Computer and Systems Architecture Commons^™

Anomaly Detection Of Network Layer Attacks Against Cyber Physical Systems Using Machine Learning And Deep Learning Techniques, James Alger, Michael Tu

Military Cyber Affairs

This research paper presents the analysis of using machine learning and deep learning algorithms on detecting anomalous network traffic in Cyber-Physical Systems (CPS). Using a real PLC CPS-based system, normal and anomalous network traffic will be captured using Wireshark. The research analyzes a DDoS attack. The focus of the research is to identify the most effective feature combinations and evaluate them on ML and DL models. The emphasis is on enhancing detection strategies rather than exploiting device vulnerabilities. The detection of network attacks often involves handling a vast array of high-level features. Previous studies (Li & Chasaki, 2022) apply machine …

Characterizing Caldera’S Cyber Attack Emulation Capabilities, Caleb Chang, Matthew Cao, Kenyou Teoh, Ekzhin Ear, Shouhuai Xu

Military Cyber Affairs

Autonomous cyber attack emulation can aid cyber defenders to identify and remediate cyber risks. MITRE’s Caldera software is the state-of-the-practice for automated attack emulation. Yet, it has not been systematically analyzed, putting its performance and effectiveness into question. This paper systematically characterizes Caldera’s architecture, abilities and use cases, and assesses its strengths and weaknesses. It draws useful insights, such as: Caldera excels in stealthy access and execution tactics to pilfer data against Windows operating systems. It also discusses two directions for Caldera improvement: module-level automation and end-to-end attack emulation.

The Digital Battlefield: Safeguarding Military Drones Against Cyberattacks, Jason Ashong, Arun Venkitanarayanan, Benjamin Yankson

Military Cyber Affairs

The Internet of Battlefield Things (IoBT) is an advanced network of interconnected devices that significantly enhance military operations through real-time data exchange and situational awareness. While IoBT offers tactical advantages like improved surveillance, reconnaissance, and operational effectiveness, it also introduces substantial cybersecurity risks. Adversaries can exploit vulnerabilities within these networks, potentially compromising mission integrity and national security. This research examines the cybersecurity measures of commercial drone controllers and their correlation with military devices. It aims to enhance future vulnerability assessments with advanced tools and approaches to better secure critical military operations. The study highlights the need for robust security architectures …

Using Blockchain Technology To Help Secure America's Defense Critical Infrastructure, Vimal Buck, Aerin Krebs, Brynn Hillard, Jakob Gerha, Joseph Lutma, Srikar Maduposu, Ted Allen

Military Cyber Affairs

Critical water infrastructure in the United States faces increasing cybersecurity threats from state-sponsored actors, with potentially devastating consequences for national security, economic stability, and public health. (Cybersecurity and Infrastructure Security Agency, 2025). This infrastructure supports defense critical assets and is actively being targeted by various state-sponsored hacking groups, which poses a major concern for civilians and military alike. K. Herath (personal communication, February 24, 2025) reported being aware of two attacks on Ohio water systems during his tenure as Cybersecurity Strategic Advisor to Ohio Governor Mike DeWine.

Water is essential to everyday life and defense and presents as a high-value …

Network And Multipath Traceroute Visualization, Cameron Makowski

Military Cyber Affairs

TraceCam introduces a new paradigm in network path analysis, leveraging GPU-accelerated WebGL visualization, advanced traceroute integrations, and AI-driven insights to transform complex routing data into actionable intelligence. Early prototypes have demonstrated significant improvements in performance, clarity, and multi-path discovery, overcoming traditional limitations in traceroute analysis. By incorporating retrieval-augmented language models and enriched metadata sources like IPinfo.io, TraceCam enables automated anomaly detection, contextual explanations, and rapid root-cause analysis, enhancing operational efficiency. The platform’s architecture ensures scalability and adaptability, supporting deeper investigations and real-time situational awareness. Future development will focus on clustering-based anomaly detection, expanded geographic visualizations, and enhanced AI-generated analysis to …

Quantifying Adversary Military Forces’ Susceptibility To Cognitive Attacks, Bonnie Rushing, Cole Nelson, Shouhuai Xu, Christofer “Raven” O’Keefe, Olga Karpoyan

Military Cyber Affairs

This paper introduces a method to quantify international populations’ susceptibility to cyber cognitive attacks using press freedom and media trust metrics. We present the Cognitive Influence Calculator, a tool that estimates susceptibility (𝑆) based on Press Freedom Scores (PFS) and media trust levels. Findings show that while authoritarian regimes are harder to reach, successful cognitive attacks have greater impacts due to higher trust in state-controlled narratives. Using U.S. wargaming data and international trust metrics, we compute susceptibility scores for the U.S., Russia, China, Iran, and North Korea. Results show an inverse relationship between PFS and media susceptibility, with local/allied …

Forward, Amy Hamilton

Military Cyber Affairs

No abstract provided.

