Dongyan Xu - 2024 Arden L. Bement Jr. Award

2024 Arden L. Bement Jr. Distinguished Lecture

Cybersecurity in an Increasingly Cyber-Physical World

Biography

Dongyan Xu, the Samuel D. Conte Professor of Computer Science within the College of Science and director of the Center for Education and Research in Information Assurance and Security (CERIAS), has been chosen to receive the 2024 Arden L. Bement Jr. Award. The award is Purdue University’s most prestigious recognition for contributions in pure and applied science and engineering.

Xu is a leading authority in cybersecurity, particularly in cyber-physical system (CPS) security. His pioneering research has advanced security frameworks for critical infrastructures and systems, including unmanned aerial systems (UAS), industrial control systems and Internet of Things (IoT) networks. His work has been widely recognized for its impact on national security and real-world applications.

“Xu’s research has transformed the way we approach cybersecurity in cyber-physical systems, bridging the gap between cyber and physical security layers,” said Dan DeLaurentis, vice president for Discovery Park District Institutes and Centers. “His contributions not only advance academic knowledge but also have direct applications in national security and defense, manufacturing, and supply chain management.”

Xu expressed deep gratitude for the recognition. “I am sincerely humbled and honored by this award, and I feel very grateful to my colleagues and the Purdue research community for all their inspiration and support through the years,” he said. “I am fortunate to work in cybersecurity, an area of long-time excellence at Purdue and an area with ever-changing challenges and opportunities.”

Xu has led research projects totaling more than $28 million from government agencies and industry partners in the past decade. His cross-layer security methodology, which integrates system modeling, vulnerability discovery, attack simulation and system hardening, has led to critical security advancements in CPS environments. His research in UAS security, for example, has identified and mitigated vulnerabilities in widely used autopilot software, benefiting commercial and defense sectors.

His work on IoT security has influenced global standards, revealing critical vulnerabilities in Bluetooth and Controller Area Network bus protocols used in vehicles and industrial automation.

Xu and his colleagues have helped develop security remedies adopted by major technology firms, including Apple, Google and Intel. His cybersecurity methodologies also have played a key role in securing next-generation manufacturing and supply chains through the Department of Energy-sponsored Cybersecurity Manufacturing Innovation Institute (CyManII), which he served as vice president for secure automation and supply chains.

Xu’s over-arching goal for his future work at Purdue is to advance cybersecurity in all useful applications. “My goal is to help realize the fusion of cybersecurity and other science and engineering disciplines to make more real-world systems and infrastructures cyber-secure.” he said.

Xu has authored over 100 peer-reviewed papers, winning best paper awards at premier cybersecurity conferences. Beyond research, he’s contributed to national cybersecurity policies through the National Science Foundation’s AI Institute for Cyber Threat Intelligence and Operations (ACTION) and cybersecurity R&D strategies for organizations like MITRE Corp., Sandia National Laboratories and Cisco Systems.

The Bement award recognizes Purdue faculty whose research has made a significant impact on science and engineering. Established in honor of Arden L. Bement Jr., a distinguished professor and former director of the National Science Foundation, the award highlights innovative and influential contributions to global scientific advancements.

Lecture Abstract

Cybersecurity has changed significantly in the past decade, expanding from “cyber-only” systems such as computed job execution, web services and mobile apps to “cyber-physical” systems such as smart energy, transportation and manufacturing systems.

Today, any system with a cyber component faces threats from cyber attacks, calling for new security approaches and solutions to secure not just computers and networks, but overall cyber-physical systems (CPS).

Dongyan Xu, the Samuel Conte Professor of Computer Science, will discuss new challenges in CPS security that did not exist in traditional computer security, as well as opportunities to secure CPS using techniques that would be deemed impractical in computer security. He will also report on his ongoing development of a cross-plane (cyber and physical) methodology for CPS vulnerability discovery, confirmation and mitigation.