Technology and Innovation Commons^™

Semi-Supervised Deep Neural Network For Network Intrusion Detection, Mutahir Nadeem, Ochaun Marshall, Sarbjit Singh, Xing Fang, Xiaohong Yuan

KSU Proceedings on Cybersecurity Education, Research and Practice

Network security is of vital importance for corporations and institutions. In order to protect valuable computer systems, network data needs to be analyzed so that possible network intrusions can be detected. Supervised machine learning methods achieve high accuracy at classifying network data as normal or malicious, but they require the availability of fully labeled data. The recently developed ladder network, which combines neural networks with unsupervised learning, shows promise in achieving a high accuracy while only requiring a small number of labeled examples. We applied the ladder network to classifying network data using the Third International Knowledge Discovery and Data …

Planning And Implementing A Successful Nsa-Nsf Gencyber Summer Cyber Academy, Bryson R. Payne, Tamirat Abegaz, Keith Antonia

KSU Proceedings on Cybersecurity Education, Research and Practice

The GenCyber program is jointly sponsored by the National Security Agency (NSA) and the National Science Foundation (NSF) to help faculty and cybersecurity experts provide summer cybersecurity camp experiences for K-12 students and teachers. The main objective of the program is to attract, educate, and motivate a new generation of young men and women to help address the nationwide shortage of trained cybersecurity professionals. The curriculum is flexible and centers on ten cybersecurity first principles. Currently, GenCyber provides cyber camp options for three types of audiences: students, teachers, and a combination of both teachers and students. In 2016, over 120 …

User Privacy Suffers At The Hands Of Access Controls, Chad N. Hoye

KSU Proceedings on Cybersecurity Education, Research and Practice

With advancements in personal hand held devices, smaller more mobile computers, tablets, and the world’s population connected with social media the threat to the user’s privacy has been diminished. I will look at how access control policies have opened the proverbial door to user’s privacy being attacked and threatened. You will see examples of how users have to divulge personal information to get better service and even be monitored while at work to prevent intrusions in to the company.

Training Decrement In Security Awareness Training, Tianjian Zhang

KSU Proceedings on Cybersecurity Education, Research and Practice

This study determines if there is a decremental effect following IT security awareness training. In most security policy compliance literature, the main focus has been on policy design. Studies that address security awareness training are seldom theory driven and even fewer are empirically based. To fill this gap, we draw from the theory of vigilance decrement as well as forgetting curves in psychology, and propose a classroom experiment showing that participants' IT security awareness decreases over a 45-day period since the training at day one. The result adds to the security policy compliance literature and suggests that some policy violations …

Investigating The Influence Of Perceived Uncertainty On Protection Motivation: An Experimental Study, Ali Vedadi

KSU Proceedings on Cybersecurity Education, Research and Practice

IS users and organizations must take necessary measures to adequately cope with security threats. Considering the importance and prevalence of these issues and challenges, IS security research has extensively investigated a variety of factors that influence IS users’ security intentions/behaviors. In this regard, protection-motivated behaviors are primarily based on individuals’ personal cognitive evaluations and vigilance. In reality, however, many users reach security hygiene decisions through various non-rational and non-protection-motivated processes. Such users may not necessarily rely on their own cognitive appraisals and information processing, but proceed to make decisions without careful cognitive assessments of security threats and coping responses. One …

Towards A Development Of A Mobile Application Security Invasiveness Index, Sam Espana

KSU Proceedings on Cybersecurity Education, Research and Practice

The economic impact of Mobile IP, the standard that allows IP sessions to be maintained even when switching between different cellular towers or networks, has been staggering in terms of both scale and acceleration (Doherty, 2016). As voice communications transition to all-digital, all-IP networks such as 4G, there will be an increase in risk due to vulnerabilities, malware, and hacks that exist for PC-based systems and applications (Harwood, 2011). According to Gostev (2006), in June, 2004, a well-known Spanish virus collector known as VirusBuster, emailed the first known mobile phone virus to Kaspersky Lab, Moscow. Targeting the Symbian OS, the …

Teaching Security Of Internet Of Things In Using Raspberrypi, Oliver Nichols, Li Yang, Xiaohong Yuan

KSU Proceedings on Cybersecurity Education, Research and Practice

The Internet of Things (IoTs) is becoming a reality in today’s society. The IoTs can find its application in multiple domains including healthcare, critical infrastructure, transportation, and home and personal use. It is important to teach students importance and techniques that are essential in protecting IoTs. We design a series of hands-on labs in a smart home setting, which can exercise attack and protection of IoTs. Our hands-on labs use a Raspberry Pi and several diverse smart things that communicate through Z-Wave technology. Using this environment, students can operate a home automation system and learn security concepts by performing these …

Is Security Research Development: Implications For Future Researchers, Kane Smith, Chris Merritt

