Jeremy Straub

This paper proposes a comprehensive, risk-based auditing framework designed to help internal and external auditors assess the cybersecurity risks posed by diverse IoT devices within corporate and industrial environments.

The paper demonstrates that using lightweight block cipher encryption on CAN payloads can effectively prevent passive reverse engineering of signal semantics without significantly impacting real-time performance.

The paper details significant enhancements to the SONARR system's core logic, replacing restrictive Boolean logic with generic data type support and adding multi-compute capabilities to improve vulnerability analysis for complex mission-critical systems.