The proliferation of Unmanned Aerial Vehicles (UAVs) embedded with vulnerable monolithic software, involving concurrency and fragile communication links, has recently raised serious concerns about their security. Recent studies show that a 2kg UAV can cause a critical damage to a passenger jet windscreen. However, verifying security in UAV software based on traditional testing remains an open challenge mainly due to scalability and deployment issue. Here we investigate the application of software verification techniques; in particular, existing software analyzers and verifiers, which implement fuzzing and bounded model checking techniques, to detect security vulnerabilities in typical UAVs. We also investigate fragility aspects related to the UAV communication link since all remaining UAV components (e.g., position, velocity and attitude control) heavily depend on it. Our preliminary results show real cyber-threats with the possibility of exploiting further security vulnerabilities in real-world UAV software in the foreseeable future.

The Internet and the proliferation of inexpensive computing power in the form of clusters of workstations or PCs provide the basic hardware infrastructure for business to business electronic commerce in small and medium enterprises. Unfortunately, the corresponding software infrastructure is still missing. In this paper we show a way to develop appropriate tools for electronic commerce by describing the approach we have taken in the WISE project (Workflow based Interned SErvices). The goals of WISE are to develop and deploy the software infrastructure necessary to support business to business electronic commerce in the form of virtual enterprises. The idea is to combine the tools and services of different companies as building blocks of a higher level system in which a process acts as the blueprint for control and data flow within the virtual enterprise. From this idea, the final goal is to build the basic support for an Internet trading community where enterprises can join their services to provide added value processes.

No abstract

No abstract

No abstract