Open Access. Powered by Scholars. Published by Universities.®
- Discipline
-
- Digital Communications and Networking (165)
- Physical Sciences and Mathematics (129)
- Computer Sciences (114)
- Electrical and Computer Engineering (65)
- Computer and Systems Architecture (57)
-
- Information Security (52)
- Hardware Systems (37)
- Aerospace Engineering (19)
- Other Computer Engineering (19)
- Systems and Communications (19)
- Data Storage Systems (18)
- Digital Circuits (18)
- Software Engineering (13)
- Electrical and Electronics (10)
- Signal Processing (10)
- Controls and Control Theory (8)
- Navigation, Guidance, Control and Dynamics (8)
- Physics (8)
- Robotics (8)
- Artificial Intelligence and Robotics (6)
- Optics (6)
- Theory and Algorithms (6)
- Power and Energy (5)
- VLSI and Circuits, Embedded and Hardware Systems (5)
- Aviation (4)
- Electronic Devices and Semiconductor Manufacturing (4)
- OS and Networks (4)
- Systems Architecture (4)
- Keyword
-
- #antcenter (43)
- Computer networks--Security measures (21)
- Wireless communication systems (17)
- Computer security (14)
- Parallel processing (Electronic computers) (14)
-
- Computer architecture (12)
- Center_CCR (11)
- VHDL (Computer hardware description language) (11)
- Computer network protocols (10)
- Algorithms (8)
- Cybersecurity (7)
- Machine learning (7)
- Pattern recognition systems (7)
- Computer simulation (6)
- Electronic data processing--Distributed processing (6)
- Field programmable gate arrays (6)
- Radar (6)
- Spread spectrum communications (6)
- Ad hoc networks (Computer networks) (5)
- Computer vision (5)
- Cryptography (5)
- Data protection (5)
- Wireless LANs (5)
- Computer network architectures (4)
- Data encryption (Computer science) (4)
- Data transmission systems (4)
- Digital communications (4)
- Image processing--Digital techniques (4)
- Local area networks (Computer networks) (4)
- Military communications (4)
- Publication Year
- Publication
- Publication Type
Articles 121 - 150 of 413
Full-Text Articles in Computer Engineering
Git As An Encrypted Distributed Version Control System, Russell G. Shirey
Git As An Encrypted Distributed Version Control System, Russell G. Shirey
Theses and Dissertations
This thesis develops and presents a secure Git implementation, Git Virtual Vault (GV2), for users of Git to work on sensitive projects with repositories located in unsecure distributed environments, such as in cloud computing. This scenario is common within the Department of Defense, as much work is of a sensitive nature. In order to provide security to Git, additional functionality is added for confidentiality and integrity protection. This thesis examines existing Git encryption implementations and baselines their performance compared to unencrypted Git. Real-world Git repositories are examined to characterize typical Git usage and determine if the existing Git encryption implementations …
Scalable System Design For Covert Mimo Communications, Jason R. Pennington
Scalable System Design For Covert Mimo Communications, Jason R. Pennington
Theses and Dissertations
In modern communication systems, bandwidth is a limited commodity. Bandwidth efficient systems are needed to meet the demands of the ever-increasing amount of data that users share. Of particular interest is the U.S. Military, where high-resolution pictures and video are used and shared. In these environments, covert communications are necessary while still providing high data rates. The promise of multi-antenna systems providing higher data rates has been shown on a small scale, but limitations in hardware prevent large systems from being implemented.
