Brian Russell

CEO @ TrustThink | Security engineering for drones, AI and connected systems

[Brian Russell @pbjason9]

Something to keep an eye on: legislation being introduced in the United States that would restrict the use of connected vehicle hardware and software components tied to covered countries.

This could be the beginning of tighter vehicle cybersecurity regulations in North America. Europe already has UNECE WP.29 R155 and ISO/SAE 21434, but there is currently no equivalent regulatory framework in the United States.

It is also interesting to note that we at TrustThink already work with AUVSI and others to evaluate supply chain provenance for uncrewed aerial system (#UAS) hardware and software. There will likely be lessons learned from those efforts that can be applied to connected vehicles if this legislation moves forward.

https://t.co/N8YrtYNUTA

[Brian Russell @pbjason9]

Really happy to note that Elijah Pichler is TrustThink's new Director of Transportation Cybersecurity. In this role, he will help lead and grow our efforts across intelligent transportation systems (ITS), connected vehicle security, and our uncrewed system security test and evaluation program. He will also work closely with our Lead AI Engineer, Allison Lane, to leverage #AI tools into our test and evaluation processes. Looking forward to seeing what Elijah builds over the next few years.

[Brian Russell @pbjason9]

Test and evaluation (T&E) processes are really good at validating whether a system was built according to specified requirements.

They are much less effective at validating system behavior once you add:

- learned models
- API-driven architectures
- dynamic runtime conditions
- external data and service dependencies

A lot of the things we will soon need to evaluate come from:

- interaction effects between components
- edge conditions
- model and data drift over time
- unanticipated or adversarial inputs

Something to think about as we test the security and robustness of intelligent systems.

Check out Reilly Fastring's presentation at AUVSI on Tuesday, May 12 at 2:30pm in Detroit for more thoughts on this.

https://t.co/wsZDncLeev

[TrustThink @TrustThink_Tech]

Open sourced a small library for ISO/IEC 13888-3 non-repudiation tokens.

https://t.co/7sBVPxhh2X

There aren’t many reference implementations out there... this focuses on token construction so it can be used for testing and integration with existing security frameworks.

[TrustThink @TrustThink_Tech]

Open sourced a project called TokenFool.
https://t.co/OUcC0zOgd5

Most adversarial tooling is built around CNNs and pixel-space attacks.

This is a research tool for experimenting with attacks on vision transformers at the token and patch level.

[Brian Russell @pbjason9]

Our @OLPSanDiego (OLP) interns getting ready to present our Transportation AI Development and Cyber Security work

[Brian Russell @pbjason9]

As transportation goes autonomous and connected, cybersecurity isn’t just a checkbox—it’s the backbone of safe, reliable systems. Vehicle and ITS equipment manufacturers should align with ISO/SAE 21434:

TARA: Identifying risks to build defenses that align with ISO/SAE 21434 & NIST CSF.
CSMS: A framework for proactive security management and monitoring across the supply chain

...and integrate secure communications by designing equipment to meet enrollment standards for the Security Credential Management System (SCMS), enabling trusted and authenticated V2X messaging.

[Brian Russell @pbjason9]

Inside The Energy Department's 10-Year Plan To Reshape Cybersecurity In The Sector https://t.co/IVXb7K2V7F

[Brian Russell @pbjason9]

The Marines' Newest Vehicle Will Be a Drone Warfare Juggernaut https://t.co/k8q8U3MFtq

[Brian Russell @pbjason9]

Spyware developer charged by Australian Police after 14,500 sales https://t.co/pFuln5IW0y

[Brian Russell @pbjason9]

Spanish Police Arrest 2 Nuclear Power Workers for Cyberattacking the Radiation Alert System https://t.co/yIB0xqzGJM

[Brian Russell @pbjason9]

Looking to hire a strong junior / mid security engineer that has an interest in encryption to work with myself and a great team on modernizing cryptographic solutions / helping plan transition to quantum resistant algorithms. #infosecjobs San Diego preferred, remote an option

[Brian Russell @pbjason9]

White House to boost support for quantum technology while boosting cybersecurity | Reuters https://t.co/xeaWxIcS8H

[Brian Russell @pbjason9]

A new all-electric drone is totally silent. And it uses ion propulsion? https://t.co/uziin92Hb1

[Brian Russell @pbjason9]

How Drones Are Shedding Light On The Secret Lives Of Great Whites https://t.co/cybtax5s5w

[Brian Russell @pbjason9]

New SDP 2.0 specification facilitates zero-trust maturity https://t.co/yod7Zg1tuc via @csoonline

[Brian Russell @pbjason9]

TLS Flaws Leave Avaya, Aruba Switches Open to Complete Takeover https://t.co/vsxBOm5CwA #security #feedly

[Space @redditSpaceView]

SpaceX Crew-4 by @sir_oki

[Brian Russell @pbjason9]

Chinese drone-maker DJI suspends ops in Russia, Ukraine https://t.co/GKMMPjEth9 via @theregister