Research Archive

This archive contains long‑form research, whitepapers, and technical analysis focused on critical infrastructure, signal trust, RF‑layer dependencies, and defensive systems thinking.

Research Paper

Detecting Lies at the Signal Layer

Author: Norris Cornell · Published: May 5, 2026 · Version: Article · Part 4 of 4

Standard ICS monitoring watches the network and the controller. Signal-layer attacks arrive below both. Five detection techniques for the gap between what the controller believes and what the process actually is.

Research Paper

When Software Updates Lie: The SolarWinds Supply Chain Attack

Author: Norris Cornell · Published: April 21, 2026

In December 2020, 18,000 organizations discovered they had been running Russian intelligence malware for nearly a year — delivered via a software update they explicitly trusted. This analysis examines how APT29 turned SolarWinds' own code-signing infrastructure into a weapon, why every security control failed, and what the "Inputs Lie" framework reveals about trust boundary failures across cybersecurity domains.