The Differential Vector Phase-Locked Loop For Global Navigation Satellite System Signal Tracking, James J. Brewer
The Differential Vector Phase-Locked Loop For Global Navigation Satellite System Signal Tracking, James J. Brewer
Theses and Dissertations
A novel differential vector phase-locked loop (DVPLL) is derived that takes GNSS code-phase and carrier-phase measurements from a base station and uses them to maintain an integer ambiguity resolved quality solution directly in the vector tracking loop of a rover receiver. The only state variables estimated and used to create the replica code and carrier signals from the base station measurements are three position and two clock states for a static test. Closing the individual loops solely through the navigation filter makes this a pure vector method. For short baselines, where differential atmospheric errors are small, the DVPLL can be …
Using Software-Based Decision Procedures To Control Instruction-Level Execution, William B. Kimball
Using Software-Based Decision Procedures To Control Instruction-Level Execution, William B. Kimball
AFIT Patents
An apparatus, method and program product are provided for securing a computer system. A digital signature of an application is checked, which is loaded into a memory of the computer system configured to contain memory pages. In response to finding a valid digital signature, memory pages containing instructions of the application are set as executable and memory pages other than those containing instructions of the application are set as non-executable. Instructions in executable memory pages are executed. Instructions in non-executable memory pages are prevented from being executed. A page fault is generated in response to an attempt to execute an …
Situational Awareness/Triage Tool For Use In A Chemical, Biological, Radiological Nuclear Explosive (Cbrne) Environment, John N. Scarlett, Heather L. Gallup, David A. Smith
Situational Awareness/Triage Tool For Use In A Chemical, Biological, Radiological Nuclear Explosive (Cbrne) Environment, John N. Scarlett, Heather L. Gallup, David A. Smith
AFIT Patents
A method of managing patient care and emergency response following a Chemical, Biological, Radiological, or Nuclear Explosive (CBRNE) attack and maintaining compliance with the Health Insurance Portability and Accountability Act (HIPAA). The method including identifying each patient with a unique patient identifier, the identifier based upon the geospatial location of the patient, the geospatial location including at least the latitude and longitude of the patient when first treated, the unique patient identifier being part of patient data. Providing a collection point of patient data to form a patient data database where in the patient location data may be used to …
Passive Mimo Radar Detection, Daniel E. Hack
Passive Mimo Radar Detection, Daniel E. Hack
Theses and Dissertations
Passive multiple-input multiple-output (MIMO) radar is a sensor network comprised of multiple distributed receivers that detects and localizes targets using the emissions from multiple non-cooperative radio frequency transmitters. This dissertation advances the theory of centralized passive MIMO radar (PMR) detection by proposing two novel generalized likelihood ratio test (GLRT) detectors. The first addresses detection in PMR networks without direct-path signals. The second addresses detection in PMR networks with direct-path signals. The probability distributions of both test statistics are investigated using recent results from random matrix theory. Equivalence is established between PMR networks without direct-path signals and passive source localization (PSL) …
Enhancing Electromagnetic Side-Channel Analysis In An Operational Environment, David P. Montminy
Enhancing Electromagnetic Side-Channel Analysis In An Operational Environment, David P. Montminy
Theses and Dissertations
Side-channel attacks exploit the unintentional emissions from cryptographic devices to determine the secret encryption key. This research identifies methods to make attacks demonstrated in an academic environment more operationally relevant. Algebraic cryptanalysis is used to reconcile redundant information extracted from side-channel attacks on the AES key schedule. A novel thresholding technique is used to select key byte guesses for a satisfiability solver resulting in a 97.5% success rate despite failing for 100% of attacks using standard methods. Two techniques are developed to compensate for differences in emissions from training and test devices dramatically improving the effectiveness of cross device template …
Radio Frequency Based Programmable Logic Controller Anomaly Detection, Samuel J. Stone
Radio Frequency Based Programmable Logic Controller Anomaly Detection, Samuel J. Stone
Theses and Dissertations
The research goal involved developing improved methods for securing Programmable Logic Controller (PLC) devices against unauthorized entry and mitigating the risk of Supervisory Control and Data Acquisition (SCADA) attack by detecting malicious software and/or trojan hardware. A Correlation Based Anomaly Detection (CBAD) process was developed to enable 1) software anomaly detection discriminating between various operating conditions to detect malfunctioning or malicious software, firmware, etc., and 2) hardware component discrimination discriminating between various hardware components to detect malfunctioning or counterfeit, trojan, etc., components.
