and adaptive security analysis of the critical software components, thus capturing important security vulnerabilities missed by existing approaches. Th ....Learning Software Security Analysers with Imperfect Data. This project aims to systematically investigate next-generation learning-based software security analysis to detect vulnerabilities in real-world large-scale software. The expected learning-based foundation will support the handling of imperfect data in order to provide a precise, scalable and adaptive security analysis of the critical software components, thus capturing important security vulnerabilities missed by existing approaches. The success of this project will further enhance the international competitiveness of Australian research in this important field and will benefit any Australian industry and business where software systems are deeply-rooted, such as transportation, smart homes, medical devices, defence and finance.Read moreRead less
Learning to Pinpoint Emerging Software Vulnerabilities. This project aims to develop learning-based software vulnerability detection techniques to improve the reliability and security of modern software systems. The existing techniques relying on conventional yet rigid software analysis and testing techniques are ineffective and/or inefficient when detecting a wide variety of emerging software vulnerabilities. The outcomes of this project will be a deep-learning-based detection approach and an ....Learning to Pinpoint Emerging Software Vulnerabilities. This project aims to develop learning-based software vulnerability detection techniques to improve the reliability and security of modern software systems. The existing techniques relying on conventional yet rigid software analysis and testing techniques are ineffective and/or inefficient when detecting a wide variety of emerging software vulnerabilities. The outcomes of this project will be a deep-learning-based detection approach and an open-source tool that can capture precision correlations between deep code features and diverse vulnerabilities to pinpoint emerging vulnerabilities without the need for bug specifications. Significant benefits include greatly improved quality, reliability and security for modern software systems.Read moreRead less
Rigorous Privacy Compliance in Modern Application Ecosystems. Modern network applications such as mobile applications and browser extensions have become the primary gateways for consumers to access the Internet in today’s digital landscape. This project aims to address privacy issues in these ecosystems by developing a new privacy-compliance assessment framework. The framework will evaluate the current privacy practices of application ecosystems, enabling users and developers in Australia and wo ....Rigorous Privacy Compliance in Modern Application Ecosystems. Modern network applications such as mobile applications and browser extensions have become the primary gateways for consumers to access the Internet in today’s digital landscape. This project aims to address privacy issues in these ecosystems by developing a new privacy-compliance assessment framework. The framework will evaluate the current privacy practices of application ecosystems, enabling users and developers in Australia and worldwide to reliably identify potential privacy risks and issues on their applications. The intended outcomes should endow data controllers with the capability of evidencing their compliance of data protection legislations such as Australia Privacy Act 1988 and EU General Data Protection Regulation (GDPR).Read moreRead less
Secure and Resistant Blockchain for Financial and Business Applications. The aim of this project is to develop a practical secure blockchain technology for the booming applications in finance and business. This project expects to address the leading security threats to the current blockchain applications. The expected outcome is an executable secure and resistant blockchain prototype through the integration of the latest developed and customized techniques. The success of the project will dramat ....Secure and Resistant Blockchain for Financial and Business Applications. The aim of this project is to develop a practical secure blockchain technology for the booming applications in finance and business. This project expects to address the leading security threats to the current blockchain applications. The expected outcome is an executable secure and resistant blockchain prototype through the integration of the latest developed and customized techniques. The success of the project will dramatically benefit Australian people and government, especially for the Australian ICT industry for commercializing the research outputs. Read moreRead less
MemberGuard: Protecting Machine Learning Privacy from Membership Inference. Machine Learning has become a core part of many real-world applications. However, machine learning models are vulnerable to membership inference attacks. In these attacks, an adversary can infer if a given data record has been part of the model's training data. In this project, the team aims to develop new techniques that can be used to counter these attacks, such as 1) new analytical models for membership leakage, 2) ne ....MemberGuard: Protecting Machine Learning Privacy from Membership Inference. Machine Learning has become a core part of many real-world applications. However, machine learning models are vulnerable to membership inference attacks. In these attacks, an adversary can infer if a given data record has been part of the model's training data. In this project, the team aims to develop new techniques that can be used to counter these attacks, such as 1) new analytical models for membership leakage, 2) new methods for susceptibility diagnosis, 3) new defences that leverage privacy and utility. Data-oriented services are estimated to be valuable assets in the future. These techniques can help Australia gain cutting edge advantage in machine learning security and privacy and protect its intellectual property on these services.Read moreRead less