KSU Proceedings on Cybersecurity Education, Research and Practice

Security within the context of Information Systems has long been a concern for both academics and practitioners. For this reason an extensive body of research has been built around the need for protecting vital technical systems and the information contained within them. This stream of research, termed Information Systems Security (ISS), has evolved with technology over the last several decades in numerous different ways. This evolution can create a great deal of difficulty for researchers to identify under-represented areas of ISS research as well as ensure all relevant areas of concern are addressed. The purpose of this paper is threefold: …

Pedagogical Resources For Industrial Control Systems Security: Design, Implementation, Conveyance, And Evaluation, Guillermo A. Francia Iii, Greg Randall

KSU Proceedings on Cybersecurity Education, Research and Practice

Industrial Control Systems (ICS), which are pervasive in our nation’s critical infrastructures, are becoming increasingly at risk and vulnerable to internal and external threats. It is imperative that the future workforce be educated and trained on the security of such systems. However, it is equally important that careful and deliberate considerations must be exercised in designing and implementing the educational and training activities that pertain to ICS. To that end, we designed and implemented pedagogical materials and tools to facilitate the teaching and learning processes in the area of ICS security. In this paper, we describe those resources, the professional …

Towards An In-Depth Understanding Of Deep Packet Inspection Using A Suite Of Industrial Control Systems Protocol Packets, Guillermo A. Francia Iii

KSU Proceedings on Cybersecurity Education, Research and Practice

Industrial control systems (ICS) are increasingly at risk and vulnerable to internal and external threats. These systems are integral part of our nation’s critical infrastructures. Consequently, a successful cyberattack on one of these could present disastrous consequences to human life and property as well. It is imperative that cybersecurity professionals gain a good understanding of these systems particularly in the area of communication protocols. Traditional Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) are made to encapsulate some of these ICS protocols which may enable malicious payload to get through the network firewall and thus, gain entry into the …

Investigating Cyberbullying In Social Media: The Case Of Twitter, Xin Tian

KSU Proceedings on Cybersecurity Education, Research and Practice

Social media has profoundly changed how we interact with one another and the world around us. Recent research indicates that more and more people are using social media sites such as Facebook and Twitter for a significant portion of their day for various reasons such as making new friends, socializing with old friends, receiving information, and entertaining themselves. However, social media has also caused some problems. One of the problems is called social media cyberbullying which has developed over time as new social media technologies have developed over time. Social media cyberbullying has received increasing attention in recent years as …

Towards A Model Of Senior Citizens’ Motivation To Pursue Cybersecurity Awareness Training: Lecture-Based Vs. Video-Cases Training, Carlene G. Blackwood-Brown

KSU Proceedings on Cybersecurity Education, Research and Practice

Cyber-attacks on Internet users, and in particular senior citizens, who have limited awareness of cybersecurity, have caused billions of dollars in losses annually. To mitigate the effects of cyber-attacks, several researchers have recommended that the cybersecurity awareness levels of Internet users be increased. Cybersecurity awareness training programs are most effective when they involve training that focus on making users more aware so that they can identify cyber-attacks as well as mitigate the effects of the cyber-attacks when they use the Internet. However, it is unclear about what motivates Internet users to pursue cybersecurity awareness training so that they can identify …

Towards A Comparison Of Training Methodologies On Employee’S Cybersecurity Countermeasures Awareness And Skills In Traditional Vs. Socio-Technical Programs, Jodi Goode

KSU Proceedings on Cybersecurity Education, Research and Practice

Organizations, which have established an effective technical layer of security, continue to experience difficulties triggered by cyber threats. Ultimately, the cybersecurity posture of an organization depends on appropriate actions taken by employees whose naive cybersecurity practices have been found to represent 72% to 95% of cybersecurity threats and vulnerabilities. However, employees cannot be held responsible for cybersecurity practices if they are not provided the education and training to acquire skills which allow for identification of security threats along with the proper course of action. This work-in-progress study addresses the first phase of a larger project to empirically assess if there …

Code Metrics For Predicting Risk Levels Of Android Applications, Akond A. Rahman

KSU Proceedings on Cybersecurity Education, Research and Practice

Android applications pose security and privacy risks for end-users. Early prediction of risk levels that are associated with Android applications can help Android developers is releasing less risky applications to end-users. Researchers have showed how code metrics can be used as early predictors of failure prone software components. Whether or not code metrics can be used to predict risk levels of Android applications requires systematic exploration. The goal of this paper is to aid Android application developers in assessing the risk associated with developed Android applications by identifying code metrics that can be used as predictors to predict two levels …

Training Wheels: A New Approach To Teaching Mobile Device Security, Philip Menard, Jordan Shropshire