Why A 15 Minute Biological Detection System?, Doug Lewis
Why A 15 Minute Biological Detection System?, Doug Lewis
Faculty Publications
The biological defense community needs to take a hard look at the requirements and assumptions we use to develop our biological sensors. Today the point sensors currently deployed or in development can offer at best “near real time” detection. This translates into approximately 10-20 minutes from the time an agent passes over the device until an alarm is issued. Why are we working to develop detection hardware which in reality contributes little to no advantage to an operational environment? Should the DOD resist fielding (in the near term) “near real time” detection systems, and instead field slower (but much more …
Evaluation Of Cyber Sensors For Enhancing Situational Awareness In The Ics Environment, Jeremy R. Otis
Evaluation Of Cyber Sensors For Enhancing Situational Awareness In The Ics Environment, Jeremy R. Otis
Theses and Dissertations
Industrial Control Systems (ICS) monitor and control operations associated with the national critical infrastructure (e.g., electric power grid, oil and gas pipelines and water treatment facilities). These systems rely on technologies and architectures that were designed for system reliability and availability. Security associated with ICS was never an inherent concern, primarily due to the protections afforded by network isolation. However, a trend in ICS operations is to migrate to commercial networks via TCP/IP in order to leverage commodity benefits and cost savings. As a result, system vulnerabilities are now exposed to the online community. Indeed, recent research has demonstrated that …
Classification Of Encrypted Web Traffic Using Machine Learning Algorithms, William C. Barto
Classification Of Encrypted Web Traffic Using Machine Learning Algorithms, William C. Barto
Theses and Dissertations
The increasing usage of web services and encrypted network communication makes the network analysis of encrypted web traffic of utmost importance. This research evaluates the feasibility of using ML algorithms to classify web services within encrypted TLS flows. The ML algorithms are compared primarily based on classification accuracy. The runtimes of the classifiers are also considered, as classifiers must be able determine labels quickly in order to be used in near realtime network protection devices. Five ML algorithms are initially considered when analyzing only the first 12 packets: Naive Bayes, NBTree, LibSVM, J4.8, and AdaBoost+J4.8. AdaBoost+J4.8 and J4.8 produce the …
Applied Hypergame Theory For Network Defense, Alan S. Gibson
Applied Hypergame Theory For Network Defense, Alan S. Gibson
Theses and Dissertations
Cyber operations are the most important aspect of military conflicts in the 21st century, but unfortunately they are also among the least understood. The continual battle for network dominance between attackers and defenders is considered to be a complex game. Hypergame theory is an extension of game theory that addresses the kind of games where misperception exists, as is often the case in military engagements. Hypergame theory, like game theory, uses a game model to determine strategy selection, but goes beyond game theory by examining subgames that exist within the full game. The inclusion of misperception and misinformation in the …
Dynamic Network Topologies, Heather A. Lingg
Dynamic Network Topologies, Heather A. Lingg
Theses and Dissertations
Demand for effective network defense capabilities continues to increase as cyber attacks occur more and more frequently and gain more and more prominence in the media. Current security practices stop after data encryption and network address filtering. Security at the lowest level of network infrastructure allows for greater control of how the network traffic flows around the network. This research details two methods for extending security practices to the physical layer of a network by modifying the network infrastructure. The first method adapts the Advanced Encryption Standard while the second method uses a Steiner tree. After the network connections are …
Cognitive Augmentation For Network Defense, James E. Emge
Cognitive Augmentation For Network Defense, James E. Emge
Theses and Dissertations
Traditionally, when a task is considered for automation it is a binary decision, either the task was completely automated or it remains manual. LOA is a departure from the tradition use of automation in cyber defense. When a task is automated, it removes the human administrator from the performance of the task, compromising their SA of the state of the network. When the administrator loses SA of the network performance and its current state, failure recovery time becomes much longer. This is because the administrators must orient themselves to the current state of the network at the time of failure …
