Computer Engineering Commons^™

Comparative Analysis Of Secure Messaging Systems: Peer-To-Peer Vs Client-Server Architecture, Maddie Luth

Theses/Capstones/Creative Projects

This research serves as an honors extension of a capstone project sponsored by Northrop Grumman, focused on the development of a secure messaging application, LockTalk. The study evaluates the performance of peer-to-peer and client-server network architectures within a messaging system. It compares these architectures based on key factors such as security, privacy, and reliability. The results are used to determine the most suitable architecture for implementation in LockTalk, with particular emphasis on protecting sensitive communications. This work highlights the trade-offs involved in selecting a network architecture and provides guidance for developing secure and efficient messaging platforms.

Beyond Permissions: A Privacy And Security Analysis Of Sensor And Network Activity On Xr Devices Using Xrmonitor, Gayatri Sravya Siripurapu

Computer Science and Engineering Theses - Archive

Standalone virtual reality headsets integrate multiple sensors and cameras whose runtime behavior is not transparently documented, creating potential privacy and security risks that are difficult to audit using existing tools. The relationship between software feature activation and the underlying hardware engaged at runtime remains opaque, limiting the ability of users and researchers to assess what data is being collected and when.

This thesis presents XRMonitor, a unified framework for monitoring and analyzing sensor activation behavior and network traffic on Meta Quest devices. The framework is motivated by the lack of transparency in how standalone XR devices engage their hardware sensors …

Confidential, Attestable, And Efficient Inter-Cvm Communication With Arm Cca, Sina Abdollahi, Amir Al Sadi, Marios Kogias, Hamed Haddadi, David Kotz

Other Faculty Materials

Confidential Virtual Machines (CVMs) are increasingly adopted to protect sensitive workloads from privileged adversaries such as the hypervisor. While they provide strong isolation guarantees, existing CVM architectures lack first-class mechanisms for inter-CVM data sharing due to their disjoint memory model, making inter-CVM data exchange a performance bottleneck in compartmentalized or collaborative multi-CVM systems. Under this model, a CVM's accessible memory is either shared with the hypervisor or protected from both the hypervisor and all other CVMs. This design simplifies reasoning about memory ownership; however, it fundamentally precludes plaintext data sharing between CVMs because all inter-CVM communication must pass through hypervisor-accessible …

Securing Connected And Autonomous Vehicles, Owana Marzia Moushi

Dissertations and Doctoral Documents, University of Nebraska-Lincoln, 2023–

A vehicular network is susceptible to various security flaws and attacks. Cryptographic techniques are used in vehicular networks but these alone cannot provide proper security to the network. Identifying various types of attacks is necessary to secure vehicular communication networks. In this dissertation, we focused on detecting various insider attacks in vehicular networks to enhance the security of the network.

Our first contribution in this dissertation is the detection of both binary and multi-class data replay and data replay Sybil attacks in vehicular networks. A publicly available dataset, VeReMi-Extension is used to detect these attacks. This dataset has been reformulated …

Towards Automated And Explainable Insider Threat Response In Electronic Health Records: A Role-Aware Machine Learning Framework, Luca Lippi Ornstil

Master's Theses

Healthcare remains a prime target for cyberattacks, with insider misuse and credential compromise posing major risks to Electronic Health Records (EHRs). This thesis introduces a role-aware, explainable anomaly detection and response framework integrated with OpenEMR to address post-authentication threats. Four models—Local Outlier Factor (LOF), Isolation Forest, Autoencoder, and Graph Neural Network (GNN)—detect behavioral deviations across temporal, device, and role-based features, with LOF serving as the primary runtime detector. A configurable policy engine maps anomaly severity to proportional actions, from email alerts to read-only restrictions or account suspension, all reversible and auditable. Evaluation on real EHR logs shows the system’s operational …

Design Of An Integrated Lightweight Cryptographic Algorithm For Device Level Security And Fraternal Cryptographic Algorithm For Communication Security In Medical Cyber Physical Systems, Vimala Devi P

Theses and Dissertations

Healthcare involves detecting symptoms, diagnosing conditions and giving treatment to patients. It is one of the fundamental human rights, and it might be difficult to provide healthcare to those with chronic illnesses, elderly people with disabilities and those under distant observation. The World Health Organisation (WHO) states that Cardio Vascular Disease (CVD) is the leading cause of death worldwide.

