Welcome to the NIST Trustworthy & Responsible Artificial Intelligence Resource Center (AIRC).

Welcome to the NIST Trustworthy & Responsible Artificial Intelligence Resource Center (AIRC).

The AIRC supports all AI actors in the development and deployment of trustworthy and responsible AI technologies. AIRC supports and operationalizes the NIST AI Risk Management Framework (AI RMF 1.0) and accompanying Playbook and will grow with enhancements to enable an interactive, role-based experience providing access to a wide-range of relevant AI resources.

The Department of Veterans Affairs Establishes a Trustworthy AI Framework

 

The National Institute of Standards and Technology (NIST) AI Risk Management Framework (AI RMF) provides AI organizations with a guiding structure to operate within, and outcomes to aspire towards, all connected to their specific contexts, use cases, and skillsets. The rights-affirming framework operationalizes trustworthy AI within a culture of responsible AI practice and use.  https://airc.nist.gov/AI_RMF_Knowledge_Base

NIST AI 600-1: AI RMF Generative AI Profile

This document can help organizations identify unique risks posed by generative AI and proposes actions for generative AI risk management that best aligns with their goals and priorities.

NIST AI 100-5: A Plan for Global Engagement on AI Standards

A Plan for Global Engagement on AI Standards ( NIST AI 100-5 ) is designed to drive the worldwide development and implementation of AI-related consensus standards, cooperation and coordination, and information sharing. 

NIST AI 100-4: Reducing Risks Posed by Synthetic Content

This publication informs, and is complementary to, a separate report on understanding the provenance and detection of synthetic content that AI EO Section 4.5(a) tasks NIST with providing to the White House. NIST AI 100-4 lays out methods for detecting, authenticating and labeling synthetic content, including digital watermarking and metadata recording, where information indicating the origin or history of content such as an image or sound recording is embedded in the content to assist in verifying its authenticity.

WitnessAI is building guardrails for generative AI models - TechCrunch

WitnessAI is building guardrails for generative AI models - TechCrunch

TechCrunch

WitnessAI, a new startup, is building tech to give companies greater control over the generative AI models they're deploying.

Google AI Fuzz

 https://www.securityweek.com/google-brings-ai-magic-to-fuzz-testing-with-eye-opening-results/

Harvard has free Resume, CV, and Cover Letter, resources

HAVARD RESUMES & COVER LETTERS

Resumes & Cover Letters for Master’s Students

CVs andCover Letters

A Cyber Workforce Research and Development Platform
CERT PCTC (Private Cyber Training Cloud) contains a library of instruction and reference information about cyber security, information assurance, incident response, computer forensics, and other vital information security topics.
https://pctc.cyberforce.site/lms


IETF officially deprecates TLS 1.0 and TLS 1.1
The driving force behind the deprecation process was the large number of attacks that were revealed in previous years and which impacted the cryptographic algorithms at the base of the two protocols.
This included attacks like BEAST, POODLE, ROBOT, SWEET 32, LUCKY 13, and others, all of which showed how attackers could take advantage of weaknesses in both SSL and TLS 1.0/1.1 to compromise encrypted communications and attack organizations.
IETF officially deprecates TLS 1.0 and TLS 1.1



Microsoft Package Manager
Microsoft has a Package Manager. It is like Linux Package Managers or Chocolaty in that it has a repository of current applications. It can also be set up to have your own repository of applications specific to your environment. So you can use Powershell to install a group of applications that you use for your own business use cases.
https://docs.microsoft.com/en-us/powershell/module/packagemanagement/?view=powershell-7.1

InfoSec Update

 INTRODUCTION TO ARM ASSEMBLY BASICS

The following topics will be covered step by step:

ARM Assembly Basics Tutorial Series:
Part 1: Introduction to ARM Assembly
Part 2: Data Types Registers
Part 3: ARM Instruction Set
Part 4: Memory Instructions: Loading and Storing Data
Part 5: Load and Store Multiple
Part 6: Conditional Execution and Branching
Part 7: Stack and Functions

https://azeria-labs.com/writing-arm-assembly-part-1/

MITRE Publications
We encourage our staff to share their knowledge with the public through a number of avenues, including publishing papers and speaking at conferences and symposia. You can find technical reports, white papers, and other related publications on a wide variety of topics on this site.

https://www.mitre.org/publication-keywords/cybersecurity

Database of Free / Open Access Online Computer Science Books, Textbooks, and Lecture Notes
(1243 books and growing)

https://www.freetechbooks.com/

Malware Unicors's reverse engineering workshops

Reverse Engineering 101

11 sections. This workshop provides the fundamentals of reversing 

engineering Windows malware using a hands-on experience with 

RE tools and techniques.

Reverse Engineering 102

18 sections. This workshop build on RE101 and focuses on identifying 

simple encryption routines, evasion techniques, and packing.

https://malwareunicorn.org/#/workshops


ΜΔDΞRΔS

@hackermaderas

OffSec Tools I Like Tiny Core Tiny Core, a unique and minimalist distribution of the Linux operating system and tools. distro.ibiblio.org/tinycorelinux/…

htrace is a shell script for http/https troubleshooting and profiling. github.com/trimstray/htra… PCredz This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface. github.com/lgandx/PCredz Spiderfoot SpiderFoot is an open source intelligence (OSINT) automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. github.com/smicallef/spid… Pagodo a passive Google dork script to collect potentially vulnerable web pages and applications on the Internet. github.com/opsdisk/pagodo Amass github.com/OWASP/Amass The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques. TY @trimstray @PythonResponder @binarypool @jeff_foley

The Study of Tiny Motions being amplified, some to the point that you can hear it.

Video Magnification

Many seemingly static scenes contain subtle changes that are invisible to the naked human eye. However, it is possible to pull out these small changes from videos through the use of algorithms we have developed. We give a way to visualize these small changes by amplifying them and we present algorithms to pull out interesting signals from these videos, such as the human pulse, sound from vibrating objects and the motion of hot air.

http://people.csail.mit.edu/mrub/vidmag/



Eulerian Video Magnification for Revealing Subtle Changes in the World
Abstract

Our goal is to reveal temporal variations in videos that are difficult or impossible to see with the naked eye and display them in an indicative manner. Our method, which we call Eulerian Video Magnification, takes a standard video sequence as input, and applies spatial decomposition, followed by temporal filtering to the frames. The resulting signal is then amplified to reveal hidden information. Using our method, we are able to visualize the flow of blood as it fills the face and also to amplify and reveal small motions. Our technique can run in real time to show phenomena occurring at temporal frequencies selected by the user.



Eulerian Video Magnification code
Matlab code and executables implementing Eulerian video processing for amplifying color and motion changes.

Phase Based Video Motion Processing code
Matlab code implementing the new and improved phase-based motion magnification pipeline.

Learning-based Video Motion Magnification code
Tensorflow implementation of the learning-based motion magnification pipeline.

Videoscope
Web interface for motion and color magnification. Upload your videos and have them magnified!