KSU Proceedings on Cybersecurity Education, Research and Practice

Despite massive investments in cyber security education, training, and awareness programs, most people retain unsafe mobile computing habits. They not only jeopardize their own data, but also risk the security of their associated organizations. It appears that conventional training programs are not ingraining sound security practices on trainees. This research questions the efficacy of legacy SETA frameworks and proposes a new cyber training tool for mobile devices. The tool is called Training Wheels. Training Wheels stands a number of cyber security training practices on their heads: instead of using punitive methods of reinforcement it provides rewards to encourage good behavior, …

Teaching Static Call Analysis To Detect Anomalous Software Behavior, Jordan Shropshire, Philip Menard

KSU Proceedings on Cybersecurity Education, Research and Practice

Malicious code detection is a critical part of any cyber security operation. Typically, the behavior of normal applications is modeled so that deviations from normal behavior can be identified. There are multiple approach to modeling good behavior but the most common approach is to observe applications’ system call activity. System calls are messages passed between user space applications and their underlying operating systems. The detection of irregular system call activity signals the presence of malicious software behavior. This method of malware-detection has been used successfully for almost two decades. Unfortunately, it can be difficult to cover this concept at the …

Holistic Approach: Paradigm Shift In The Research Agenda For Digitalisation Of Healthcare In Sub-Saharan Africa, Tadeusz K. Bara-Slupski

The African Journal of Information Systems

Despite significant resources employed in the digitalisation agenda in the healthcare sector in Sub-Saharan Africa, the transformative impact of information and communication technologies has not been realised. This article makes two contributions towards developing an understanding of this failure. First, it provides a review of a rich body of academic literature and practitioner accounts regarding barriers to digitalisation and organises them using an established framework. Second, recognising the continuing struggle that digitalisation presents, it proposes a paradigmatic shift in thinking about barriers to digitalisation and suggests the existence of a more fundamental barrier related to inappropriate incentives within the international …

Is Success Model For Evaluating Cloud Computing For Small Business Benefit: A Quantitative Study, Charles Kenneth Flack

Doctor of Business Administration Dissertations

Information system (IS) success has been extensively researched to frame key attributes of an information system or technology to understand its benefit to business. One definition of IS success is the adoption and extensive use of an information system (Robey & Zeller, 1978). In the present era of cloud computing, as in former IS eras, successful implementation is critical for achieving business success in all enterprise types. IS success is also described as a lagging multifaceted measure of technology effectiveness for a business. Early adopters of a new technology are a rich resource to determine benefits for later adopters, and …

Using A Virtual Computing Laboratory To Foster Collaborative Learning For Information Security And Information Technology Education, Abdullah Konak, Michael R. Bartolacci

Journal of Cybersecurity Education, Research and Practice

Virtual computer laboratories have been an excellent technological solution to the problem of providing students with hands-on experimentation in information technology fields such as information security in a cost effective and secure manner. A virtual computer laboratory was utilized in this work as a collaborative environment for student learning with the goal of measuring its effect on student learning and attitudes toward laboratory assignments. Experiments were carried out utilizing specially-designed computer-based laboratory activities that included student assessments and surveys upon their completion. The experiments involved both small groups and individual students completing their respective laboratory activities and subsequent assessments/surveys. …

Qualitative Data Mining And Sensitivity Analysis, Brian R. Kinard

Atlantic Marketing Association Proceedings

In today’s consumer centric environment, there is no shortage of outlets for consumers to express their level of satisfaction with a company, employee, product and/or service. For instance, websites such as Amazon, Rotten Tomatoes, TripAdvisor, Yelp, and Expedia allow customers the opportunity to provide feedback specific to a product, service, and/or organization. Such feedback is vitally important to business firms, as customer reviews are shown to be more trustworthy than descriptions that come direct from manufacturers. For instance, 73 percent of people trust online reviews and 63 percent of people actively seek out online reviews when making a purchase decision. …

Business Framing For Analytics, Beverly Wright

Atlantic Marketing Association Proceedings

Both the academic and business practitioner communities are faced with the challenges of discovery, innovation, and constant learning of their field, particularly within the marketing discipline, where content, processes, and even structure are dynamic in nature, with constantly evolving interests and focus. A solid research agenda with excellent analytics to address pertinent business questions is crucial for successfully expanding our understanding of the marketing function.

Cutting The Cord: An Examination Of Changing Tv Viewership, John Crawford

Atlantic Marketing Association Proceedings

On October 2, 1925, John Baird successfully transmitted the first television image. Since the early days of the new medium, television technology has constantly changed. Similarly, as the decades have passed the means for receiving television programming has also changed. Today, programs are delivered to millions of customers via cable connections and by satellite transmissions as those technologies were chosen by consumers to replace antennas as a means for receiving signals. The newer delivery mechanisms also provided many more channels to consumers compared to the handful of channels they could access in the antenna-only days.