According to the prediction, CVD-related causes such as heart attacks and strokes, could result in 23.3 million deaths by 2030. In addition, the number of people with diabetes will reach 246 million; thereby, the prevalence of CVD patients and diabetics will …

Visor-Zt: A Visibility, Simulation, And Operational Resilience Framework For Zero Trust Security In Ros 2, Noah Tinker

All Theses

Robotic systems are becoming more and more prevalent in modern society, with Robot Operating System 2 (ROS 2) being the dominant operating system for these implementations. Its popularity can be attributed to its design, which is purpose-built for distributed systems and asynchronous communications. However, ROS 2 security is static and therefore less capable of responding to contemporary threats and network behavior. This becomes a greater issue when considering its applications in the military and defense sectors, where security is of the highest importance. In recent years, the U.S. Department of Defense (DoD) has implemented zero trust (ZT) security based on …

From Industrial Automation To Intelligent Automation: The Impact Of Iiot On Process Control - A Review?, Ali S. Allahloh, Mohammad Sarfraz, Duraid Y. Mohammed, Nadeen Khaleel Ibrahim, Hayder Hussein Thary

Iraqi Journal for Computer Science and Mathematics

The Industrial Internet of Things (IIoT) is reshaping process control, turning torrents of plant data into near-instant insight. Field evidence already shows unplanned-downtime cuts of 55%, maintenance-budget savings of 40%, and gains in overall-equipment-effectiveness of roughly 15%; nevertheless, fewer than 30% of facilities have pushed beyond pilot scale to full, always-on predictive maintenance. To clarify why, this review screens 312 Scopus records published between 2010 and 2023, then subjects 62 peer-reviewed studies and a broad set of industry reports to deep content analysis, bibliometric mapping, and thematic clustering.The results reveal four tightly connected research fronts—IIoT/Industry 4.0 core technologies, classical process-control …

Tkbe : Two Key Broadcast Encryption For The Iot, Rachit Parikh

Master’s Dissertations

The growing usage of the Internet of Things (IoT) has made it necessary to ensure

the security of these interconnected devices. Key management becomes particularly

challenging when devices are not always online due to resource constraints or business

decisions. Moreover, the IoT infrastructure typically relies on the publish-subscribe

model for communication, which raises additional security considerations since the

message broker becomes a central point of attack. Existing solutions with end-toend

encryption from publisher to subscriber are either computationally expensive for

resource constrained devices or compromise on the decoupling in publish/subscribe

systems. This thesis tackles the problem of efficient key management …

Retracted: Navigating The Complexities And Artificial Intelligence Of Internet Of Things Security Claims, Tamara Saad Mohamed, Saad Mohammed Khalifah

Iraqi Journal for Computer Science and Mathematics

The term ``Internet of Things'' (IoT) describes a system that allows everyday objects to communicate with one another and with controlled systems, servers, and other linked devices through a variety of connectivity constructions by means of embedded software, sensor technology, electronics, and connections. Data from the Internet of Things (IoT) will be sent to the servers over the internet from a variety of sensors, nods, and collectors. Governments, medical facilities, consumers, and corporations all make use of IoT devices. approximately, More than 65 billion Internet of Things devices are expected to be in operation by 2024. The proliferation of IoT …

Integrating Blockchain Technology Into Telemedicine: A Framework For Enhancing Data Privacy And Security, Harsha Sammangi, Aditya Jagatha, Jun Liu

Research & Publications

This paper presents a blockchain-based framework designed to enhance data privacy, integrity, and security in telemedicine systems. The proposed architecture employs distributed ledger technology to ensure transparency, traceability, and immutability of patient data exchanges among healthcare providers. Smart contracts automate access permissions and auditing processes, reducing the risks of unauthorized data sharing. The study evaluates the framework’s performance in secure data handling, highlighting blockchain’s role in fostering patient trust and resilience against cyberattacks in remote healthcare environments.