Understanding Russia’S Cyber Policies, Strategies, And Doctrines, Bryan Hancock, Hanh Nguyen, Olga Karpoyan, Ekzhin Ear, Shouhuai Xu

Military Cyber Affairs

This study analyzes the strengths and weaknesses of Russia’s cyber policies, strategies, and doctrines through a systematic set of attributes, leading to key insights: (i) Russia has proactively adapted its cyber policies, strategies, and doctrines to its evolving environment; (ii) Russia actively conducts cognitive warfare, but remains equally vulnerable to it; and (iii) Russia’s cyber posture faces significant challenges, including a limited technological base, shortage of skilled personnel, and restrictive approach to information control, all of which undermine the effectiveness of its strategies. These insights offer valuable implications for US Cyber Command and the Department of Defense.

Characterizing Cyberattacks Against Operational Technology Infrastructures Through The Lens Of Attack Flows, Sherman Kettner, Caleb Chang, Ekzhin Ear, Shouhuai Xu

Military Cyber Affairs

Operational Technology (OT) infrastructures play a critical role in modern society and economy. However, their increasing connectivity with public networks such as the Internet has made them vulnerable to cyberattacks, much like traditional Information Technology (IT) systems. In particular, cyberattacks against OT infrastructures remain relatively underexplored and little understood. In this paper, we aim to deepen our understanding of cyberattacks against OT infrastructures. For this purpose, we propose a methodology, including novel cybersecurity metrics to analyze the attack flows of these attacks in an end-to-end fashion, which allows us to draw useful insights. We demonstrate the utility of the methodology …

Sentry V3: Extending Context Switches On A Trusted Secure Coprocessor, Mark Kong

Master's Theses

Software correctness and integrity is only ensured through trust in the un- derlying hardware. However, modern computer systems are complex to design and secure. Thus, given the choice between performance and security, companies will often prioritize performance, resulting in vulnerable systems. This creates exploitable systems that must be patched retroactively because business value performance over security. One approach to this issue is to separate the root of security from the rest of the system to create a minimal trusted computing base. Trustguard is one instance of this. Trustguard implements a Containment Architecture with Ver- ified Output (CAVO) model which shows …

Optimizing Web Servers With Io_Uring, Mihika Nigam

Master's Theses

Modern web servers face unprecedented demands for high throughput and low latency [10] [11]. Yet, even the state-of-the-art optimizations often fail under heavy workloads on existing infrastructure. Despite advancements in hardware, communication between applications and the kernel remains a critical bottleneck.

Industry surveys reveal that over 50% of production servers still rely on traditional epoll-based architectures [5]. This research aims to investigate and characterize Linux’s new io_uring subsystem, which has the potential to overcome these challenges. Through controlled load testing of various existing architectures like event-driven, multi-process, and multi-threaded architectures (including other commercial servers), we demonstrate how io_uring can help …

Griddle: A Novel Hardware Based Matrix Multiplier Architecture, Seth Kiefer

Master's Theses

Matrix multiplication is a computational cornerstone in modern artificial intelligence and scientific computing, yet general-purpose processors struggle to perform these operations efficiently at scale. This thesis presents Griddle, a novel hardware architecture for matrix multiplication implemented on a Xilinx Artix-7 FPGA. Griddle focuses on flexibility and scalability by adopting a purely iterative approach that supports arbitrarily shaped input matrices without requiring padding or strict dimensional constraints. The architecture uses computational pipelines to execute a multiplication operation. Each pipe consists of a multiplication core and accumulation buffer that compute matrix products in parallel. The multiplication core contains a set of multiplier …

Reverse Engineering Bring Up And Profiling Of Multi-Fpga Systems, Henry A. Evans

Master's Theses

FPGAs have long been used for prototyping and verifying high-speed digital designs in industry and in academic research. As ASIC designs have grown in complexity and size, prototyping those designs on FPGAs has required multiple FPGAs that sometimes span multiple servers. Western Digital donated multiple FPGA-based systems to Cal Poly in 2023. These servers contain multiple high-end AMD FPGAs that are ideal for prototyping large high-speed digital designs, however the full documentation on how to use the servers and how the servers work was not provided. The servers did not come with any information on how to program the FPGAs, …

Assessment Of The Imx7ulp Heterogeneous Soc For Use In A Next Generation Student Cubesat Obc, Lorenzo A. Pedroza