Rootkit Detection Using A Cross-View Clean Boot Method, Bridget N. Flatley
Rootkit Detection Using A Cross-View Clean Boot Method, Bridget N. Flatley
Theses and Dissertations
In cyberspace, attackers commonly infect computer systems with malware to gain capabilities such as remote access, keylogging, and stealth. Many malware samples include rootkit functionality to hide attacker activities on the target system. After detection, users can remove the rootkit and associated malware from the system with commercial tools. This research describes, implements, and evaluates a clean boot method using two partitions to detect rootkits on a system. One partition is potentially infected with a rootkit while the other is clean. The method obtains directory listings of the potentially infected operating system from each partition and compares the lists to …
Examining Application Components To Reveal Android Malware, John B. Guptill
Examining Application Components To Reveal Android Malware, John B. Guptill
Theses and Dissertations
Smartphones are becoming ubiquitous in everyday life and malware is exploiting these devices. Therefore, a means to identify the threats of malicious applications is necessary. This paper presents a method to classify and analyze Android malware through application component analysis. The experiment parses select portions from Android packages to collect features using byte sequences and permissions of the application. Multiple machine learning algorithms classify the samples of malware based on these features. The experiment utilizes instance based learner, naive Bayes, decision trees, sequential minimal optimization, boosted naive Bayes, and boosted decision trees to identify the best components that reveal malware …
Development Of A Response Planner Using The Uct Algorithm For Cyber Defense, Michael P. Knight
Development Of A Response Planner Using The Uct Algorithm For Cyber Defense, Michael P. Knight
Theses and Dissertations
A need for a quick response to cyber attacks is a prevalent problem for computer network operators today. There is a small window to respond to a cyber attack when it occurs to prevent significant damage to a computer network. Automated response planners offer one solution to resolve this issue. This work presents Network Defense Planner System (NDPS), a planner dependent on the effectiveness of the detection of the cyber attack. This research first explores making classification of network attacks faster for real-time detection, the basic function Intrusion Detection System (IDS) provides. After identifying the type of attack, learning the …
Evaluating The Effectiveness Of Ip Hopping Via An Address Routing Gateway, Ryan A . Morehart
Evaluating The Effectiveness Of Ip Hopping Via An Address Routing Gateway, Ryan A . Morehart
Theses and Dissertations
This thesis explores the viability of using Internet Protocol (IP) address hopping in front of a network as a defensive measure. This research presents a custom gateway-based IP hopping solution called Address Routing Gateway (ARG) that acts as a transparent IP address hopping gateway. This thesis tests the overall stability of ARG, the accuracy of its classifications, the maximum throughput it can support, and the maximum rate at which it can change IPs and still communicate reliably. This research is accomplished on a physical test network with nodes representing the types of hosts found on a typical, corporate-style network. Direct …
Modeling Cyber Situational Awareness Through Data Fusion, Evan L. Raulerson
Modeling Cyber Situational Awareness Through Data Fusion, Evan L. Raulerson
Theses and Dissertations
Cyber attacks are compromising networks faster than administrators can respond. Network defenders are unable to become oriented with these attacks, determine the potential impacts, and assess the damages in a timely manner. Since the observations of network sensors are normally disjointed, analysis of the data is overwhelming and time is not spent efficiently. Automation in defending cyber networks requires a level of reasoning for adequate response. Current automated systems are mostly limited to scripted responses. Better defense tools are required. This research develops a framework that aggregates data from heterogeneous network sensors. The collected data is correlated into a single …
Computer Based Behavioral Biometric Authentication Via Multi-Modal Fusion, Kyle O. Bailey
Computer Based Behavioral Biometric Authentication Via Multi-Modal Fusion, Kyle O. Bailey
Theses and Dissertations