Performance Evaluation Of Managed Switch Configurations For Secure And Efficient Plc-Based Industrial Automation Networks, Ahmed Salama

All Graduate Theses, Dissertations, and Other Capstone Projects

This thesis explores how managed switches can improve network performance and security in PLC-based industrial systems. Using simulations in GNS3 and Cisco Packet Tracer, and packet analysis via Wireshark, the study compares unmanaged and managed switch configurations. Redundancy protocols, particularly STP and RSTP, are evaluated under failure scenarios. Results show that RSTP offers faster recovery times, making it more suitable for time-sensitive environments. Additionally, managed switch features like VLANs, port security, and MAC filtering significantly reduce vulnerabilities and improve network segmentation. The findings highlight the importance of incorporating both cybersecurity and redundancy in industrial network design as systems move toward …

Silent Sabotage: Identifying And Preventing Cyber Attacks From Inside Actors, Autumn Groen

Williams Honors College, Honors Research Projects

Cyber-attacks are becoming increasingly common and damaging as technology advances each year. Many businesses cannot afford the latest security technologies, and even with the highest security measures, there can still be room for employee error or insider threats that are not taken into account. It is crucial to keep these factors in mind when securing a business network of any size or financial standing.This project will aim to simulate a business environment by first building a small network with three routers and a switch, and implementing some of the common best practices for network hardening from credible organizations like NIST …

Proxy Cap - La Lua Protector, Swift Sheng

Master's Projects

Inspired by the object capability model and sandbox, this project, Proxy Cap, introduces a new Lua access control model that improves the language’s security without sacrificing usability. Object capability is an unconventional but powerful security model. The security model closely observes the principle of least authority. Ambient authority, the omnipresent global environment, does not exist in the object capability computation world, and no resource is accessible unless explicitly assigned. Only connectivity begets connectivity. Lua is an extensible and high-performing scripting language based on ANSI C. The language is popular in many fields but faces security challenges. Lua has a non-traditional …

Bonsai Merkle Tree Streams: Bulk Memory Verification Unit For Trusted Program Verification System, Richard J. Rios

Master's Theses

Today, all modern computing systems are undoubtedly vulnerable to numerous types of attacks that could be targeted toward any layer of the system from dedicated hardware to highly abstracted software. Unfortunately, many devices and systems naturally contain inadequately protected components or software modules that un- dermine their security as a whole. Additionally, security is heavily variable system to system, and has a huge dependence on adequate implementation and ongoing support from device and software manufacturers. To address these various security issues in a very general way, TrustGuard, a containment security system utilizing an external device called the Sentry that would …

Hardware Control Unit For Trusted Program Verification System, Jake Owen Alt

Master's Theses

Trust in the underlying hardware is the foundational step towards trusting the correctness and integrity of a software application. However, verifying that today's extremely complex processors work exactly as intended has not been feasible, as evidenced by several recent hardware bugs. Trustworthy, formally verified processors currently forego intricate performance enhancements such as out-of-order execution, hampering them substantially versus their less secure counterparts.

The Containment Architecture with Verified Output (CAVO) system solves this problem by isolating the host system and requiring the result of each instruction to be validated by a small, trusted hardware module called the Sentry. Any transmissions to …

The Next Strike: Pioneering Forward-Thinking Attack Techniques With Rowhammer In Dram Technologies, Nakul Kochar

Theses

In the realm of DRAM technologies this study investigates RowHammer vulnerabilities in DDR4 DRAM memory across various manufacturers, employing advanced multi-sided fault injection techniques to impose attack strategies directly on physical memory rows. Our novel approach, diverging from traditional victim-focused methods, involves strategically allocating virtual memory rows to their physical counterparts for more potent attacks. These attacks, exploiting the inherent weaknesses in DRAM design, are capable of inducing bit flips in a controlled manner to undermine system integrity. We employed a strategy that compromised system integrity through a nuanced approach of targeting rows situated at a distance of two rows …

Computer Security Lab Experiment, Orit D. Gruber, Herbert Schanker

Open Educational Resources

This is a basic experiment for all students of all majors to explore Computer Security. Each instruction included in this experiment is conducted online via a Web Browser; Firefox or Chrome is recommended. Software does not need to be downloaded nor installed. The step by step instructions in this experiment include interactive questions and observations which are then included in the (student's) final report.