Next generation garbage collection: discovery, design, and development. This project aims to improve the performance of programming languages used by millions of Australians every day, such as Java, JavaScript and PHP by developing improved memory-management algorithms. These languages use what is referred to as “garbage collection” to ensure memory is managed without data loss, but do so conservatively and consequently cause performance challenges and energy overheads. This project expects to p ....Next generation garbage collection: discovery, design, and development. This project aims to improve the performance of programming languages used by millions of Australians every day, such as Java, JavaScript and PHP by developing improved memory-management algorithms. These languages use what is referred to as “garbage collection” to ensure memory is managed without data loss, but do so conservatively and consequently cause performance challenges and energy overheads. This project expects to provide these languages with improved memory-management algorithms, and provides researchers and industry with a framework for innovation. This project will enable safe software that is more efficient on today's hardware and able to exploit emerging hardware. This project should lead to better performance and energy savings for server applications, phones, watches, and smart appliances, while ensuring memory safety.Read moreRead less
To Develop A National Marine Safety Extension Resource Toolkit And To Trial With All Fisheries Jurisdictions
Funder
Fisheries Research and Development Corporation
Funding Amount
$350,000.00
Summary
There have been significant resources (financial and physical) allocated to workplace health and safety (including mental health, training and systems for data collection) over the last 15 years in the commercial fishing industry .However the majority have been “stand alone" and there has been limited extension for the wider industry to adopt. Although there have been some positive moves in the area of health and safety such as the SRL Clean Green program and the Spencer Gulf Prawn fishery, ther ....There have been significant resources (financial and physical) allocated to workplace health and safety (including mental health, training and systems for data collection) over the last 15 years in the commercial fishing industry .However the majority have been “stand alone" and there has been limited extension for the wider industry to adopt. Although there have been some positive moves in the area of health and safety such as the SRL Clean Green program and the Spencer Gulf Prawn fishery, there has largely been a “silo” approach to the various initiatives across the commercial fishing industry and a real lack of coordination that can lead to a lack of communication, adoption and the lack of visibility of tools to those that need it. This is due in part to the nature of the industry that tends (overall) not to have the willingness to adopt something that another fishery has implemented, fragmentation of industry in some states and within a fishery. Additionally, the absence of a peak national body until June 2017 also created a gap for driving nationwide issues including workplace safety and health initiatives. Through the building of these networks and the establishment of on the ground champion in each state to influence industry including the building of capacity/ resources within the peak bodies to embrace workplace health and safety on behalf of their members, improved awareness and adoption of safety programs should occur. To do this State peak bodies require support to enable them to add value for their members and therefore utilise existing and currently funded research and develop extension processes.It is unknown to what level industry uptake of the current AMSA requirements for a safety management system (SMS) has occurred. It is not well understood by industry that the existence of a SMS to meet AMSA requirements only goes half way for legal compliance. Each states Worksafe body also has legislation that requires compliance with safe work practices. It is desirable to produce a SMS that meets both sets of legislation and develop a tool that can be used to assess the uptake of the initiatives through the peak bodies as well as developing a robust set of statistics to benchmark the performance. Objectives: 1. To build capability in each jurisdiction industry council for the development of a safety management system toolkit based on gear type/fishery type for implementation across industry 2. To develop processes to ensure existing and future projects including LMS ( 2017-194) and Barriers to Adoption ( 2017-046) are integrated into objective 1 above 4. To develop a national “champions” network for workplace/ marine safety to assist jurisdictional bodies communicate and champion the safety message 5. To ensure current and previous marine safety RD&E projects are linked and collaborate effectively to achieve increased levels of extension 6. To develop a tool and estimate wild catch fisheries accident statistics ( historical) and to provide a system and a benchmark to measure future performance of accident statistics Read moreRead less