Biometric computer authentication has an advantage over password and access card authentication in that it is based on something you are, which is not easily copied or stolen. One way of performing biometric computer authentication is to use behavioral tendencies associated with how a user interacts with the computer. However, behavioral biometric authentication accuracy rates are much larger then more traditional authentication methods. This thesis presents a behavioral biometric system that fuses user data from keyboard, mouse, and Graphical User Interface (GUI) interactions. Combining the modalities results in a more accurate authentication decision based on a broader view of the …
Learning Enterprise Malware Triage From Automatic Dynamic Analysis, Jonathan S. Bristow
Learning Enterprise Malware Triage From Automatic Dynamic Analysis, Jonathan S. Bristow
Theses and Dissertations
Adversaries employ malware against victims of cyber espionage with the intent of gaining unauthorized access to information. To that end, malware authors intentionally attempt to evade defensive countermeasures based on static methods. This thesis analyzes a dynamic analysis methodology for malware triage that applies at the enterprise scale. This study captures behavior reports from 64,987 samples of malware randomly selected from a large collection and 25,591 clean executable files from operating system install media. Function call information in sequences of behavior generate feature vectors from behavior reports from the les. The results of 64 experiment combinations indicate that using more …
Rf Emitter Tracking And Intent Assessment, Benjamin J. Kuhar
Rf Emitter Tracking And Intent Assessment, Benjamin J. Kuhar
Theses and Dissertations
Current research in employing pattern recognition techniques in a wireless sensor network (WSN) to detect anomalous or suspicious behavior is limited. The purpose of this research was to determine the feasibility of an accurate tracking and intent assessment system of unknown or foreign radio frequency (RF) emitters in close proximity to and within military installations as a method for physical security. 22 position tracks were collected using a hand-held Global Positioning System (GPS) unit and a training data set from five different features was generated for each position track. Each collected position track was individually classified as suspicious or non-suspicious …
A Multi Agent System For Flow-Based Intrusion Detection, David A . Ryan
A Multi Agent System For Flow-Based Intrusion Detection, David A . Ryan
Theses and Dissertations
The detection and elimination of threats to cyber security is essential for system functionality, protection of valuable information, and preventing costly destruction of assets. This thesis presents a Mobile Multi-Agent Flow-Based IDS called MFIREv3 that provides network anomaly detection of intrusions and automated defense. This version of the MFIRE system includes the development and testing of a Multi-Objective Evolutionary Algorithm (MOEA) for feature selection that provides agents with the optimal set of features for classifying the state of the network. Feature selection provides separable data points for the selected attacks: Worm, Distributed Denial of Service, Man-in-the-Middle, Scan, and Trojan. This …
Characterization And Dynamic Analysis Of Long-Cavity Multi-Section Gain-Levered Quantum-Dot Lasers, John R. Schmidt
Characterization And Dynamic Analysis Of Long-Cavity Multi-Section Gain-Levered Quantum-Dot Lasers, John R. Schmidt
Theses and Dissertations
This research investigates the impact of different device architectures on the frequency response of long-cavity multi-section quantum-dot lasers. This work focused on a novel 8.3-mm multi-section quantum-dot device which possessed the flexibility to be configured either as a single- or multi-section device having gain-to-modulation section ratios of 14:2 and 15:1. The long-cavity device design facilitated the testing of increased gain-to-modulation section length ratios previously unexplored in the context of the gain-lever effect. The investigation of the gain-lever effect showed improvements to both the modulation efficiency and modulation bandwidth of the device under test. The modulation efficiency and modulation bandwidth were …
Network Intrusion Dataset Assessment, David J. Weller-Fahy
Network Intrusion Dataset Assessment, David J. Weller-Fahy
Theses and Dissertations
Research into classification using Anomaly Detection (AD) within the field of Network Intrusion Detection (NID), or Network Intrusion Anomaly Detection (NIAD), is common, but operational use of the classifiers discovered by research is not. One reason for the lack of operational use is most published testing of AD methods uses artificial datasets: making it difficult to determine how well published results apply to other datasets and the networks they represent. This research develops a method to predict the accuracy of an AD-based classifier when applied to a new dataset, based on the difference between an already classified dataset and the …
