The second project explores security and privacy of cyber-physical systems (CPS), or the multitude of Internet-connected devices that also use sensors to interact closely with their physical environment, including autonomous vehicles and medical devices. End users are increasingly using systems that tend more and more to include sensors that incorporate data from the physical world; for example: autonomous vehicles and medical devices. CPS devices gather data that can be more sensitive than that gathered by previous systems and share this data with other CPS that raise additional concerns. CPS devices are often more safety-critical and resource constrained. Because they use sensors to draw data directly from the physical environment, they can also face challenges that are less predictable. Cyber physical systems thus raise difficult questions about privacy and security. The project is exploring novel approaches to addressing and managing these risks, all starting with the acknowledgement that security failures are inevitable. From this starting point, the project team intends to explore approaches that emphasize fast detection and recovery, which can have a real-world impact in the CPS space. As a result, architects must consider what constitutes a properly designed product from a security standpoint. This includes situations where security is an emergent property that arises either from the interaction of multiple components each of which appears to have been designed properly or from data that the product has incorporated through experience. This raises complicated questions of causation and apportionment of liability. In addition, the law must determine the scope of liability for security flaws that emerge or are discovered after the product is sold. The privacy problems are similarly complex and benefit from interdisciplinary approaches.