Machine Learning Security For Tactical Operations, Dr. Denaria Fields, Shakiya A. Friend, Andrew Hermansen, Dr. Tugba Erpek, Dr. Yalin E. Sagduyu

Military Cyber Affairs

Deep learning finds rich applications in the tactical domain by learning from diverse data sources and performing difficult tasks to support mission-critical applications. However, deep learning models are susceptible to various attacks and exploits. In this paper, we first discuss application areas of deep learning in the tactical domain. Next, we present adversarial machine learning as an emerging attack vector and discuss the impact of adversarial attacks on the deep learning performance. Finally, we discuss potential defense methods that can be applied against these attacks.

Development And Simulation Of A Damage Assessment And Recovery Method For Critical Database Systems, Anthony Pham

Computer Science and Computer Engineering Undergraduate Honors Theses

With how much the world relies on technology and the critical database infrastructure that supports it, the infrastructures require efficient methods to detect and resolve suspicious database transactions, whether malicious or not. This paper focuses on an algorithm that detects and resolves malicious transactions in a database. The process begins with identifying suspicious transactions based on common patterns. When a transaction is flagged, the algorithm segments groups of suspicious transactions in separate log files, separating them for easy access. Within these segments, any dependent transactions that use data affected by the suspicious transactions will be stored there. After the transaction …

Developing Resilient Defense Strategies Against Pheromone-Based Attacks In Foraging Robot Swarms, Ryan A. Luna

Theses and Dissertations

This thesis delves into the security of stochastic pheromone-based foraging algorithms within swarm robotic systems, a subset of foraging algorithms distinguished by their reliance on probabilistic decision-making mechanisms inspired by the natural world. Such algorithms face vulnerabilities in stigmergic communication that threaten to disrupt swarm operations. This research investigates these vulnerabilities, presenting two distinct contributions.

The first contribution examines the implementation of quarantine strategies as a defensive measure to isolate and mitigate the impact of fake resource attacks. By simulating these attacks, this study quantitatively assesses their detrimental effects on swarm efficiency and explores the efficacy …

Investigating Factors Influencing Blockchain Adoption In Saudi Healthcare Data Management, Noura Mohammad Alkhalifah

Theses and Dissertations

Blockchain technology can potentially address security and privacy issues concerning the collection, storage, and sharing of healthcare data. However, its adoption within the healthcare sector is nascent in Saudi Arabia. This underutilization prompted our investigation into the determinants influencing blockchain adoption, intending to fully empower the Saudi healthcare sector to leverage blockchain capabilities. To achieve this, an extensive literature review was conducted to identify the pivotal factors encompassing technology, organization, and environment (TOE) that affect the successful implementation of blockchain technologies in managing healthcare data within the Saudi context. Utilizing the TOE framework, this study formulated three hypotheses concerning the …

A Systematic Survey On 5g And 6g Security Considerations, Challenges, Trends, And Research Areas, Paul Scalise, Matthew Boeding, Hamid Sharif, Joseph Delloiacovo, John Reed

Department of Electrical and Computer Engineering: Faculty Publications

With the rapid rollout and growing adoption of 3GPP 5thGeneration (5G) cellular services, including in critical infrastructure sectors, it is important to review security mechanisms, risks, and potential vulnerabilities within this vital technology. Numerous security capabilities need to work together to ensure and maintain a sufficiently secure 5G environment that places user privacy and security at the forefront. Confidentiality, integrity, and availability are all pillars of a privacy and security framework that define major aspects of 5G operations. They are incorporated and considered in the design of the 5G standard by the 3rd Generation Partnership Project (3GPP) with the goal …

Addressing Challenges In Utilizing Gpus For Accelerating Privacy-Preserving Computation, Ardhi Wiratama Baskara Yudha

Graduate Thesis and Dissertation 2023-2024

Cloud computing increasingly handles confidential data, like private inference and query databases. Two strategies are used for secure computation: (1) employing CPU Trusted Execution Environments (TEEs) like AMD SEV, Intel SGX, or ARM TrustZone, and (2) utilizing emerging cryptographic methods like Fully Homomorphic Encryption (FHE) with libraries such as HElib, Microsoft SEAL, and PALISADE. To enhance computation, GPUs are often employed. However, using GPUs to accelerate secure computation introduces challenges addressed in three works.