Airborne Network Data Availability Using Peer To Peer Database Replication On A Distributed Hash Table, Trevor J. Vranicar
Airborne Network Data Availability Using Peer To Peer Database Replication On A Distributed Hash Table, Trevor J. Vranicar
Theses and Dissertations
The concept of distributing one complex task to several smaller, simpler Unmanned Aerial Vehicles (UAVs) as opposed to one complex UAV is the way of the future for a vast number of surveillance and data collection tasks. One objective for this type of application is to be able to maintain an operational picture of the overall environment. Due to high bandwidth costs, centralizing all data may not be possible, necessitating a distributed storage system such as mobile Distributed Hash Table (DHT). A difficulty with this maintenance is that for an Airborne Network (AN), nodes are vehicles and travel at high …
File Carving And Malware Identification Algorithms Applied To Firmware Reverse Engineering, Karl A . Sickendick
File Carving And Malware Identification Algorithms Applied To Firmware Reverse Engineering, Karl A . Sickendick
Theses and Dissertations
Modern society depends on critical infrastructure (CI) managed by Programmable Logic Controllers (PLCs). PLCs depend on firmware, though firmware security vulnerabilities and contents remain largely unexplored. Attackers are acquiring the knowledge required to construct and install malicious firmware on CI. To the defender, firmware reverse engineering is a critical, but tedious, process. This thesis applies machine learning algorithms, from the le carving and malware identification fields, to firmware reverse engineering. It characterizes the algorithms' performance. This research describes and characterizes a process to speed and simplify PLC firmware analysis. The system partitions binary firmwares into segments, labels each segment with …
Cloud Computing Trace Characterization And Synthetic Workload Generation, Salvatore Capra
Cloud Computing Trace Characterization And Synthetic Workload Generation, Salvatore Capra
Theses and Dissertations
This thesis researches cloud computing workload characteristics and synthetic workload generation. A heuristic presented in the work guides the process of workload trace characterization and synthetic workload generation. Analysis of a cloud trace provides insight into client request behaviors and statistical parameters. A versatile workload generation tool creates client connections, controls request rates, defines number of jobs, produces tasks within each job, and manages task durations. The test system consists of multiple clients creating workloads and a server receiving request, all contained within a virtual machine environment. Statistical analysis verifies the synthetic workload experimental results are consistent with real workload …
Using Rf-Dna Fingerprints To Discriminate Zigbee Devices In An Operational Environment, Clay K. Dubendorfer
Using Rf-Dna Fingerprints To Discriminate Zigbee Devices In An Operational Environment, Clay K. Dubendorfer
Theses and Dissertations
This research was performed to expand AFIT's Radio Frequency Distinct Native Attribute (RF-DNA) fingerprinting process to support IEEE 802.15.4 ZigBee communication network applications. Current ZigBee bit-level security measures include use of network keys and MAC lists which can be subverted through interception and spoofing using open-source hacking tools. This work addresses device discrimination using Physical (PHY) waveform alternatives to augment existing bit-level security mechanisms. ZigBee network vulnerability to outsider threats was assessed using Receiver Operating Characteristic (ROC) curves to characterize both Authorized Device ID Verification performance (granting network access to authorized users presenting true bit-level credentials) and Rogue Device Rejection …
Mobile Network Defense Interface For Cyber Defense And Situational Awareness, James C. Hannan
Mobile Network Defense Interface For Cyber Defense And Situational Awareness, James C. Hannan
Theses and Dissertations
Today's computer networks are under constant attack. In order to deal with this constant threat, network administrators rely on intrusion detection and prevention services (IDS) (IPS). Most IDS and IPS implement static rule sets to automatically alert administrators and resolve intrusions. Network administrators face a difficult challenge, identifying attacks against a vast number of benign network transactions. Also after a threat is identified making even the smallest policy change to the security software potentially has far-reaching and unanticipated consequences. Finally, because the administrator is primarily responding to alerts they may lose situational awareness of the network. During this research a …