Heng Yin, associate professor of computer science and engineering.
UC Riverside Research Will Help Protect Military Software from Hackers
Outdated military software and hardware is vulnerable to attack
By Richard Chang
RIVERSIDE, Calif. – The U.S. Department of Defense and other government agencies have outdated computers and software. That means their networks could be vulnerable to attack in today’s rapidly evolving digital environment, in which cyber security analysts are under constant pressure to keep up with the latest advances by hackers.
Heng Yin, an associate professor of computer science and engineering at the University of California, Riverside, is trying to solve this problem by securing decades-old legacy systems that are still instrumental. Yin was awarded a $4.68 million grant from the U.S. Office of Naval Research to pursue such research over a five-year term. Chengyu Song, an assistant professor of computer science and engineering at UCR, is a co-principal investigator on the grant.
“The programs are not maintained anymore, but they still need to use them,” said Yin of the programs run by the Navy and other government agencies. “The binary code may have lots of vulnerabilities.”
Yin and his team of researchers at UCR will be studying how to “harden” the code to prevent vulnerabilities from being exploited by hackers. This can involve removing some functions from legacy software that are not used, but could be exploited by attackers.
Legacy software isn’t only used in government, Yin said, noting that everyday civilian life is riddled with old code, such as on civilian aircraft.
“If the attacker finds a way to exploit the system, that will be a disaster,” Yin said of the potential for a flight to be hacked.
Yin will not actually gain access to Department of Defense systems, however. Those are highly classified and require top-level security clearance. Yin will use other readily available software programs on the market, such as Adobe Reader and Microsoft Office, to develop the prototype and method for securing similar legacy systems used in government.
source: The University of California, Riverside