Master's Theses

CubeSats represent a rapidly evolving platform for space research, industry, and education, demanding increasingly sophisticated onboard computing solutions that balance performance, fault tolerance, size, weight, and power constraints. Although the design of the Cal Poly's CubeSat Lab's (PolySat) current On-Board Computer (OBC) keeps up with many of these factors, the demands of modern workloads like fine attitude determination will start to outpace available compute. While the selection of a more capable processor to address this would have traditionally resulted in increased energy usage, modern system-on-chip (SoC) architectures offer novel ways to trade available compute for power savings on-the-fly. With this …

A Fault-Tolerant, Multi-Heap Dynamic Memory Allocator For Freertos, Garrett E. O'Neill

Master's Theses

The use of dynamic memory allocation presents a significant challenge for embedded systems, particularly in applications that require high reliability. The software controlling these systems needs to perform critical operations within strict timing constraints, and memory management plays a critical role in a system’s ability to meet these constraints. Dynamic memory allocation is inherently non-deterministic: if a task requests memory, it is impossible to predict how long it will take for the memory to be allocated. If a critical task were to rely on dynamically allocated memory, its execution could become stalled leading to a missed deadline and system failure. …

Are Cycles Of Neural Activity The Algorithm Of The Brain?, Edwin Omondi Onyango

Computer Science Senior Theses

We propose that precisely timed neural activity cycles can serve as structural primitives for memory and computation in a system that exhibits associative learning like the brain. Inspired by biologically grounded mechanisms such as calcium-dependent plasticity, spike-timing-dependent learning, and phase-sensitive excitability, we construct a spiking neural network model in which repeated temporal coincidences drive the formation of self-sustaining activity loops. These cycles, once formed, persist as dynamic memory traces: not stored as static weights, but as reverberating patterns that replay in time when these loops are restarted. We show that noise alone fails to induce stable structure, but even sparse, …

True-Bsg: A True Random Bit-Stream Generator For Fast And Efficient Stochastic Computing, Mehran Shoushtari Moghadam, M. Hassan Najafi

Faculty Scholarship

Stochastic computing (SC) leverages random bitstreams to perform arithmetic operations, offering ultra-lowcost, fault-tolerant, and highly parallelizable computations. The quality of these bit-streams is crucial for the accuracy and reliability of SC. This paper introduces TRUE-BSG, a novel true random bit-stream generator designed for fast and energyefficient SC. Unlike state-of-the-art (SoTA) pseudo-random and quasi-random bit-stream generators, TRUE-BSG utilizes a highquality true random number generator (TRNG), capable of producing random bits at a rate of 1 Gigabit per second. Our TRNG ensures high entropy and minimal correlation. TRUE-BSG shows comparable accuracy to software-based generators and better energy efficiency than SoTA bit-stream generators, …

Strategic Reactor Allocation For Deadlock-Free Execution, Jeevan Sivamohan

McKelvey School of Engineering Graduate Student Theses & Dissertations

As it becomes harder to increase the computation power of a single machine, we are turning towards parallel and distributed systems to extract additional performance by breaking down the problem into pieces and solving it simultaneously. While this provides a great opportunity for increased performance,e it comes with additional problems not present in the sequential approach. One such problem is deadlock. Deadlock is defined as the state in which program execution stalls because the system has run out of resources to manage and execute the program properly, or there exists some circular dependency in the data between parallel or distributed …

Generic Fpga Preprocessing For Astrophysics Instruments In Hls, Qinzhou Song

McKelvey School of Engineering Graduate Student Theses & Dissertations

FPGAs are widely deployed on high-energy astroparticle physics instruments to preprocess large volumes of streaming data from various sensors. Increasingly, these deployments are finding their way to space-borne instruments, where constraints on size, weight, and power (SWaP) require careful balancing of speed and resource utilization. Although telescope designs vary widely, they often share common preprocessing elements, including channel-level readout, pedestal subtraction, waveform integration, and zero suppression from front-end ADCs, as well as identification and centroiding of signal islands across groups of multiple channels. High-Level Synthesis (HLS) tools allow these designs to be expressed at a conceptual level, which automates a …

Unified Evaluation Of Real-World Iot-Based Federated Learning, Yi Gu

Master's Theses

Federated learning (FL) is a novel paradigm that enables the training of a global machine learning (ML) model across distributed devices by exchanging model parameters instead of raw data in the training process. Internet of Things (IoT) devices typically operate with limited resources, have weaker security protections, and are more vulnerable to potential thermal stress (TS). Current evaluations of FL are mostly conducted through simulations of multiple clients on a single device. However, there remains a gap in understanding how FL performs under TS in real-world, low-power IoT environments. Conformal prediction (CP) is an effective method for quantifying uncertainty in …