Discovery Early Career Researcher Award - Grant ID: DE220100595
Funder
Australian Research Council
Funding Amount
$416,400.00
Summary
Efficient privacy-preserving proofs for secure e-government and e-voting. Electronic systems are becoming increasingly widespread and crucial to social and economic wellbeing. This project aims to ensure that e-government, e-health, e-commerce and e-voting are secure and trustworthy by inventing new ways to verify these systems without infringing privacy. This project expects to use innovative techniques from cryptography to support development of trustworthy systems. Expected outcomes of this p ....Efficient privacy-preserving proofs for secure e-government and e-voting. Electronic systems are becoming increasingly widespread and crucial to social and economic wellbeing. This project aims to ensure that e-government, e-health, e-commerce and e-voting are secure and trustworthy by inventing new ways to verify these systems without infringing privacy. This project expects to use innovative techniques from cryptography to support development of trustworthy systems. Expected outcomes of this project include better support for organisations to build trustworthy systems that will maximise benefit to Australian business and society. This should provide significant commercial, reputational, and societal benefits by avoiding disruptions to the organisations and their clients if and when they are attacked. Read moreRead less
Drawing Strength From Each Other: Simulation Testing Of Australia’s Abalone Harvest Strategies
Funder
Fisheries Research and Development Corporation
Funding Amount
$616,001.00
Summary
All Australian abalone harvest strategies use empirical approaches heavily supported by CPUE based indicators that reflect tensions between producing harvest strategies that work at both larger management scales and that account for local scale population dynamics. All harvest strategies apply a weight of evidence approach that is generally not clearly codified. However, the different harvest strategies lead to very disparate ways of setting catches, with some adjusting catch based on relative p ....All Australian abalone harvest strategies use empirical approaches heavily supported by CPUE based indicators that reflect tensions between producing harvest strategies that work at both larger management scales and that account for local scale population dynamics. All harvest strategies apply a weight of evidence approach that is generally not clearly codified. However, the different harvest strategies lead to very disparate ways of setting catches, with some adjusting catch based on relative performance of indicators, while others assume a direct relationship between CPUE and sustainable catch. These contrasting approaches have developed despite managing essentially the same group of species caught with the same gear type and from similar reef environments. This project will therefore test each of the presently used harvest strategies to draw out their strengths and weaknesses in a common platform.
Only the Victorian Western Zone and Tasmanian harvest strategies have been simulation tested. The MSE models used in each, due to funding and time constraints, have been developed in a way that means that portability across jurisdiction is time consuming and costly. As such, this project will address the need to write MSE code that will be usable for the future and in other jurisdictions. It will then test this code on two abalone stocks, one blacklip and one greenlip, to assist in this need for code generality. The final product will be freely available on a version control site such as GitHub with detailed guides on how it is best used.
Objectives: 1. Undertake Management Strategy Evaluation testing of each jurisdiction’s current abalone harvest strategies in Australia. 2. Contrast harvest strategy performance under a common dynamic range of stock types, with and without conflicting indicators 3. Provide guidance on what constitutes best approaches to using empirical abalone harvest strategies 4. Provide fully documented open-source R package for other MSE expert’s use 5. Provide advice on how best to include additional indicators Read moreRead less
Privacy-preserving data processing on the cloud. This project aims to address the current lack of privacy of user data processed by common cloud computing web servers, including email, business data, and confidential files. This project aims to develop new techniques in cryptography. The anticipated outcome is a suite of practical tools enabling common cloud computing processing operations such as search, statistical analysis, and multi-user access control, to be performed efficiently while pres ....Privacy-preserving data processing on the cloud. This project aims to address the current lack of privacy of user data processed by common cloud computing web servers, including email, business data, and confidential files. This project aims to develop new techniques in cryptography. The anticipated outcome is a suite of practical tools enabling common cloud computing processing operations such as search, statistical analysis, and multi-user access control, to be performed efficiently while preserving the data privacy. These tools should provide significant benefits to the privacy of cloud users, as well as financial and reputation benefits to the IT industry, by significantly reducing the likelihood of massive user data privacy breaches in the event of a cyber-hacking attack on the cloud server.Read moreRead less