In the first work, we tackle GPU acceleration for secure computation with CPU TEEs. While TEEs perform computations on confidential data, extending their capabilities to GPUs …

Bringing "Virtual" To "Reality": Enhancing Security And Usability On Vr System And Applications, Huadi Zhu

Computer Science and Engineering Dissertations - Archive

With the rapid advancements in computer science, electronics, optics, and related fields, virtual reality (VR) gradually penetrates into our daily lives, and is predicted to become a core technology in the near future. Despite its potentials, however, existing designs and solutions for VR applications remain at the infant stage, introducing limited usability and efficiency for real-world users. Besides, the increasing prevalence of VR presents new security and privacy threats due to the vast amount of information stored in or accessible through VR devices. To bridge this gap, we exploit and combine techniques from computer science and human biology, as well …

Test-Time Backdoor Attack Using Universal Perturbation, Jesse Alexander Smith

Browse all Theses and Dissertations

The rapid growth and widespread reliance on machine learning (ML) systems across critical applications such as healthcare, autonomous driving, and cybersecurity have un- derscored their transformative potential and heightened their susceptibility to adversarial attacks and vulnerabilities. This thesis investigates vulnerabilities in ML models, focusing on backdoor attacks, including naive backdoor attack, feature collision backdoor attack, hidden trigger backdoor attack, and test-time backdoor attack using universal perturbation technique. These methodologies demonstrate how adversaries can automate and conceal malicious behaviors to achieve specific objectives, posing significant challenges to ML model integrity and trustworthiness. The research provides a comprehensive analysis of the theoretical …

A Trusted Adversarial Ml Countermeasure Approach For Secure And Resilient Ai-Driven Hardware Trojan Detection, Mohammed G M Alkurdi

Browse all Theses and Dissertations

Semiconductor microelectronics Integrated Circuits (ICs) are increasingly integrated into critical life applications including medical, aerospace, and Internet of things. Their increasing importance as a technology gave rise to critical concerns regarding their security. This has led to the focus of the research community on hardware Trojans, which are malicious modifications to the ICs with undesirable outcomes. Their detection is becoming increasingly critical, with many researchers proposing methods to do so such as reverse engineering, logic testing, and side-channel analysis. Many of these proposals utilize machine learning methods to detect these malicious modifications with high accuracy and confidence. However, machine learning …

A Lightweight Machine-Learning Framework For Enhancing Security In Iot Blockchain Networks, Charles Connor Rawlins

Doctoral Dissertations

"Blockchain is one of the fastest technologies that rivals the Internet in terms of adoption speed. This security method is applicable to data-centric environments for validating data in the presence of faults. However, traditional blockchain implementation introduces bottlenecks with computationally intense security measures to prevent malicious spam and resolve conflicts. This dissertation explores a new direction for blockchain technology that allows limited nodes, like IoT devices, to make independent decisions with compressed knowledge of past blockchain history through the use of machine-learning for active decisions (or the first machine-intelligent blockchain protocol). Proposing to introduce machine-intelligence into the rapidly evolving paradigm …

A Framework For Scientific Data Indexing, Searching And Sharing, Apoorva Mohite

Master's Projects

Scientific data continues to grow. Wildfire simulation experiments performed by the WIRC team at SJSU have generated over 138 TB of data so far and it is expected to keep growing. It becomes difficult for researchers to search through that data to find the data of their interest. This data is stored on an HPC cluster that external users do not have access to. The WIRC team also conducts experiments and publishes their research, but the size of data makes it difficult to share these datasets. This project introduces a novel solution to indexing scientific data, searching through the data …

Lsav: Lightweight Source Address Validation In Sdn To Counteract Ip Spoofing-Based Ddos Attacks, Ali̇ Karakoç, Fati̇h Alagöz

Turkish Journal of Electrical Engineering and Computer Sciences

In this paper, we propose a design to detect and prevent IP spoofing-based distributed denial of service (DDoS) attacks on software-defined networks (SDNs). DDoS attacks are still one of the significant problems for internet service providers (ISPs) and individual users. These attacks can disrupt customer services by targeting the availability of the system, and in some cases, they can completely shut down the target infrastructure. Protecting the system against DDoS attacks is therefore crucial for ensuring the reliability and availability of internet services. To address this problem, we propose a lightweight source address validation (LSAV) framework that leverages the flexibility …