The television programming delivery industry …

The Impact Of Social Media On The Sales Cycle And Prospecting, Mike Serkedakis, Gary L. Selden, R. Keith Tudor

Atlantic Marketing Association Proceedings

Sharing information and networking with business contacts are the crux of social media in sales. The use of social media platforms (e.g., LinkedIn, Facebook and Twitter) for all phases of the sales cycle is a relatively new technique, about 20 years since the arrival of the internet and associated technologies. Research to measure the impact of social media on the sales cycle time is not adequately addressed in the current literature. Our research highlights the impacts of social media on this important business function and examines individual performance aspects associated with the use of social media.

Students' Attitudes Towards Textbook Types: Are Students Really Ready For E-Textbooks?, Diane R. Edmondson, Cheryl Ward

Atlantic Marketing Association Proceedings

Textbook selection is just one of the many decisions a professor has to make when teaching a class. These selection decisions are sometimes made by the individual professor while other times it is made by committee or department. In many cases, students are not taken into consideration when making these decisions. However considering many professors complain that students do not buy or use the required textbook (Kingkade 2014, Paxhia 2011, Robinson 2011), maybe it is time to think about student’s attitudes and preferences before making textbook adoption decisions. Unfortunately there are only a few studies (e.g. Daniel and Woody 2013) …

The Dos And Don'ts Of Teaching Online: Practical Advice And Suggestions For Teaching Online, Anita Whiting

Atlantic Marketing Association Proceedings

Many colleges and universities are focusing heavily on online learning (Holzweiss, Joyner, Fuller, Henderson, & Young 2014). Over sixty-six percent of higher education institutions report that online learning is an important part of their long term strategy (Allen & Seaman, 2014). Over seven million students took online courses at higher education institutions in 2012 (Baran & Correia 2014).

Demand for online classes is growing. Students are expecting more online teaching and universities are requesting that more classes be taught online. According to Hart (2014), online teaching has become almost expected at most universities.

Updating A Research Tradition By Examining The Effect Of New High Tech Channels On Consumer Search And Integrated Marketing: A Framework For Teaching, Deborah Fain, Mary Long

Atlantic Marketing Association Proceedings

As computers became more powerful in the late 80s and early 90s, large marketers began to try to push what became known as customer relationship management . Specifically, they began to evaluate various channels and how consumers navigated among them when making purchase decisions. Most of the examples at that time were anecdotal, and obviously considered traditional channels, both retail and direct. These included retail, direct mail, print, television, radio, telephone, early email, and a small amount of Internet. The impact of the Internet on new ways consumers navigate among the channels to collect information and make purchase decisions was …

"You Can Count On It!" Using County Auditors' Data For Marketing Research Group Projects, Julie M. Szendrey

Atlantic Marketing Association Proceedings

Marketing educators who teach research-based courses face several challenges in the designing and teaching of analytical-based group projects. The “ideal” research project contains all the elements of the research process as shown in Figure 1 (Neuman 2009, Zeis, Shah, Regassa, & Ahmadian 2001). Fewer pedagogical limitations would exist, such as a limited 16-week semester and time constraints relating to selecting a topic, survey development and distribution, institutional review board approvals, and of course data collection to name a few.

College Students Use Social Networking Sites For Sharing With Friends, But Guess Who Else Is Looking?, Liz Alexander, Fred Mader, Deanna Mader

Atlantic Marketing Association Proceedings

Jobvite, a recruiting platform for the social web, reports from their annual 2012 survey of recruiters that 92% of U.S. companies are using social networking sites (SNS) for hiring purposes (Jobvit, 2012). Career Builder reported in 2009 that 45% of employers were using SNS to screen and research applicants (CareerBuilder, 2009). It is important that faculty and support staff working to place students, and the students themselves, understand the developments and practices in the use of social networking sites for job search and recruiting and the best methods, as well as detriments when marketing themselves. This study examines corporate recruiters’, …

Exploring Motivations And Usage Patterns Of Social Media Users, Anita Whiting

Atlantic Marketing Association Proceedings

Social media is an important aspect of marketing today. According to Hanna et al (2011), social media is not an optional part of marketing strategy but a mandatory component for most companies today. Social media usage is rapidly growing. Facebook, the largest global social network, has over 1.19 billion users with an annual growth rate of eighteen percent (Aichner & Jacob 2015).

Perceived Risk Reduction In E-Commerce Environments, C. Michael Powell, Chris Conca

Atlantic Marketing Association Proceedings

During the past three decades, the growth of e-commerce has presented marketers with many new arenas for research and application. Certainly e-commerce has become a significant portion of the world economy and in particular the consumer sector. As previous literature has consistently considered perceived risk as a major factor consumer purchase decisions, this research identifies several major components of consumer perceived risk (PR) and their normative implications in the e-commerce environment